Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/0D08636C75D611EB920B5162C4F9AE02.roa
File:                     0D08636C75D611EB920B5162C4F9AE02.roa (raw, json)
Hash identifier:          JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=
Subject key identifier:   06:96:8A:3A:5D:A5:21:C3:F6:4D:37:8E:56:40:B5:94:D1:78:D5:84
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1AFB
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/0D08636C75D611EB920B5162C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:32:51 +0000
ROA not before:           Thu 30 Jul 2026 17:32:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135026
IP address blocks:        119.8.16.0/24 maxlen: 24
                          119.8.17.0/24 maxlen: 24
                          119.8.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 16:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6907 (0x1afb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jul 30 17:32:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b8ac3-c442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:74:96:b9:fa:1f:0f:f4:6f:23:05:52:40:
                    2b:0a:b8:9c:04:07:2e:e0:d5:76:96:e5:be:12:96:
                    48:9f:59:9c:95:04:07:2d:23:92:fe:57:2f:79:0b:
                    ea:7b:9a:2f:8b:8f:29:e1:dd:21:ce:18:ac:c5:57:
                    46:20:43:ce:aa:d8:09:78:f8:d2:4b:69:6a:18:2a:
                    8b:58:06:6e:83:84:67:21:c8:ee:ea:7e:ef:bc:38:
                    e9:35:86:36:fd:02:97:ad:cb:4c:71:f5:c1:3e:94:
                    e3:cc:6e:dc:90:d5:4d:7b:78:97:a6:d0:0c:9d:28:
                    84:c7:f3:a6:e7:25:74:42:03:b6:2d:fd:73:bf:c2:
                    6f:44:f3:d5:0a:13:7d:ec:40:d2:39:d1:b4:ea:b3:
                    7f:dd:a7:91:8c:19:6c:ec:f9:bf:02:d2:a6:9a:c1:
                    8c:ed:ce:1d:32:cc:eb:4d:de:99:83:9d:72:bf:b5:
                    64:50:df:96:b6:bc:a7:62:5e:95:31:14:30:1e:d1:
                    f0:21:e5:5c:85:9f:c4:de:1c:78:20:96:5e:76:f1:
                    22:65:d7:fa:5e:b0:22:6e:e7:7f:5f:2d:40:9f:31:
                    7f:8c:50:90:5f:b5:5f:f2:f1:0d:5d:77:de:75:31:
                    35:1d:44:31:7a:0c:10:49:e2:e8:34:50:f0:f8:d0:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:8A:3A:5D:A5:21:C3:F6:4D:37:8E:56:40:B5:94:D1:78:D5:84
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/0D08636C75D611EB920B5162C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.8.16.0/23
                  119.8.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:3f:00:04:d9:98:65:7c:eb:77:99:55:b9:d1:fe:03:c6:
         86:3a:e8:1f:e3:f2:db:12:af:cf:45:41:cd:63:cf:2d:69:e5:
         6a:82:d7:83:09:4a:bc:8f:5f:1b:00:87:4b:7b:b9:5c:8d:ad:
         0f:83:e5:cb:2b:f2:26:30:ee:11:58:1b:96:69:dc:bf:11:8b:
         64:0b:7b:f0:f1:30:8e:37:f0:3a:56:9f:8b:db:65:1c:00:e5:
         8b:d1:e7:ba:4f:7a:e5:6f:92:ea:ac:17:66:f3:55:0d:eb:de:
         31:88:98:3f:96:9f:66:6a:1c:8a:f4:d5:82:70:53:ae:c6:7b:
         4b:ee:77:2d:14:bc:e3:c9:33:40:3f:64:96:e0:3b:c9:f7:cd:
         54:b4:d0:18:5e:48:03:4b:a4:84:01:e7:c8:97:f6:09:11:51:
         42:c7:85:17:cd:cf:5d:eb:17:30:67:db:a4:b2:5b:dd:97:3c:
         0f:fd:8f:6b:97:01:2f:dc:c6:5f:e8:53:d8:78:2e:3b:0a:e7:
         48:34:62:f5:20:95:9b:ee:a5:fd:cd:03:93:d0:0b:0a:b9:68:
         50:87:34:ef:dc:4e:02:70:0d:d6:f4:ba:83:5c:6a:fb:aa:a2:
         80:bc:ea:b5:f2:a1:95:f0:0a:d2:62:f3:6e:93:ca:3b:c5:2a:
         c1:5d:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:17:10 2026 by rpki-client