Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/1D79B286505111F1A6C3F8BB94833773.roa
File:                     1D79B286505111F1A6C3F8BB94833773.roa (raw, json)
Hash identifier:          3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=
Subject key identifier:   D9:DE:24:49:29:71:A3:D1:3C:AB:B7:45:86:7D:6F:EA:FA:E3:3D:98
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       0123
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/1D79B286505111F1A6C3F8BB94833773.roa
Signing time:             Fri 15 May 2026 11:28:43 +0000
ROA not before:           Fri 15 May 2026 11:28:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38193
IP address blocks:        119.160.214.0/24 maxlen: 24
                          119.160.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: May 15 11:28:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a07036b-e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:d2:09:c5:75:89:3d:12:66:e0:19:95:64:
                    64:99:bd:79:fe:1c:c7:3e:90:f9:4f:3e:c1:e6:82:
                    b7:4c:2a:b8:72:88:7b:44:31:89:8b:80:a5:5f:61:
                    49:39:5a:86:72:ae:41:a9:f6:93:cf:d4:76:5e:4f:
                    9e:42:71:6c:0c:4b:cc:2a:c7:47:04:89:dd:81:1e:
                    45:3b:7f:0b:f6:45:09:fb:19:00:f6:79:74:b9:bf:
                    31:f3:e0:96:4c:16:cf:d7:7e:e2:82:28:0b:07:79:
                    f9:62:96:0d:8c:da:6a:7d:fd:5e:9a:72:91:34:0b:
                    c3:6c:38:10:0d:a9:1b:2b:dd:ad:2a:08:48:a8:ff:
                    3a:00:6a:5f:93:28:b7:4e:65:c4:46:14:95:cc:d8:
                    06:bd:0e:fd:65:8f:43:dc:50:69:ce:54:74:df:56:
                    39:e5:73:9a:d0:92:36:28:5b:e9:a8:29:44:b4:91:
                    6b:07:12:5b:9b:b4:30:a9:8b:c9:a6:63:22:2b:10:
                    94:3c:c8:08:0e:70:d5:b2:8b:48:90:1c:46:31:93:
                    42:58:65:41:46:64:68:0c:bd:b3:de:97:64:31:87:
                    a0:cd:5f:1d:c5:83:ec:29:7b:d6:a3:9e:17:23:19:
                    e0:d2:4c:eb:f2:85:b6:81:36:24:2a:9c:0b:c4:c8:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DE:24:49:29:71:A3:D1:3C:AB:B7:45:86:7D:6F:EA:FA:E3:3D:98
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/1D79B286505111F1A6C3F8BB94833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.160.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:4a:c8:d9:7c:bc:f9:17:ef:dc:27:8f:70:6d:f0:24:d1:b7:
         c4:63:1e:87:a7:0b:3a:0e:88:c2:23:73:55:3d:71:77:05:2c:
         ec:e7:75:07:57:ce:7c:71:67:da:55:57:ce:48:b4:e2:c3:e9:
         ae:d6:72:aa:4c:19:05:65:f1:97:5a:73:30:56:ca:74:8f:36:
         e0:c6:21:1b:bc:b8:67:4b:cf:ea:41:26:03:e4:c1:82:fc:88:
         4d:d2:b8:d4:13:1e:b0:3e:f0:58:3a:45:d8:c3:19:46:54:60:
         a4:de:9b:44:d9:ee:c8:f6:6c:f2:bb:b2:0c:21:d6:ef:54:ee:
         bc:aa:ba:a6:19:2c:72:a4:49:a4:7e:90:9e:e7:df:18:1c:d6:
         d9:e5:15:19:ab:c3:98:72:bf:f7:14:61:a7:90:ed:fd:7b:a0:
         3d:a0:f8:7e:fc:3f:2c:73:a9:cb:80:b9:cf:64:bf:41:c1:43:
         65:f2:70:de:c1:fd:e4:97:01:ab:4a:4c:9d:60:57:5e:50:1f:
         51:1a:7a:12:26:a1:b7:9c:54:b5:26:fc:d2:de:b4:be:0f:b4:
         f5:ac:db:44:f6:e5:cb:2e:ec:16:f1:10:89:a4:d7:ba:6a:bc:
         4e:4a:8b:25:23:55:23:a8:27:4b:b2:0e:4a:d6:a0:b5:69:96:
         9d:4b:82:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1
MTNERjZCRDcwHhcNMjYwNTE1MTEyODQzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA3MDM2Yi1lMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukfSCcV1iT0SZuAZlWRkmb15/hzHPpD5Tz7B5oK3TCq4coh7RDGJi4ClX2FJ
OVqGcq5BqfaTz9R2Xk+eQnFsDEvMKsdHBIndgR5FO38L9kUJ+xkA9nl0ub8x8+CW
TBbP137igigLB3n5YpYNjNpqff1emnKRNAvDbDgQDakbK92tKghIqP86AGpfkyi3
TmXERhSVzNgGvQ79ZY9D3FBpzlR031Y55XOa0JI2KFvpqClEtJFrBxJbm7QwqYvJ
pmMiKxCUPMgIDnDVsotIkBxGMZNCWGVBRmRoDL2z3pdkMYegzV8dxYPsKXvWo54X
Ixng0kzr8oW2gTYkKpwLxMiC7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNneJEkp
caPRPKu3RYZ9b+r64z2YMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5
MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjA4QTUvRDE1MDMxMzZDOTFCMTFFRjg4N0Q2RjJDQzRGOUFFMDIvMUQ3OUIyODY1
MDUxMTFGMUE2QzNGOEJCOTQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBd6DWMA0GCSqGSIb3DQEBCwUAA4IBAQCFSsjZfLz5F+/cJ49wbfAk
0bfEYx6Hpws6DojCI3NVPXF3BSzs53UHV858cWfaVVfOSLTiw+mu1nKqTBkFZfGX
WnMwVsp0jzbgxiEbvLhnS8/qQSYD5MGC/IhN0rjUEx6wPvBYOkXYwxlGVGCk3ptE
2e7I9mzyu7IMIdbvVO68qrqmGSxypEmkfpCe598YHNbZ5RUZq8OYcr/3FGGnkO39
e6A9oPh+/D8sc6nLgLnPZL9BwUNl8nDewf3klwGrSkydYFdeUB9RGnoSJqG3nFS1
JvzS3rS+D7T1rNtE9uXLLuwW8RCJpNe6arxOSoslI1UjqCdLsg5K1qC1aZadS4JE
-----END CERTIFICATE-----
Generated at Thu May 21 12:19:27 2026 by rpki-client