Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/03833742FBE511EFA186694BC4F9AE02.roa
File:                     03833742FBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          frHgex6EnfkrfWqcv/iy5NJb8cUngZ5DHnQNhF4G69k=
Subject key identifier:   E3:59:02:7D:74:8D:F7:24:6C:8F:28:53:7E:01:69:CC:2F:B4:1F:35
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       048B
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/03833742FBE511EFA186694BC4F9AE02.roa
Signing time:             Thu 23 Jul 2026 01:27:06 +0000
ROA not before:           Thu 23 Jul 2026 01:27:06 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133467
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jul 23 01:27:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a616dea-dd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:a0:93:a5:6c:ee:fa:de:9c:c8:ed:c8:cb:
                    53:a9:bb:ae:19:02:a7:f9:0e:79:17:ad:be:de:80:
                    f4:7a:94:06:ca:40:e9:e0:0c:41:a7:44:8d:57:3e:
                    f1:f7:30:92:64:fd:be:99:c2:a9:fb:00:c0:23:d4:
                    75:15:a3:bd:54:8b:15:3f:aa:a5:cc:e6:c8:87:bd:
                    81:f6:19:85:98:45:c3:1e:cb:41:4a:fc:4d:23:88:
                    13:26:4f:e3:bd:44:ad:b2:73:82:be:1b:c3:b4:a9:
                    b9:14:bd:b3:4d:e0:3a:48:50:70:f1:26:93:2e:f2:
                    46:c0:a8:d0:90:b1:31:5b:9b:6b:14:1d:d5:90:37:
                    3b:7d:3e:96:db:39:cc:d2:80:30:18:94:00:46:4d:
                    18:f7:64:60:74:6c:3c:b4:03:39:25:49:cb:91:a6:
                    3a:76:df:f5:2b:72:e7:01:d9:58:ac:c7:14:e4:eb:
                    af:80:3d:47:c8:49:64:a9:4a:c9:f8:69:85:11:8b:
                    39:27:05:a4:ce:44:ad:9a:4e:3c:75:90:99:2c:0f:
                    87:47:62:98:3a:4d:dc:91:24:b4:57:05:93:3f:a1:
                    2d:c2:dc:1c:86:a8:9b:0e:8e:b2:78:72:fb:cd:eb:
                    68:4b:6a:4e:c4:1e:03:36:b1:88:e3:fd:08:dd:7a:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:59:02:7D:74:8D:F7:24:6C:8F:28:53:7E:01:69:CC:2F:B4:1F:35
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/03833742FBE511EFA186694BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:40:cb:32:2c:2a:4d:b1:ce:c6:6c:e0:92:2a:a6:ec:a5:
         75:5a:af:0f:11:7a:b9:a5:2d:84:fe:f4:06:5c:5f:b5:88:48:
         03:86:18:13:ec:59:b7:7e:99:20:aa:93:2d:d2:3f:69:4e:31:
         37:49:99:a9:16:0f:cb:71:50:ec:44:00:75:1f:52:3b:43:9e:
         fd:b7:4f:8d:b5:5a:23:d6:42:d9:22:61:58:f2:b5:32:a9:2c:
         cc:2c:23:45:65:3f:00:3a:0d:e7:36:f1:3c:47:80:c8:a4:fa:
         d3:1e:32:9b:75:e4:33:b6:57:85:b7:d9:a9:ac:49:f4:3d:81:
         8d:a6:83:49:99:db:18:be:d8:99:2f:fe:7a:d5:1d:21:80:88:
         55:10:39:c0:72:dc:fb:41:d3:36:0e:24:fd:1e:23:bd:98:a6:
         87:ba:04:2c:eb:46:62:bf:e1:00:c7:f2:cf:09:42:05:bf:57:
         3b:02:fd:72:3b:64:d8:fc:04:5b:e4:98:76:0b:3e:55:00:7c:
         bf:ea:fb:1a:16:58:2d:e1:8f:30:36:d8:83:60:a2:14:ca:19:
         e3:11:be:18:21:87:8f:ef:16:89:65:fc:b9:ee:c0:48:ce:fd:
         c7:44:84:27:57:a9:67:1c:67:e0:a5:37:5b:3b:bf:37:cd:18:
         e1:97:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:36 2026 by rpki-client