Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
File:                     49FAAD72591211EDA743880DC4F9AE02.roa (raw, json)
Hash identifier:          vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=
Subject key identifier:   B2:3F:F6:C9:85:D8:0F:0F:B5:B0:2C:1A:26:59:4A:3F:1C:6C:97:64
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       068B
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:48:53 +0000
ROA not before:           Fri 12 Sep 2025 23:04:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     19809
IP address blocks:        119.31.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Sep 12 23:04:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a46df5-f5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:63:b4:d5:bc:f1:7b:2d:13:bf:10:27:c2:
                    fd:43:81:1d:4c:cc:83:f7:ed:9b:ff:47:b8:26:91:
                    a1:6a:5f:e2:d0:d6:30:c8:6e:66:86:4e:49:eb:28:
                    e4:63:b0:bd:c1:17:19:02:12:ac:ab:39:92:bf:f7:
                    23:ac:41:4d:94:08:bf:99:19:9a:29:5e:02:5a:6a:
                    c6:b8:a9:32:4b:f1:87:1d:84:9d:ef:67:94:48:df:
                    d8:f3:6d:5c:e3:52:a3:1c:2e:1e:c9:83:35:6f:19:
                    9d:80:ca:f0:b9:0c:ca:69:68:c9:e5:ea:ba:e6:1d:
                    24:d7:33:aa:cf:5e:be:25:b4:a3:94:21:dc:4b:0a:
                    83:ec:fe:e1:74:83:52:9d:82:3c:64:1d:27:2c:c8:
                    71:63:ed:9b:f7:a6:40:ba:70:8f:83:3a:58:9d:5f:
                    cf:93:0c:f9:98:af:a8:f7:bd:65:42:c7:23:ea:49:
                    04:4b:26:be:5a:13:d1:85:3c:cd:ca:3a:1f:ad:1d:
                    27:da:be:bc:25:ed:88:27:b9:68:15:3d:fa:10:5a:
                    9c:61:f7:d1:32:5e:24:f0:d5:03:30:87:28:5c:f8:
                    92:7a:f9:e7:d8:67:07:d1:a3:4d:79:9f:c7:1b:6b:
                    c5:63:80:96:d0:4f:4b:c0:9e:e1:a7:c5:25:bc:2b:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3F:F6:C9:85:D8:0F:0F:B5:B0:2C:1A:26:59:4A:3F:1C:6C:97:64
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/49FAAD72591211EDA743880DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.31.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:19:1a:46:70:12:92:c7:27:0f:6a:14:b5:0a:6b:b3:f0:
         4c:94:5c:c3:44:11:a0:b3:28:3e:19:6b:2b:01:f5:af:21:f8:
         33:21:a0:7c:7f:7b:c7:34:ec:7f:90:30:e9:a7:f8:d3:2b:83:
         f0:ad:8d:bb:9c:91:18:d3:85:82:21:6f:c4:e2:b0:9b:16:a6:
         2f:36:4e:77:cb:41:11:c2:34:a5:6b:50:c1:e1:19:91:74:f6:
         6d:cd:63:43:c3:8f:0c:c7:d3:3f:57:59:e3:45:36:43:8b:68:
         ad:10:3a:5e:b2:9b:0b:ff:25:ba:e0:c8:3b:26:bb:f9:4f:fe:
         4b:ea:ed:b3:9f:57:8e:1a:65:f9:77:a6:d2:e1:91:a6:e9:f0:
         13:0a:16:cb:3f:4a:00:47:57:51:e1:5f:67:52:41:d6:2f:83:
         80:dd:07:58:d5:3f:47:0d:34:54:71:ea:68:fc:13:01:44:d7:
         96:ec:8c:ad:f6:7b:d7:76:b6:22:6f:aa:54:0a:31:e2:f0:c6:
         a6:ec:24:eb:c6:76:fb:db:85:24:68:aa:36:fc:db:ff:17:44:
         85:1a:10:35:1d:dc:d1:84:4f:ee:30:8e:79:38:29:2e:77:94:
         68:58:6e:ef:85:2f:28:64:e3:51:1c:f3:a9:11:6c:5d:90:a5:
         c3:47:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:58 2026 by rpki-client