Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
File:                     FD86FDF6707311F1B807F94B77A30FBC.roa (raw, json)
Hash identifier:          gDZWZJSsCK5hepLcVhYuiySc2jdwfmmWoqRN6NOgOZY=
Subject key identifier:   F0:DB:B4:68:F3:9C:6C:4C:BB:02:CF:E8:7C:1D:09:67:82:D9:0E:CD
Certificate issuer:       /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Certificate serial:       3B
Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
Signing time:             Wed 22 Jul 2026 08:50:54 +0000
ROA not before:           Wed 22 Jul 2026 08:50:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45905
IP address blocks:        119.15.156.0/24 maxlen: 24
                          119.15.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
                          rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
        Validity
            Not Before: Jul 22 08:50:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a60846d-5296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:5e:00:7e:c9:6a:76:a4:02:4d:e2:40:dc:
                    80:45:c1:f7:a5:08:c5:6c:e0:08:20:bd:10:65:95:
                    3e:10:2b:ef:b1:61:f2:e5:3a:ff:9d:d7:63:fd:ff:
                    b1:29:73:ce:1c:0a:7c:7b:70:27:83:a8:cc:b1:ae:
                    40:f9:f2:6b:aa:ce:d6:29:7d:9b:38:70:de:99:f9:
                    c0:e7:d9:92:7f:31:10:ce:95:30:94:0b:52:9f:1a:
                    6e:4a:1f:d7:46:ae:2d:42:2f:8a:82:09:23:bb:15:
                    06:dd:36:d1:d2:59:fa:6c:8f:f0:51:e4:ba:3b:af:
                    3f:37:5c:ec:47:07:6e:8c:dc:23:a5:71:19:78:e6:
                    95:7f:44:e9:33:de:51:df:a2:94:60:a3:65:1a:0b:
                    b0:04:e2:67:71:29:f8:13:85:1b:7c:67:82:ee:64:
                    b2:7f:44:61:44:38:00:1b:45:da:23:97:16:57:61:
                    6d:59:07:e7:bb:a5:cd:19:3b:00:83:e7:80:46:bc:
                    2d:99:b7:6b:ff:5c:38:bb:f3:18:7c:2d:28:88:20:
                    c2:65:15:4f:0d:15:56:ae:0d:a3:fc:21:b6:d5:d9:
                    a8:70:ef:12:20:7c:e3:a9:84:fa:34:2f:9e:0b:00:
                    c2:b6:ca:33:be:c0:83:89:09:43:90:cf:40:cf:7c:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DB:B4:68:F3:9C:6C:4C:BB:02:CF:E8:7C:1D:09:67:82:D9:0E:CD
            X509v3 Authority Key Identifier:
                keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:17:2b:69:c4:54:45:26:a7:74:cb:8a:24:db:cb:51:13:
         16:31:fd:05:45:37:c0:06:4b:e6:79:1b:70:17:c8:2e:55:cf:
         da:c7:a8:9b:61:5f:47:96:0b:74:29:15:f5:0e:84:39:d8:c4:
         19:d2:1e:15:d1:e1:b4:24:85:3c:73:28:e1:47:49:e9:4c:ac:
         71:ef:fa:95:d7:4f:58:e5:20:cc:df:39:0f:f6:1c:ac:eb:dc:
         19:a7:fa:4f:0e:86:e6:54:b5:76:b5:ab:d3:27:2b:bd:d3:bf:
         87:49:2f:83:0f:e9:37:dd:0e:f2:9b:58:33:42:04:05:2e:a2:
         90:f4:36:89:94:e9:cf:f6:76:ea:6b:09:4c:f1:3d:ca:73:25:
         25:e2:01:d9:56:b0:a4:f6:5b:31:26:2d:81:5a:08:1e:af:88:
         13:07:69:ee:07:6a:86:80:2d:91:b0:80:f6:11:d5:7e:17:f6:
         9f:22:08:68:f4:59:4c:21:83:20:28:32:bf:1d:83:87:41:02:
         00:c7:df:ae:24:cb:83:50:e7:a6:7f:ea:1e:89:96:39:c1:1c:
         c0:89:70:f9:a4:bc:3b:93:84:fd:b2:55:c8:fc:fa:97:8b:cd:
         39:ec:27:fd:ef:05:e3:5a:aa:2b:2c:1a:80:5b:b3:8d:28:34:
         f1:56:6f:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:16 2026 by rpki-client