Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/F5223048791711F195779BF068A30FBC.roa
File:                     F5223048791711F195779BF068A30FBC.roa (raw, json)
Hash identifier:          xe2EZMVbnxYIb+bVcKPMMf7o2pQWJ5gKMVCawEBa/98=
Subject key identifier:   B5:91:DF:AE:6E:3B:73:4E:D2:25:D1:06:A1:D7:A9:07:49:32:D5:1C
Certificate issuer:       /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Certificate serial:       3583
Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/F5223048791711F195779BF068A30FBC.roa
Signing time:             Fri 07 Aug 2026 07:02:22 +0000
ROA not before:           Fri 07 Aug 2026 07:02:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45148
IP address blocks:        119.252.208.0/23 maxlen: 24
                          119.252.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
                          rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13699 (0x3583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
        Validity
            Not Before: Aug  7 07:02:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7582fd-9c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:9b:b2:e0:ce:54:00:f8:0f:4d:cf:e9:25:
                    49:86:f0:0e:43:c2:41:fd:c4:56:e7:10:17:14:8d:
                    2f:b4:7e:bb:b2:15:aa:e2:6e:4e:8d:3d:1e:2d:8c:
                    01:0b:49:5a:0b:47:80:21:dc:fe:0f:4a:7d:eb:80:
                    12:b0:73:11:02:40:42:c9:e5:e0:45:2f:d0:41:1a:
                    90:b3:97:5b:09:1e:17:23:6b:a5:d2:00:ce:b2:3a:
                    49:c7:c5:af:b6:cd:1a:4a:df:90:62:0d:65:5c:bb:
                    07:18:e8:04:09:97:79:6f:9d:8a:99:84:08:04:b0:
                    87:51:21:9d:c8:2d:79:de:db:46:c2:61:98:ff:76:
                    70:f3:8e:e9:1e:ee:e7:3b:d1:96:95:b2:83:8e:29:
                    f3:46:38:2a:19:61:21:4c:80:c0:21:05:09:30:08:
                    ea:17:ec:16:e9:a2:b2:d2:8a:f3:79:a1:c4:84:5e:
                    20:32:2f:46:60:95:de:8c:e8:24:9d:db:53:92:1e:
                    81:26:8d:bb:85:3c:82:ed:e7:e1:3d:a0:23:8d:7e:
                    70:2d:5e:a2:01:69:99:bf:cb:15:72:2f:cd:f9:4d:
                    f8:16:a2:c2:4a:2d:9a:9b:0c:b0:8a:77:5c:db:e9:
                    a9:b0:55:f6:6b:9e:7d:c1:33:0f:93:d0:3a:e9:7d:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:DF:AE:6E:3B:73:4E:D2:25:D1:06:A1:D7:A9:07:49:32:D5:1C
            X509v3 Authority Key Identifier:
                keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/F5223048791711F195779BF068A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.208.0/23
                  119.252.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:fd:c6:e6:8c:e0:da:d8:ec:c5:98:37:82:c1:9f:ef:58:81:
         0d:9a:f9:b2:44:4d:91:dd:ec:be:0f:d5:42:09:aa:2a:50:59:
         9e:6b:b7:ee:d4:2e:4c:7d:57:51:a8:3d:e2:44:5f:1c:31:6c:
         b8:34:2b:10:62:cd:43:4e:2f:9b:7d:eb:5a:7d:56:c4:b0:cb:
         3d:ce:5e:1d:af:f7:9d:25:e2:22:17:7b:0f:a5:e8:0c:95:1a:
         e1:de:7f:0a:ae:28:3b:e0:82:92:2e:31:fb:b6:a0:19:b5:68:
         d6:00:c1:4e:07:4e:ff:93:a5:55:c7:2c:17:f1:f5:65:87:5c:
         5d:01:9a:01:73:c2:be:4c:df:0b:2d:2a:73:ba:b0:a0:4d:65:
         a7:e9:26:78:77:00:05:72:f5:08:7a:23:7d:0b:3b:9e:63:ae:
         51:cc:ba:45:33:ca:c7:28:a5:8e:fc:ce:1c:92:40:33:5b:f9:
         77:95:04:72:62:8a:84:ad:ac:69:68:62:7b:5d:08:9b:c5:fd:
         5a:2d:c9:9c:31:26:32:d7:ba:7d:74:d1:a2:57:6b:3c:65:a8:
         27:70:a8:e5:10:d8:12:ed:40:c9:93:37:4d:a9:31:66:06:50:
         44:d2:77:17:d1:9f:24:12:3c:9b:95:f6:40:20:3c:45:31:e6:
         24:44:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:02:57 2026 by rpki-client