Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
File:                     D62511F6C41D11F08D2E621EC4F9AE02.roa (raw, json)
Hash identifier:          HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=
Subject key identifier:   B0:88:B5:A1:CD:38:0B:3B:35:38:34:7C:91:52:FF:13:C6:0A:03:40
Certificate issuer:       /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial:       0246
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:48 +0000
ROA not before:           Tue 18 Nov 2025 01:28:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137471
IP address blocks:        119.15.0.0/22 maxlen: 24
                          119.15.4.0/22 maxlen: 24
                          119.15.8.0/24 maxlen: 24
                          119.15.9.0/24 maxlen: 24
                          119.15.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
                          rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
        Validity
            Not Before: Nov 18 01:28:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46543-efcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:69:ab:47:e7:80:fa:d8:d9:ab:4a:ad:f2:
                    5b:11:46:19:4a:68:f3:4b:6a:3f:16:22:17:fc:ff:
                    9c:da:82:c9:83:fe:e8:54:9e:f8:fa:50:9e:c6:ca:
                    e4:18:19:14:3b:e2:cc:cc:e1:03:8a:ed:8d:49:c9:
                    1f:c8:4e:59:c7:e2:2d:3a:88:0c:87:df:8d:0c:cf:
                    26:4f:da:c0:43:36:62:75:50:c6:3a:dc:93:1f:90:
                    86:62:25:4c:01:01:d7:0c:71:9b:c4:ff:8d:06:58:
                    ec:7a:24:34:39:c8:de:aa:3d:9d:67:1e:4f:b4:ac:
                    e8:b6:44:94:71:17:c6:be:9d:6d:5c:f6:9e:6a:84:
                    ec:2a:2c:e9:da:d9:be:74:b7:aa:63:00:3c:c2:3c:
                    53:da:40:cf:88:c9:14:0a:a6:7b:50:b4:1d:8c:45:
                    a7:24:db:31:3a:3e:a0:96:85:36:3f:e8:12:3a:34:
                    b5:a8:1a:c7:a1:c5:3d:ca:0a:e8:f3:f3:85:16:b5:
                    d8:d5:f5:05:d3:38:fa:b5:1b:4e:f7:a7:28:cb:b8:
                    4c:3f:21:f6:be:73:05:17:e0:66:03:71:0f:cf:f9:
                    3f:69:4f:f8:7e:a1:54:6a:f7:90:fd:e7:09:44:95:
                    8b:c5:58:50:58:bd:49:e2:24:a8:2a:53:60:e8:b4:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:B5:A1:CD:38:0B:3B:35:38:34:7C:91:52:FF:13:C6:0A:03:40
            X509v3 Authority Key Identifier:
                keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.0.0-119.15.9.255
                  119.15.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:36:49:ba:3c:94:f5:40:ee:c6:93:26:76:df:e9:8c:2c:
         e2:d8:51:37:d1:da:29:3c:dd:ce:a5:ec:39:d4:79:89:4f:72:
         d4:87:5e:98:e1:89:7d:e9:e5:bf:dc:9f:8b:5f:5c:ab:1b:70:
         c4:1b:9f:30:34:0e:a3:a0:03:c7:46:51:cf:7d:ee:f2:04:cf:
         0b:92:8a:5f:2a:b5:ee:7a:a4:eb:6d:36:86:6b:7c:de:97:2c:
         3f:c4:05:16:74:64:c6:01:1a:a6:0b:01:fb:c6:9e:02:6f:5e:
         16:a9:de:96:b1:b5:e8:e4:7e:85:c4:2f:85:18:4d:2d:46:76:
         28:33:52:3a:8a:cd:5a:12:01:ae:8a:97:f8:cc:3d:26:0a:9e:
         42:9a:b9:00:4c:40:cc:3f:b1:9f:39:2e:95:14:25:5d:37:35:
         8d:92:d3:a8:50:a8:77:85:c0:31:ea:40:64:50:7f:8a:51:05:
         df:f1:39:89:e9:bf:9b:94:25:e8:c0:1e:f9:34:7f:df:69:68:
         5e:3a:fb:85:8c:7f:d9:01:46:fa:3a:88:4c:46:37:3e:0e:b4:
         78:7a:7d:59:d2:20:ff:e9:3f:42:10:07:5b:ee:b2:ee:ce:f4:
         6e:46:98:1c:0e:05:47:34:7b:3b:76:43:0d:d3:a7:fa:03:79:
         35:f8:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:02 2026 by rpki-client