Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
File:                     FD86FDF6707311F1B807F94B77A30FBC.roa (raw, json)
Hash identifier:          23CJGWbt8fyB3OpvRKbgICrMhEM+zuFh6yidaG3uesk=
Subject key identifier:   9B:88:7E:09:14:D7:D1:4E:10:3B:CC:AC:B9:10:56:B2:1F:F8:CF:38
Certificate issuer:       /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Certificate serial:       69
Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
Signing time:             Sun 04 Oct 2026 06:58:11 +0000
ROA not before:           Sun 04 Oct 2026 06:58:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45905
IP address blocks:        119.15.156.0/24 maxlen: 24
                          119.15.157.0/24 maxlen: 24
                          119.15.158.0/24 maxlen: 24
                          119.15.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
                          rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 05:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
        Validity
            Not Before: Oct  4 06:58:11 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ac1f903-ff97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:62:b2:2e:a0:ff:5b:65:8a:14:4f:a5:cd:15:
                    65:9e:61:d1:d7:0c:77:a7:5a:48:15:fb:b3:e2:cc:
                    58:9e:05:fd:e0:9f:c3:1c:65:c7:5f:4f:a3:ce:3d:
                    8c:31:39:06:d2:35:8b:e4:13:6d:10:9d:bf:7a:4f:
                    ca:ce:69:30:d2:3c:6e:5f:9a:77:36:57:23:5d:52:
                    31:59:43:fc:e6:82:29:61:13:e0:3b:38:f5:6f:4d:
                    ba:46:fb:d0:06:6d:37:08:13:e9:a5:65:4d:d9:a5:
                    dd:8d:57:bc:32:66:68:88:b2:10:53:4b:68:0e:40:
                    7b:86:ac:9a:ca:34:10:59:93:0b:1c:22:73:1c:2f:
                    31:e7:fc:e2:9e:ef:a4:6f:de:65:2a:65:01:dc:3a:
                    26:f9:63:b2:ad:8f:76:a7:89:37:66:79:f3:e1:e5:
                    28:74:20:ed:12:7d:8e:6b:b4:fd:14:2a:e3:fc:30:
                    3d:95:53:0a:98:5b:3f:f5:cb:bc:9d:8a:1d:1a:dd:
                    df:fa:51:c7:b2:90:c8:77:ee:24:3d:51:28:2b:a0:
                    d3:dc:f7:8c:fb:1d:c3:db:3b:17:10:b5:ed:c6:45:
                    4b:f0:66:cb:34:4c:4e:ae:05:38:9a:77:22:55:43:
                    c0:fa:5d:22:c3:55:1a:e9:24:42:af:a7:f8:73:7f:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:7E:09:14:D7:D1:4E:10:3B:CC:AC:B9:10:56:B2:1F:F8:CF:38
            X509v3 Authority Key Identifier:
                keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:30:f1:ae:ef:3c:54:b7:c9:70:64:7a:0b:03:08:47:97:76:
         2f:2a:d0:15:18:7b:76:60:39:ee:97:92:db:ed:89:4b:65:4a:
         c3:8a:11:92:68:f2:f9:f8:95:4f:70:0b:c4:72:4d:03:6b:ad:
         83:65:01:b9:62:24:0e:5e:50:67:d2:57:44:75:e6:20:06:32:
         8a:a5:05:fc:77:85:c2:0e:96:48:aa:2d:8f:46:f5:e8:7e:ce:
         95:23:9d:86:c4:f7:e0:e6:1f:52:9a:f3:f3:06:25:36:7d:b0:
         ce:8a:c0:04:6f:b6:5b:eb:a4:56:0d:d6:56:e4:82:ba:80:c5:
         a9:0b:08:af:d9:6e:b0:23:66:f0:5a:04:20:48:27:34:3e:4b:
         7c:76:6b:f0:fa:cc:4d:f1:87:b0:0a:c0:0d:d4:fa:49:dc:a3:
         37:9d:1b:01:64:28:3a:80:cb:22:d1:8d:7f:36:ac:41:f4:5d:
         52:7c:2a:46:2b:24:61:ad:e5:fc:c7:93:c7:b2:73:aa:ce:10:
         62:85:47:e9:a0:a8:33:4e:1c:45:13:fe:54:d7:57:46:7d:09:
         33:70:59:fc:8b:a2:55:93:14:9a:76:88:bd:a1:98:99:e9:22:
         0f:3e:b8:1c:83:63:2c:a5:3b:cb:93:80:8f:2a:ed:c2:75:f0:
         fd:80:f7:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:39 2026 by rpki-client