Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
File:                     B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (raw, json)
Hash identifier:          EOOyEemvSCtMoGoZHm5TFDc+5MAWjIHVtxA7v3CDPt4=
Subject key identifier:   D3:D5:EA:B0:E9:50:F0:E2:61:BD:1D:FD:C6:DC:F5:14:4D:A8:05:07
Certificate issuer:       /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial:       02BA
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
Signing time:             Mon 28 Sep 2026 03:51:16 +0000
ROA not before:           Mon 28 Sep 2026 03:51:16 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     19905
IP address blocks:        119.15.0.0/22 maxlen: 24
                          119.15.4.0/22 maxlen: 24
                          119.15.8.0/24 maxlen: 24
                          119.15.9.0/24 maxlen: 24
                          119.15.10.0/24 maxlen: 24
                          119.15.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
                          rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
        Validity
            Not Before: Sep 28 03:51:16 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ab9e434-2807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:84:30:68:8f:ce:78:72:a3:89:29:56:d0:95:
                    a5:c8:fa:c5:6b:02:c5:78:3d:89:3c:fc:87:84:9b:
                    1e:20:23:65:95:10:d1:f1:dd:3f:26:03:40:3e:94:
                    36:8a:a5:a0:dd:eb:29:bc:4f:8d:c7:b5:70:33:87:
                    53:80:2b:17:0c:38:ba:99:2e:8f:d7:f5:d1:3f:b8:
                    7c:8c:a5:0f:b8:15:6f:6e:4e:fb:8d:3a:7f:99:cd:
                    c9:8a:10:66:19:dd:4c:84:ea:ec:4e:b1:6e:23:db:
                    6a:8e:df:7b:45:ce:0d:35:0f:8e:7d:6b:de:b4:c1:
                    7b:bc:cb:4e:1d:46:d8:dd:b3:9e:3d:2b:e0:fe:3d:
                    75:5b:e2:6e:60:58:d0:f7:c9:ca:23:ca:1e:b1:28:
                    56:d0:5f:59:30:0b:8b:a8:e6:eb:0a:ec:b4:2b:bd:
                    69:99:8b:07:91:d4:59:99:7f:2a:ca:68:c3:a0:82:
                    89:55:75:fe:cd:e7:81:7f:cb:33:e4:e8:98:af:4e:
                    1a:49:2e:14:d2:b4:0c:f3:d1:1b:da:64:22:0d:e4:
                    5d:89:3f:8b:59:a4:e1:ae:bb:b3:db:18:9e:58:f0:
                    ec:59:a2:a9:be:89:8d:49:f4:25:b4:87:6b:69:77:
                    18:9b:84:40:1b:9d:9a:0f:61:8a:7b:87:76:be:33:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D5:EA:B0:E9:50:F0:E2:61:BD:1D:FD:C6:DC:F5:14:4D:A8:05:07
            X509v3 Authority Key Identifier:
                keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.0.0-119.15.10.255
                  119.15.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:6f:30:8c:0c:3d:b8:06:61:57:de:5c:45:5a:e7:b5:e5:
         6a:8d:7d:b8:04:c7:59:9c:80:69:70:0c:f4:8d:fd:31:99:25:
         cd:d7:a4:87:1c:0b:9b:5d:6a:4f:3c:45:f8:92:3b:57:f6:17:
         c9:5b:05:f5:c4:13:fa:fe:4b:c6:da:b2:21:ec:ae:24:19:91:
         d7:08:80:57:ea:28:2c:6d:d1:99:8b:53:02:65:f2:94:fa:c1:
         8c:fe:5b:04:69:de:8d:ac:0b:4e:c6:1e:26:00:5a:8d:ba:82:
         a7:6f:28:53:94:28:a1:89:78:d3:e9:c0:ec:64:31:8a:de:79:
         89:75:cb:40:45:26:a1:5e:3e:6d:f6:9f:7b:8a:7d:57:a9:8c:
         60:08:b6:41:90:a0:89:72:af:e7:e4:7e:16:e4:ba:73:f6:75:
         79:eb:bd:e0:ff:e4:7d:5d:4d:02:08:53:d3:9c:ac:ad:da:95:
         b4:8e:59:b8:1b:d0:58:b8:2c:02:e8:10:b4:8b:9d:d0:24:d5:
         90:db:11:dd:63:ab:8f:a9:4d:db:33:3a:ef:91:92:41:89:98:
         18:1e:93:cd:35:f1:a7:9a:ac:2e:a3:62:e4:b3:ea:df:ca:8f:
         ee:84:9a:45:ff:e3:e2:b8:64:56:8c:a2:dd:6e:94:55:63:a8:
         8d:4f:f4:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD
NkM1QjhENkQwHhcNMjYwOTI4MDM1MTE2WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI5ZTQzNC0yODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlYQwaI/OeHKjiSlW0JWlyPrFawLFeD2JPPyHhJseICNllRDR8d0/JgNAPpQ2
iqWg3espvE+Nx7VwM4dTgCsXDDi6mS6P1/XRP7h8jKUPuBVvbk77jTp/mc3JihBm
Gd1MhOrsTrFuI9tqjt97Rc4NNQ+OfWvetMF7vMtOHUbY3bOePSvg/j11W+JuYFjQ
98nKI8oesShW0F9ZMAuLqObrCuy0K71pmYsHkdRZmX8qymjDoIKJVXX+zeeBf8sz
5OiYr04aSS4U0rQM89Eb2mQiDeRdiT+LWaThrruz2xieWPDsWaKpvomNSfQltIdr
aXcYm4RAG52aD2GKe4d2vjMv3wIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFNPV6rDp
UPDiYb0d/cbc9RRNqAUHMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5
MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODY0QTcvQzgwNTVGRDZDOTI1MTFFRDgwOTM2MTQ5QzRGOUFFMDIvQjM0RDFBMjZG
NkM4MTFFRUJDNEJFMDBCQzRGOUFFMDIucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ
BAIAATATMAsDAwB3DwMEAHcPCgMEAHcPDTANBgkqhkiG9w0BAQsFAAOCAQEAPsZv
MIwMPbgGYVfeXEVa57Xlao19uATHWZyAaXAM9I39MZklzdekhxwLm11qTzxF+JI7
V/YXyVsF9cQT+v5LxtqyIeyuJBmR1wiAV+ooLG3RmYtTAmXylPrBjP5bBGnejawL
TsYeJgBajbqCp28oU5QooYl40+nA7GQxit55iXXLQEUmoV4+bfafe4p9V6mMYAi2
QZCgiXKv5+R+FuS6c/Z1eeu94P/kfV1NAghT05ysrdqVtI5ZuBvQWLgsAugQtIud
0CTVkNsR3WOrj6lN2zM675GSQYmYGB6TzTXxp5qsLqNi5LPq38qP7oSaRf/j4rhk
Voyi3W6UVWOojU/06Q==
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:00:03 2026 by rpki-client