Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/49D54560C91C11EFB0DEB92DC4F9AE02.roa
File:                     49D54560C91C11EFB0DEB92DC4F9AE02.roa (raw, json)
Hash identifier:          9ccYCAGywOpI3Ngw5Xg7sr3eIj39IizVDSsoN3RDO9w=
Subject key identifier:   E1:B7:92:DA:20:B3:63:87:A1:72:95:C7:4A:0D:8F:6F:C9:F2:A7:64
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       F0
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/49D54560C91C11EFB0DEB92DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:54:32 +0000
ROA not before:           Thu 27 Mar 2025 07:13:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137047
IP address blocks:        119.160.214.0/24 maxlen: 24
                          119.160.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: Mar 27 07:13:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59698-1243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:37:d9:fc:44:36:58:b3:50:6c:ab:83:3c:
                    b4:4c:9b:ec:a6:1d:28:c6:43:cc:8e:98:28:98:22:
                    ec:54:9a:20:9b:a1:b9:d6:0f:9f:1f:50:49:88:05:
                    f9:55:b2:25:23:cd:c3:3d:98:ab:5c:cd:cc:91:ca:
                    c6:98:84:28:b4:69:7e:0a:c4:a1:d2:1b:01:31:78:
                    a0:ec:f8:e0:7a:37:85:fa:07:0c:80:f4:93:83:3a:
                    b9:db:d4:5e:2f:90:cb:ea:85:24:a3:bd:d2:e8:97:
                    43:99:82:e0:74:de:cd:1b:80:f9:ea:05:9a:3f:9c:
                    0d:d9:ce:78:8f:4b:31:c3:86:68:26:e3:18:17:ad:
                    4d:46:2b:34:eb:eb:3c:fa:62:48:85:32:d0:4b:13:
                    6c:d4:4e:76:a0:99:d0:32:e1:44:99:9f:bd:15:32:
                    68:b4:de:98:db:c2:13:c6:98:7a:40:7f:a4:bf:15:
                    19:d8:c0:35:b8:ec:b1:60:c0:a8:54:88:d2:58:9d:
                    ce:cc:81:11:cb:23:6a:38:87:6b:3a:0a:c9:3a:fc:
                    c8:f7:e4:a3:3d:55:2f:fa:b2:34:e0:a8:d7:07:da:
                    36:30:87:41:b7:5e:92:ec:7a:8d:d9:bb:43:4d:83:
                    40:c3:53:e5:6b:80:88:e0:5e:12:32:6e:24:6e:67:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:92:DA:20:B3:63:87:A1:72:95:C7:4A:0D:8F:6F:C9:F2:A7:64
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/49D54560C91C11EFB0DEB92DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.160.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:0e:43:77:0b:41:f2:7e:2d:15:02:d3:f1:fb:74:86:22:
         5a:54:81:47:c3:ba:f0:d1:04:1e:64:2d:90:e4:b9:92:01:72:
         bd:7e:4f:1b:d9:5a:56:d9:22:3c:dc:38:bc:48:51:e6:c3:67:
         9b:d1:f9:ff:0f:8a:f0:24:f7:d3:72:87:92:25:34:16:6f:ce:
         3b:44:c7:21:dd:9e:40:81:68:77:45:6f:b9:29:7d:d8:66:7c:
         30:54:df:1c:52:0a:d2:5a:46:46:5e:b0:13:30:8d:dc:8c:b5:
         63:6a:12:cb:11:97:16:79:ea:b7:b8:28:2d:4a:df:a1:a2:11:
         0f:85:a9:74:1d:cd:a4:3e:ae:c1:50:a0:60:88:7a:b7:90:0d:
         f5:6a:a9:07:0a:8c:ee:54:cc:d4:73:84:32:e1:2a:20:12:d6:
         51:c8:03:25:88:3b:ef:ed:7f:6e:50:f8:35:a2:b7:ec:85:77:
         d5:83:f6:40:8f:cd:c9:aa:90:d5:25:38:67:da:ca:5b:76:1c:
         4c:f6:75:7e:c3:6f:ba:e9:7f:fb:09:5b:c6:8d:3d:7f:e5:ad:
         db:c3:b6:b3:0e:ed:9a:96:34:31:db:b3:e4:60:39:3e:e5:df:
         55:c4:fa:dc:e1:c2:6a:fe:8b:8d:a1:50:d3:af:10:c6:13:87:
         c8:41:a0:68
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1
MTNERjZCRDcwHhcNMjUwMzI3MDcxMzMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTY5OC0xMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh9o32fxENlizUGyrgzy0TJvsph0oxkPMjpgomCLsVJogm6G51g+fH1BJiAX5
VbIlI83DPZirXM3MkcrGmIQotGl+CsSh0hsBMXig7PjgejeF+gcMgPSTgzq529Re
L5DL6oUko73S6JdDmYLgdN7NG4D56gWaP5wN2c54j0sxw4ZoJuMYF61NRis06+s8
+mJIhTLQSxNs1E52oJnQMuFEmZ+9FTJotN6Y28ITxph6QH+kvxUZ2MA1uOyxYMCo
VIjSWJ3OzIERyyNqOIdrOgrJOvzI9+SjPVUv+rI04KjXB9o2MIdBt16S7HqN2btD
TYNAw1Pla4CI4F4SMm4kbmdmKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOG3ktog
s2OHoXKVx0oNj2/J8qdkMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5
MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjA4QTUvRDE1MDMxMzZDOTFCMTFFRjg4N0Q2RjJDQzRGOUFFMDIvNDlENTQ1NjBD
OTFDMTFFRkIwREVCOTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBd6DWMA0GCSqGSIb3DQEBCwUAA4IBAQBKeg5DdwtB8n4tFQLT8ft0
hiJaVIFHw7rw0QQeZC2Q5LmSAXK9fk8b2VpW2SI83Di8SFHmw2eb0fn/D4rwJPfT
coeSJTQWb847RMch3Z5AgWh3RW+5KX3YZnwwVN8cUgrSWkZGXrATMI3cjLVjahLL
EZcWeeq3uCgtSt+hohEPhal0Hc2kPq7BUKBgiHq3kA31aqkHCozuVMzUc4Qy4Sog
EtZRyAMliDvv7X9uUPg1orfshXfVg/ZAj83JqpDVJThn2spbdhxM9nV+w2+66X/7
CVvGjT1/5a3bw7azDu2aljQx27PkYDk+5d9VxPrc4cJq/ouNoVDTrxDGE4fIQaBo
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:25 2026 by rpki-client