Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0778BE80FBE511EFA186694BC4F9AE02.roa
File:                     0778BE80FBE511EFA186694BC4F9AE02.roa (raw, json)
Hash identifier:          v5PLHB+JdmAgYKubojJqXqwldybXXKLmawdn/6tujXk=
Subject key identifier:   AD:90:89:AD:C7:85:10:AE:6D:51:B6:D9:43:CF:D0:C9:12:20:66:60
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0491
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0778BE80FBE511EFA186694BC4F9AE02.roa
Signing time:             Thu 23 Jul 2026 01:27:19 +0000
ROA not before:           Thu 23 Jul 2026 01:27:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140630
IP address blocks:        157.119.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jul 23 01:27:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a616df7-ffb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:5c:4d:97:9c:d3:af:cc:34:e5:b1:da:4a:
                    bb:c8:15:f1:c6:74:18:b7:5f:dc:6d:32:fb:06:fc:
                    68:1e:3f:8d:08:a1:b5:0e:bf:64:51:df:1f:ac:74:
                    16:6c:72:44:f5:e2:a1:27:3c:17:bf:e4:53:a7:51:
                    db:9f:f6:64:89:13:31:11:4b:c3:c6:c8:c7:01:ea:
                    b8:73:11:fa:20:69:5e:4f:19:d7:0c:78:9c:b2:6c:
                    8f:02:36:6d:e0:2b:b9:04:ed:3b:44:50:88:fe:cf:
                    c0:58:96:43:65:d0:67:c4:0a:5c:65:f2:af:cf:53:
                    2f:46:4f:63:e2:e7:bf:91:8a:cd:90:72:50:e2:72:
                    d4:4c:52:2c:44:fb:39:f0:42:b5:4f:09:f9:98:5c:
                    5b:ea:7f:46:a4:bf:cd:5e:90:45:7b:19:93:02:2a:
                    76:6a:a0:30:67:30:d9:a5:a8:6a:ab:00:25:fa:92:
                    89:ed:e3:02:37:3d:e8:4b:50:29:6c:a6:3d:83:7f:
                    f8:f6:c0:13:f5:58:27:a2:4c:48:9b:ae:55:8b:13:
                    2b:fe:ac:27:8b:6f:f7:40:21:a6:c1:21:03:cd:b6:
                    d3:93:8a:cb:4c:55:80:5f:d3:46:cd:e1:70:05:d6:
                    f8:0d:05:16:53:b7:38:d9:3d:c2:a9:dd:f5:c9:b8:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:90:89:AD:C7:85:10:AE:6D:51:B6:D9:43:CF:D0:C9:12:20:66:60
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/0778BE80FBE511EFA186694BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:24:96:1e:59:d8:b0:50:07:ae:4d:e7:66:29:ed:02:58:f8:
         8b:85:04:34:c8:0d:f0:29:1b:f7:29:3e:d9:b9:57:50:df:8c:
         39:45:40:07:c2:4d:ca:be:72:b8:35:c8:ab:90:a1:94:f4:2a:
         2d:ae:7f:72:86:74:0b:68:22:39:bf:e4:8b:f6:22:50:8c:f8:
         b2:1a:0a:4b:6a:80:22:c5:58:ea:0a:a2:d3:82:01:13:8e:08:
         af:79:4f:c5:fd:45:f4:07:fd:3c:21:32:4d:e4:ac:54:d4:d1:
         f9:25:c6:87:1e:53:12:6b:63:52:e5:1e:f1:ad:7d:34:fb:3d:
         24:1e:78:c0:5d:88:ff:e4:64:f6:35:f8:cf:3a:09:2f:84:ee:
         51:47:5d:4f:97:3c:09:25:15:84:0d:73:f2:19:f3:ea:cf:51:
         b5:e9:68:9c:d0:75:21:f9:82:5e:1a:93:38:63:0f:f5:80:86:
         2a:d9:da:be:56:71:03:c3:78:4f:44:eb:2f:0c:2c:ad:94:22:
         53:64:4f:57:cc:ec:06:95:e5:26:ca:2c:43:5f:67:61:ff:e9:
         87:49:d9:3b:7a:ad:f8:da:af:1e:34:07:4e:ce:42:a6:6f:40:
         72:7b:96:c6:88:9d:db:02:27:a1:9c:a0:98:3a:bb:c8:63:5a:
         6c:59:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:09 2026 by rpki-client