Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
File:                     D62511F6C41D11F08D2E621EC4F9AE02.roa (raw, json)
Hash identifier:          knwAy1rtJDWZY4Y6R/yETlWGYWJ5XZIzWNn6IPXqUDM=
Subject key identifier:   96:A8:16:39:A2:0C:E6:CB:29:01:69:D9:EA:47:CE:F3:C7:56:14:BA
Certificate issuer:       /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial:       02B7
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
Signing time:             Mon 28 Sep 2026 03:20:56 +0000
ROA not before:           Mon 28 Sep 2026 03:20:56 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     137471
IP address blocks:        119.15.0.0/22 maxlen: 24
                          119.15.4.0/22 maxlen: 24
                          119.15.8.0/24 maxlen: 24
                          119.15.9.0/24 maxlen: 24
                          119.15.10.0/24 maxlen: 24
                          119.15.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
                          rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
        Validity
            Not Before: Sep 28 03:20:56 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ab9dd18-9637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:54:dd:a3:05:bc:ec:6b:e2:a9:ad:bf:bc:
                    34:49:7b:56:0c:76:b1:e5:7b:86:23:26:72:a9:c9:
                    09:37:2d:70:8d:79:63:d8:6f:b1:12:6a:b8:76:c9:
                    69:06:31:a5:53:e8:63:f4:94:51:c0:e2:4c:2d:86:
                    14:96:6d:14:48:56:fb:af:3e:02:ea:9c:f5:79:ab:
                    3e:0c:f5:cb:d5:20:03:02:31:fd:06:30:8f:17:74:
                    87:bd:63:0d:9a:37:ad:c2:b5:14:c2:aa:de:fe:03:
                    d4:f6:10:3c:6c:b2:1e:0b:1d:3e:82:1b:87:c3:e9:
                    8a:81:96:15:6b:75:89:6b:f7:d0:70:46:fe:95:54:
                    c3:be:f7:e8:b5:62:76:e6:24:f8:62:29:ab:e3:f9:
                    bd:f6:19:ca:40:c5:e2:99:b1:c9:15:48:95:e1:24:
                    3d:fa:12:1c:4c:86:a2:63:b1:2b:5b:73:c0:49:83:
                    8f:82:9a:97:b0:1d:6b:bf:87:fb:1d:4e:9f:53:ec:
                    d6:6a:13:d1:79:45:45:c6:9e:2b:e6:f6:d9:41:da:
                    9f:2e:fe:1e:c4:6f:9a:1c:4a:a7:5f:3a:a8:19:74:
                    b6:21:2e:91:9a:3b:bc:dd:a1:e7:d3:17:34:3f:1b:
                    bf:af:85:69:a2:b4:55:57:80:ef:fc:67:78:34:8e:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A8:16:39:A2:0C:E6:CB:29:01:69:D9:EA:47:CE:F3:C7:56:14:BA
            X509v3 Authority Key Identifier:
                keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.0.0-119.15.10.255
                  119.15.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f3:11:62:de:ce:89:06:aa:07:d6:35:ff:9f:3e:d2:61:45:
         f3:e2:21:59:c3:fe:d5:60:8e:6f:dc:01:d0:5c:1e:78:a7:3d:
         72:ca:e8:15:fd:ca:8a:ac:e2:8f:df:67:26:6f:02:ee:34:37:
         11:75:fb:7b:28:02:67:85:a8:24:b0:dc:91:15:96:86:56:fd:
         4d:03:81:cf:b8:81:ef:c2:77:0a:cb:8a:f8:c5:e7:60:5a:44:
         dd:24:51:6e:4a:3a:b1:65:ba:56:71:80:de:9f:ec:92:48:f1:
         2c:01:90:19:e6:b8:f0:d3:40:ca:fb:92:93:81:7f:55:3e:6a:
         58:b7:09:b3:85:99:7b:2f:23:8d:62:2d:5e:d8:46:c6:a5:98:
         f1:c1:d2:0f:b8:22:04:65:bd:1d:6d:1a:f0:ab:56:94:7b:a7:
         de:d8:0e:66:56:79:05:a8:70:d7:e7:6c:36:69:b4:ec:09:b4:
         76:4e:80:b6:c4:39:f5:77:b2:03:ef:6d:e0:dd:9d:12:3d:ce:
         14:22:af:06:e8:23:4c:7e:f5:94:fd:bc:b2:17:29:75:4e:ea:
         fb:cd:03:8c:0f:2a:05:56:3e:7c:7d:d2:ef:55:96:68:df:68:
         15:6d:19:77:34:af:ba:26:d7:b5:2c:0c:37:89:35:86:1c:1e:
         bb:7b:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:24:38 2026 by rpki-client