Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/AE6589F4A9A911F085996109C4F9AE02.roa
File:                     AE6589F4A9A911F085996109C4F9AE02.roa (raw, json)
Hash identifier:          VMjb3MZWCyP7dtIEQdIJJxbjwYi7BIOdriJxPWckw18=
Subject key identifier:   AA:93:3C:9C:57:09:CE:4E:CC:AF:EC:85:D9:B7:6A:DD:A5:40:77:44
Certificate issuer:       /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
Certificate serial:       0673
Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/AE6589F4A9A911F085996109C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 23:24:50 +0000
ROA not before:           Mon 06 Jul 2026 23:24:50 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        119.234.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl
                          rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676D4, serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D
        Validity
            Not Before: Jul  6 23:24:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c3941-4266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:02:1d:5a:a7:bd:08:b0:a5:27:13:a6:73:
                    05:d1:0e:04:08:4e:92:b8:e0:a3:3d:66:d8:58:c1:
                    8e:33:ea:70:b1:56:1d:23:50:fa:c4:91:47:6d:da:
                    84:ff:29:25:7b:0d:25:32:12:d3:f8:73:b2:4c:b3:
                    3f:9d:ec:11:4d:1e:5d:1d:ee:a8:f9:55:4b:16:3d:
                    9a:97:55:69:f4:ae:64:02:2c:81:83:c5:93:84:9a:
                    10:23:d5:9c:5d:68:97:98:96:ea:20:67:ce:cc:83:
                    9d:66:36:93:48:14:4f:f4:d8:9d:fa:be:d4:a4:1c:
                    e0:60:b2:7d:31:02:a8:29:15:9d:79:a0:7c:29:4f:
                    b0:be:4b:cc:e6:dd:01:2a:e7:61:1d:46:a1:2c:8a:
                    b3:3c:ed:a6:5b:67:75:a6:0b:c9:bc:13:d8:01:19:
                    ce:24:16:20:10:de:fc:fb:9f:28:82:90:4c:72:8e:
                    f4:5d:e9:72:3c:e5:ad:59:ac:ed:b0:76:8b:3f:03:
                    97:22:4c:30:09:1a:18:08:85:c1:73:2d:9a:f8:47:
                    25:72:30:9e:c3:54:58:4e:40:80:6e:99:00:21:95:
                    86:c2:ed:c2:f7:87:0c:5d:c3:28:46:68:bb:39:09:
                    11:1a:5a:2b:ff:0d:ac:20:01:cb:56:88:c7:38:90:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:93:3C:9C:57:09:CE:4E:CC:AF:EC:85:D9:B7:6A:DD:A5:40:77:44
            X509v3 Authority Key Identifier:
                keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/AE6589F4A9A911F085996109C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.234.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:39:f8:2d:06:2a:86:76:73:11:eb:b4:3b:98:a9:cd:4d:
         52:87:83:cd:54:71:49:6a:fa:aa:49:68:83:3b:49:45:7c:66:
         6d:be:3e:3b:d6:d6:cd:48:d9:85:37:91:d0:5e:d5:2b:11:68:
         62:21:76:8b:74:cc:79:a9:40:f6:28:84:a6:f8:b7:f2:25:33:
         0a:96:e7:0c:e1:e7:ff:9a:0b:d6:b1:b8:99:2c:a5:65:77:15:
         e3:37:0b:45:de:93:b3:77:2b:9d:b7:eb:4b:43:67:01:d6:4c:
         e4:e4:13:2f:b8:f9:f0:01:d8:eb:38:44:58:d7:37:3a:96:52:
         fb:9d:66:23:fa:6c:fc:0f:8a:0c:ac:bc:ad:ae:38:ee:c9:49:
         6e:e0:0b:c1:47:7f:78:d3:4b:f3:3b:1e:dd:ac:c5:f6:50:72:
         b7:33:6b:17:42:28:f2:d6:e2:9a:3b:11:24:b9:dc:b1:c8:9c:
         a8:f6:3c:d0:74:98:13:f9:46:64:e2:11:82:d2:e0:f7:12:70:
         f7:bc:9e:3d:68:8e:81:9e:70:1b:59:93:5f:f3:48:ac:d2:68:
         6f:4f:5e:4f:f5:3d:14:bd:bc:23:68:d7:82:9f:c7:71:da:d4:
         e2:44:fe:8e:e8:0b:5f:21:9a:b7:10:c2:40:60:14:98:d1:5d:
         41:3b:6a:56
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2RDQxMTAvBgNVBAUTKDgzNUE2Qzk2QjIwOTI0QzdFNUQ4RjEyRjA2REI5REQy
M0UyNTJGNUQwHhcNMjYwNzA2MjMyNDUwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMzk0MS00MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArikCHVqnvQiwpScTpnMF0Q4ECE6SuOCjPWbYWMGOM+pwsVYdI1D6xJFHbdqE
/yklew0lMhLT+HOyTLM/newRTR5dHe6o+VVLFj2al1Vp9K5kAiyBg8WThJoQI9Wc
XWiXmJbqIGfOzIOdZjaTSBRP9Nid+r7UpBzgYLJ9MQKoKRWdeaB8KU+wvkvM5t0B
KudhHUahLIqzPO2mW2d1pgvJvBPYARnOJBYgEN78+58ogpBMco70XelyPOWtWazt
sHaLPwOXIkwwCRoYCIXBcy2a+EclcjCew1RYTkCAbpkAIZWGwu3C94cMXcMoRmi7
OQkRGlor/w2sIAHLVojHOJCvxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKqTPJxX
Cc5OzK/shdm3at2lQHdEMB8GA1UdIwQYMBaAFINabJayCSTH5djxLwbbndI+JS9d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZENC9FMTdFQ0UyRUUy
RTYxMUVCQjc1OTZBNzVDNEY5QUUwMi9nMXBzbHJJSkpNZmwyUEV2QnR1ZDBqNGxM
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2cxcHNscklKSk1mbDJQRXZCdHVkMGo0bEwxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njc2RDQvRTE3RUNFMkVFMkU2MTFFQkI3NTk2QTc1QzRGOUFFMDIvQUU2NTg5RjRB
OUE5MTFGMDg1OTk2MTA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAd+r/MA0GCSqGSIb3DQEBCwUAA4IBAQCtXzn4LQYqhnZzEeu0O5ip
zU1Sh4PNVHFJavqqSWiDO0lFfGZtvj471tbNSNmFN5HQXtUrEWhiIXaLdMx5qUD2
KISm+LfyJTMKlucM4ef/mgvWsbiZLKVldxXjNwtF3pOzdyudt+tLQ2cB1kzk5BMv
uPnwAdjrOERY1zc6llL7nWYj+mz8D4oMrLytrjjuyUlu4AvBR39400vzOx7drMX2
UHK3M2sXQijy1uKaOxEkudyxyJyo9jzQdJgT+UZk4hGC0uD3EnD3vJ49aI6BnnAb
WZNf80is0mhvT15P9T0UvbwjaNeCn8dx2tTiRP6O6AtfIZq3EMJAYBSY0V1BO2pW
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:48 2026 by rpki-client