Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/E24B9ECE152B11F0A742CE86C4F9AE02.roa
File:                     E24B9ECE152B11F0A742CE86C4F9AE02.roa (raw, json)
Hash identifier:          3bkze+l+GRj57xGg9j2jBJbz56blLFKYk0ohe6GpaaU=
Subject key identifier:   71:77:AE:56:11:70:DC:9E:F5:80:A8:C9:F0:A3:8B:F7:FB:6C:9A:50
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       011A
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/E24B9ECE152B11F0A742CE86C4F9AE02.roa
Signing time:             Sat 09 May 2026 06:38:28 +0000
ROA not before:           Sat 09 May 2026 06:38:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142647
IP address blocks:        119.160.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: May  9 06:38:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fed664-0c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:97:62:48:58:00:47:2f:dc:3c:4a:46:42:
                    9a:ad:0c:5d:9e:41:d5:ec:cd:0e:f2:82:93:c5:5f:
                    6f:e8:33:30:77:e1:37:10:fd:50:47:7f:2b:91:11:
                    af:5d:20:57:fb:9a:84:99:27:e7:95:0f:fe:76:54:
                    ed:0c:dd:70:6c:2a:6c:2d:7c:94:18:48:95:2f:ad:
                    cd:af:a4:c8:2e:f4:68:f0:28:5b:2f:b4:22:6b:eb:
                    f7:a6:1d:fd:89:a9:f3:40:c7:d9:c0:1c:e2:76:b5:
                    a1:47:82:22:00:ac:17:a9:9b:ef:92:23:81:87:94:
                    3c:2b:b8:09:e6:7e:7a:61:f6:f3:5f:59:6b:1e:7f:
                    73:82:41:4f:3b:dd:7c:54:12:b9:c7:54:ee:08:ce:
                    2f:19:06:76:68:a6:91:35:8c:f7:e1:1b:27:75:95:
                    ba:cc:fc:cb:2b:4f:3d:ce:c8:84:c9:0b:d7:22:73:
                    22:0c:4e:97:5f:da:37:f3:65:9e:54:f8:11:34:64:
                    7b:6e:0b:d3:75:1b:72:54:c3:08:3b:8f:e6:30:db:
                    a5:55:5a:c4:07:bb:46:cd:4c:7c:41:4b:ce:bd:71:
                    ac:4c:2a:8b:4a:c0:d6:91:f5:d2:f2:57:2c:fe:7f:
                    ab:a1:9f:6a:e0:10:d3:da:c0:d7:25:a6:b7:89:c2:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:AE:56:11:70:DC:9E:F5:80:A8:C9:F0:A3:8B:F7:FB:6C:9A:50
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/E24B9ECE152B11F0A742CE86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.160.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:78:3e:16:ca:4f:c4:d5:fe:ec:90:d5:72:f9:9c:80:50:c8:
         bc:79:0c:e4:2c:25:d3:6d:65:50:2a:46:6c:09:1d:c2:9c:86:
         14:c6:34:fe:e6:c5:c3:1a:77:7b:dd:87:46:a5:98:83:4a:11:
         5e:df:a2:b1:fb:04:d0:72:69:7f:9d:4a:b3:5e:75:9c:79:55:
         91:cc:38:4a:7f:a3:4a:c7:f6:9f:74:9c:03:74:7c:77:dc:0b:
         31:e6:6b:c5:19:b8:98:0f:ab:16:0e:cc:93:63:16:3a:5c:4b:
         5a:85:7d:87:c0:1e:ff:02:bb:02:e9:c3:5a:59:5c:8f:4d:f0:
         f1:28:98:de:d5:be:93:ea:7b:29:80:c5:ab:5a:bb:df:b9:9c:
         60:2a:3b:64:b3:2d:1d:a5:4f:db:7d:e9:d1:df:ae:48:96:72:
         bd:95:27:06:94:92:6d:e9:08:0b:75:bc:d0:5c:54:7f:ae:2e:
         a1:88:36:ae:30:04:5f:0e:9b:49:d5:6f:59:91:18:b5:db:2a:
         33:38:d3:5e:c3:ea:20:1a:8d:be:3b:25:c5:e3:37:21:11:25:
         0e:36:b8:8b:09:4c:ed:f5:0a:32:1c:a5:ec:7a:53:cb:47:ec:
         90:34:e2:d1:44:0c:96:b7:cf:34:e1:42:c4:14:bb:f7:bb:b3:
         9e:85:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:38 2026 by rpki-client