Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
File:                     195AEC4287CF11F09EDBA229C4F9AE02.roa (raw, json)
Hash identifier:          9d7+U0GsZDY6ZehuYxySqXSfRY3e2dmU9OZ6IPMqzmU=
Subject key identifier:   E3:1D:0E:47:63:70:CD:84:D2:44:68:FD:8A:CC:81:79:9C:F1:37:03
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1DF0
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa
Signing time:             Fri 17 Jul 2026 08:31:17 +0000
ROA not before:           Fri 17 Jul 2026 08:31:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133502
IP address blocks:        119.30.64.0/24 maxlen: 24
                          119.30.81.0/24 maxlen: 24
                          119.30.90.0/24 maxlen: 24
                          119.30.110.0/24 maxlen: 24
                          119.30.116.0/22 maxlen: 24
                          119.73.0.0/22 maxlen: 24
                          119.73.7.0/24 maxlen: 24
                          119.73.8.0/24 maxlen: 24
                          119.73.19.0/24 maxlen: 24
                          119.73.23.0/24 maxlen: 24
                          119.73.59.0/24 maxlen: 24
                          119.73.62.0/24 maxlen: 24
                          119.73.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7664 (0x1df0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Jul 17 08:31:17 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a59e855-0111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:29:ff:21:47:ea:12:80:a7:14:90:7e:9f:62:
                    e5:1a:5e:99:28:fa:e1:47:50:09:ea:38:8d:67:99:
                    55:d1:ce:14:c0:ff:3c:0e:08:aa:69:0d:59:31:2d:
                    04:96:cf:fa:e0:e0:c9:51:0c:47:1a:23:8a:1c:ad:
                    f5:94:ed:0f:fb:dd:02:73:03:fb:fc:cf:d7:73:fe:
                    00:a6:99:09:d7:fd:df:43:82:a2:d6:c2:0f:2c:0d:
                    02:cf:1f:08:08:a1:3d:5f:5e:9a:1a:ef:8a:0b:09:
                    8f:57:04:86:6a:e3:3b:2b:eb:75:12:17:23:93:08:
                    b4:52:3c:f2:67:03:ad:d6:1d:28:4d:b2:51:b1:78:
                    71:a9:56:1d:a2:84:eb:16:31:e9:bb:aa:53:19:7e:
                    53:58:c9:53:00:ca:e0:80:cb:c6:02:ff:f4:58:d5:
                    15:52:45:de:10:0a:bc:d8:80:a2:85:a6:3d:0d:81:
                    62:5f:4a:13:50:ef:ae:79:06:5b:36:9e:d1:4f:32:
                    0a:e1:77:70:27:2a:79:43:a0:a1:9f:85:3c:63:8b:
                    78:97:c4:46:bb:ea:d5:4d:45:be:7c:c5:9c:88:c1:
                    30:5e:b1:bb:4b:56:8e:47:2d:4f:27:a6:fe:8d:07:
                    da:cd:4a:c5:88:ac:d4:f3:2f:01:8d:ee:6c:44:95:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1D:0E:47:63:70:CD:84:D2:44:68:FD:8A:CC:81:79:9C:F1:37:03
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.64.0/24
                  119.30.81.0/24
                  119.30.90.0/24
                  119.30.110.0/24
                  119.30.116.0/22
                  119.73.0.0/22
                  119.73.7.0-119.73.8.255
                  119.73.19.0/24
                  119.73.23.0/24
                  119.73.59.0/24
                  119.73.62.0/24
                  119.73.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:8a:8e:30:5c:2e:01:0d:19:05:12:a7:11:fa:e7:5f:1b:
         b0:6b:d3:c3:da:ad:ab:f3:45:1e:67:98:78:e5:d5:ab:ad:b4:
         0e:f4:af:70:8f:d0:ec:a8:67:03:28:8c:cf:7a:12:9c:a6:a3:
         a1:f9:c6:1d:e9:3c:d6:7d:9e:d4:f5:70:97:51:0e:85:a7:45:
         e8:af:c1:e7:9e:05:83:d0:9e:e0:36:01:25:4e:5e:64:97:5a:
         0d:7d:15:b4:7d:c0:e9:23:ff:43:79:e9:92:21:c1:f2:72:7e:
         a1:08:67:c5:ff:12:fe:d2:6b:ff:b0:54:98:b0:49:0a:21:d7:
         ab:5e:06:a1:29:8b:47:8a:b0:d2:96:87:02:dc:44:5d:c8:38:
         e4:d3:94:95:6b:96:28:4c:f2:02:3a:c3:db:96:79:de:fc:d3:
         d0:9a:9b:e5:90:77:9a:5a:82:4f:20:ba:0d:c3:bd:36:14:07:
         9d:5c:90:d3:00:75:71:5a:5d:ca:65:fe:1f:2b:a0:fa:78:91:
         c1:09:e4:4a:06:9f:79:7e:b9:fb:e0:16:ab:3a:4e:f5:25:24:
         f1:70:08:b6:fb:00:6e:ac:c8:f2:39:c2:5d:02:89:3a:df:b1:
         f3:71:7c:af:d4:8b:61:e3:7d:48:99:a8:a1:5f:90:5d:75:72:
         c1:30:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:19 2026 by rpki-client