Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa
File:                     A865A1925B1611F083088661C4F9AE02.roa (raw, json)
Hash identifier:          UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=
Subject key identifier:   2C:B5:17:75:DE:1F:C0:94:4C:3D:96:92:DC:AD:6B:C8:92:CB:53:B9
Certificate issuer:       /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial:       1AFD
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:34:48 +0000
ROA not before:           Thu 30 Jul 2026 17:34:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     141180
IP address blocks:        119.13.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6909 (0x1afd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
        Validity
            Not Before: Jul 30 17:34:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b8b38-2d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:9d:df:9e:98:d1:92:09:cb:23:03:9c:c0:
                    6f:8a:11:85:8d:00:78:61:51:ec:42:bd:fc:1e:05:
                    ff:1a:bb:eb:69:6b:8c:e9:9c:1d:dd:03:47:cf:89:
                    f3:6f:b2:27:65:68:2a:30:ed:24:b5:1d:f6:2e:14:
                    6a:29:77:de:a9:c0:36:90:af:0f:c9:ae:de:92:7a:
                    3f:02:95:d8:59:70:f5:ad:8b:6c:f9:9e:79:47:78:
                    cd:1e:6e:df:83:f0:31:f6:a3:f9:06:f3:5f:d7:3c:
                    81:ef:ba:08:72:db:f8:88:08:d0:bf:da:71:6c:81:
                    4b:41:f3:2c:fc:bd:19:43:0b:f7:11:80:d9:6a:e0:
                    a2:e0:ec:ab:11:ce:9e:f4:63:e5:5d:95:fb:58:d6:
                    e5:65:7b:5e:e8:7a:e7:5f:8c:f5:fb:d0:74:8a:12:
                    eb:9f:f1:39:4e:a4:4c:cb:31:68:54:84:5e:e2:be:
                    ea:21:ff:4c:1b:59:ae:53:57:e5:05:bc:d9:7f:ff:
                    e1:02:e0:78:eb:9c:a4:62:f7:ce:90:b9:46:36:9e:
                    6b:66:c6:20:a0:1d:52:78:cf:a5:31:5e:03:48:89:
                    9f:a6:2d:6e:2f:45:62:66:00:d0:31:7a:87:6a:4b:
                    30:ef:6e:9d:11:86:36:91:a6:a5:75:96:15:f2:ab:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:17:75:DE:1F:C0:94:4C:3D:96:92:DC:AD:6B:C8:92:CB:53:B9
            X509v3 Authority Key Identifier:
                keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.13.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:55:79:06:08:7b:78:90:3b:ed:b6:15:db:c8:3a:fa:56:98:
         95:12:43:48:5a:d9:98:6a:c2:5a:f5:d2:b8:c6:c0:ef:93:0b:
         0d:a9:72:a5:69:ff:07:a8:20:f2:88:e7:61:ae:de:b3:f1:5a:
         27:9e:25:aa:ef:1b:ba:c3:89:2e:62:e4:f0:a1:d5:01:d8:5d:
         5f:cb:2b:97:f5:3d:a2:26:6e:67:0b:26:84:41:b7:9e:04:6b:
         aa:da:ba:bf:83:2b:2c:89:12:4c:8f:d6:5a:3b:ec:d0:bf:76:
         2d:aa:bc:8f:e1:fc:74:49:e4:90:1e:98:ab:b8:8b:f4:f5:0f:
         44:bb:f6:93:a9:57:83:02:4f:fb:cf:2a:2a:94:47:6a:71:4f:
         2f:71:51:d2:86:fe:3b:e1:87:3c:5b:e2:df:86:0f:22:a1:ec:
         62:fb:9e:f1:18:35:2f:55:97:c4:47:f1:c3:35:5d:90:3a:c7:
         23:0e:a7:8a:a9:30:f5:3f:a1:22:88:ec:f0:f3:09:ef:03:16:
         a7:b1:29:3e:1d:3e:ca:13:40:08:2e:a2:24:2b:1c:cc:5f:80:
         e0:55:fd:31:d7:85:8f:b9:57:5c:04:cb:d3:03:73:a1:04:39:
         f5:b5:12:2a:72:a4:78:48:a5:bd:93:6e:7c:3f:bd:00:2f:fc:
         f2:13:8d:ca
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2
NDI5RDg4QjgwHhcNMjYwNzMwMTczNDQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiOGIzOC0yZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1tOd356Y0ZIJyyMDnMBvihGFjQB4YVHsQr38HgX/GrvraWuM6Zwd3QNHz4nz
b7InZWgqMO0ktR32LhRqKXfeqcA2kK8Pya7ekno/ApXYWXD1rYts+Z55R3jNHm7f
g/Ax9qP5BvNf1zyB77oIctv4iAjQv9pxbIFLQfMs/L0ZQwv3EYDZauCi4OyrEc6e
9GPlXZX7WNblZXte6HrnX4z1+9B0ihLrn/E5TqRMyzFoVIRe4r7qIf9MG1muU1fl
BbzZf//hAuB465ykYvfOkLlGNp5rZsYgoB1SeM+lMV4DSImfpi1uL0ViZgDQMXqH
aksw726dEYY2kaaldZYV8qtmBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCy1F3Xe
H8CUTD2Wktyta8iSy1O5MB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5
NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0U2NzgvNzI1ODNBRkE2OTU3MTFFOEE0MkJFNjgwQzRGOUFFMDIvQTg2NUExOTI1
QjE2MTFGMDgzMDg4NjYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdw2gMA0GCSqGSIb3DQEBCwUAA4IBAQDVVXkGCHt4kDvtthXbyDr6
VpiVEkNIWtmYasJa9dK4xsDvkwsNqXKlaf8HqCDyiOdhrt6z8VonniWq7xu6w4ku
YuTwodUB2F1fyyuX9T2iJm5nCyaEQbeeBGuq2rq/gyssiRJMj9ZaO+zQv3YtqryP
4fx0SeSQHpiruIv09Q9Eu/aTqVeDAk/7zyoqlEdqcU8vcVHShv474Yc8W+Lfhg8i
oexi+57xGDUvVZfER/HDNV2QOscjDqeKqTD1P6EiiOzw8wnvAxansSk+HT7KE0AI
LqIkKxzMX4DgVf0x14WPuVdcBMvTA3OhBDn1tRIqcqR4SKW9k258P70AL/zyE43K
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:09 2026 by rpki-client