Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
File:                     9F79846406E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=
Subject key identifier:   14:9D:EA:6B:65:00:CF:32:37:6E:26:5E:94:F4:D8:05:77:F0:2C:E9
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       0228
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:46 +0000
ROA not before:           Wed 03 Sep 2025 03:51:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep  3 03:51:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4387e-5bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:0e:0a:89:76:40:86:fe:78:7e:c1:e1:5d:
                    b5:2f:6f:25:37:15:5d:79:27:c2:e6:a0:bd:21:1d:
                    ad:d2:4d:df:ed:e9:31:54:e5:3c:85:7a:19:c9:72:
                    1b:f7:97:ac:7d:fa:99:73:38:65:63:8a:a4:ba:08:
                    30:08:13:4a:67:ad:54:fa:ad:2a:57:a1:2a:20:85:
                    09:55:77:39:69:e6:20:0b:dc:58:2e:90:9a:0f:ab:
                    d9:2b:30:8f:d8:b3:7f:28:62:a2:f8:17:3a:f7:76:
                    a8:54:e9:4b:71:d6:10:1b:1d:44:42:dd:0c:43:1e:
                    3c:d2:ae:c4:d3:e6:71:8c:1a:a8:75:1f:ce:18:bb:
                    04:b4:03:4d:f5:1b:47:54:8d:aa:b7:21:cc:c5:07:
                    41:53:db:70:5e:ee:f9:1c:cb:56:c8:e4:ba:14:bd:
                    15:00:af:91:7e:bc:1f:51:5a:3b:4f:13:1f:88:a2:
                    f0:21:3c:e5:85:02:99:a6:74:8c:92:7b:0c:64:b5:
                    fd:36:21:05:d5:ef:c6:03:e4:fa:b6:5d:07:a7:f1:
                    d0:a2:ae:bc:0d:9f:ad:b1:c8:53:95:ed:d2:01:6d:
                    da:be:8a:56:03:a6:d9:e9:30:e4:da:e7:f4:63:88:
                    86:b8:46:b3:96:b1:2a:c6:8c:82:b0:8b:ef:9f:0b:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9D:EA:6B:65:00:CF:32:37:6E:26:5E:94:F4:D8:05:77:F0:2C:E9
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:42:54:aa:d8:7a:72:71:b6:f5:72:b9:d9:06:25:ba:61:
         d3:a0:b6:9c:ba:6f:28:25:b6:33:3c:e8:66:4f:a6:67:f0:8c:
         f4:4d:4f:3c:bb:66:d6:95:a3:32:6c:65:7e:ab:a4:b4:fc:21:
         36:b1:f8:aa:4e:74:27:29:56:9f:b0:5e:ef:93:c4:d9:98:d2:
         c2:97:17:56:10:ef:3f:cd:02:a7:5c:3a:a7:b8:61:d8:3a:2b:
         01:2a:09:f6:bf:a3:f0:a7:ca:e3:37:70:63:83:20:eb:c1:65:
         b9:d1:27:6d:ac:b6:78:5e:00:b4:1b:50:f4:69:87:f7:55:a5:
         a2:90:52:2b:f1:4d:f3:3b:7f:f4:27:04:3f:6f:07:ce:27:61:
         4f:69:64:ae:57:c8:1d:5f:91:96:5f:6c:f0:e1:b6:34:04:82:
         2e:0e:19:0a:eb:32:9b:dc:bf:e4:27:9e:40:22:30:c7:b8:81:
         dc:db:5b:3d:51:45:0a:b4:1a:66:11:48:34:c5:2e:ca:5e:a8:
         c9:ea:2d:d2:cf:aa:78:d8:0c:46:97:15:ef:a4:6e:d1:b4:61:
         88:3c:35:56:d5:55:cc:18:91:39:e7:b4:e8:52:c5:90:82:d0:
         42:0a:52:97:8b:9e:70:c3:81:99:6a:82:46:1a:fb:0e:9d:9f:
         16:1d:5c:b9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjUwOTAzMDM1MTE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mzg3ZS01YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA480OCol2QIb+eH7B4V21L28lNxVdeSfC5qC9IR2t0k3f7ekxVOU8hXoZyXIb
95esffqZczhlY4qkuggwCBNKZ61U+q0qV6EqIIUJVXc5aeYgC9xYLpCaD6vZKzCP
2LN/KGKi+Bc693aoVOlLcdYQGx1EQt0MQx480q7E0+ZxjBqodR/OGLsEtANN9RtH
VI2qtyHMxQdBU9twXu75HMtWyOS6FL0VAK+RfrwfUVo7TxMfiKLwITzlhQKZpnSM
knsMZLX9NiEF1e/GA+T6tl0Hp/HQoq68DZ+tschTle3SAW3avopWA6bZ6TDk2uf0
Y4iGuEazlrEqxoyCsIvvnwtNQwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFBSd6mtl
AM8yN24mXpT02AV38CzpMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE4MTgvNjhFQTczRUMwNjlDMTFFRThDNjY3ODEyQzRGOUFFMDIvOUY3OTg0NjQw
NkU5MTFFRTg4NDUwMTQ3QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAKLtAwDBACLtA4wDQYJKoZIhvcNAQELBQADggEBACEsQlSq2Hpy
cbb1crnZBiW6YdOgtpy6bygltjM86GZPpmfwjPRNTzy7ZtaVozJsZX6rpLT8ITax
+KpOdCcpVp+wXu+TxNmY0sKXF1YQ7z/NAqdcOqe4Ydg6KwEqCfa/o/CnyuM3cGOD
IOvBZbnRJ22stnheALQbUPRph/dVpaKQUivxTfM7f/QnBD9vB84nYU9pZK5XyB1f
kZZfbPDhtjQEgi4OGQrrMpvcv+QnnkAiMMe4gdzbWz1RRQq0GmYRSDTFLspeqMnq
LdLPqnjYDEaXFe+kbtG0YYg8NVbVVcwYkTnntOhSxZCC0EIKUpeLnnDDgZlqgkYa
+w6dnxYdXLk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:28 2026 by rpki-client