Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
File:                     9F79846406E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          LvbEefo/jIzRbw1qkY9iXb8amhsCn8ZD4oSsz6Ev0wA=
Subject key identifier:   87:26:08:14:1D:1F:9E:19:00:D7:51:04:F8:3A:4E:FB:51:38:31:6D
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01C7
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 03:51:14 +0000
ROA not before:           Wed 03 Sep 2025 03:51:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep  3 03:51:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7bb32-e8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:96:e6:79:bf:6e:99:53:43:73:29:ec:22:
                    65:18:1f:33:92:4e:45:22:92:24:06:a4:ae:ae:fe:
                    c4:1e:23:c1:8f:ce:e0:11:76:70:c0:9a:56:30:fc:
                    b9:09:c6:66:85:8c:2b:0d:c5:41:2f:fd:68:c1:59:
                    6c:d1:0f:ed:43:8a:9e:23:b1:33:d7:53:e1:34:33:
                    c5:65:f8:6e:1e:3b:b1:f2:9c:b7:2b:86:bf:26:74:
                    05:1d:5f:40:7c:51:48:05:76:8c:cc:eb:85:67:a2:
                    9b:d4:5d:de:b4:8d:46:34:09:74:cb:19:d4:3a:80:
                    bf:8d:8d:fd:93:ee:4d:48:50:26:a8:8f:0a:67:80:
                    2d:4b:c5:ae:58:64:a1:a6:cd:9d:f7:22:3b:75:e2:
                    e1:e0:94:5c:9f:f5:21:6d:94:32:d3:00:4c:1c:b4:
                    3d:75:14:ab:43:b6:5f:a2:59:21:d7:9b:a1:b8:04:
                    5c:3e:fd:ae:a5:9e:4f:71:a1:75:69:07:cf:21:2b:
                    50:5c:b0:68:e4:f7:17:ab:d8:ac:bf:84:e7:86:99:
                    c5:5c:b8:71:61:28:98:df:a0:38:f4:2b:2f:09:3a:
                    e5:f9:ea:48:77:fa:d9:32:11:68:33:28:8b:0f:e8:
                    c8:14:24:fc:c6:4d:4a:dd:56:37:9c:53:c1:62:51:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:08:14:1D:1F:9E:19:00:D7:51:04:F8:3A:4E:FB:51:38:31:6D
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         58:de:da:ff:4b:08:99:50:48:bb:62:90:b1:81:4f:5a:59:67:
         f1:98:69:ca:bd:1d:f4:35:14:b3:59:3a:e9:65:9b:fe:33:cc:
         97:0e:43:90:2f:4a:b7:65:81:c8:99:c2:98:5e:f4:24:a3:30:
         70:ea:f9:29:ab:a8:68:60:6f:97:ec:7d:20:d0:1b:54:ad:49:
         dd:51:d6:49:b2:f5:d6:32:be:3c:16:37:45:b9:09:3c:cd:1d:
         69:79:2b:26:92:ff:c1:93:bd:02:8c:64:94:9b:05:d6:ed:70:
         17:d3:1e:a3:e8:e8:11:55:75:cf:9f:e0:73:c1:f5:52:1e:20:
         98:b5:26:97:99:d4:9c:40:b8:07:97:8c:ee:76:2a:26:c6:a0:
         8d:f3:11:69:f1:48:aa:7f:fb:64:20:c2:fe:38:23:4c:af:e3:
         2e:ac:3e:54:ba:ad:27:35:bf:da:7e:17:44:7b:94:3a:96:28:
         81:1f:5d:06:e5:71:a1:6e:ba:fb:c0:3a:76:af:23:2d:52:e4:
         36:a7:6a:3d:b0:57:40:dd:42:a4:ad:ba:f3:ba:38:e6:34:da:
         a0:17:9e:17:92:3d:d3:8e:07:a8:1d:e3:4a:69:95:fc:f2:f4:
         f5:01:27:0b:c4:c7:de:d1:33:15:4e:82:ab:1a:3e:ae:9b:09:
         24:c5:6e:ee
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjUwOTAzMDM1MTE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3YmIzMi1lOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCiW5nm/bplTQ3Mp7CJlGB8zkk5FIpIkBqSurv7EHiPBj87gEXZwwJpWMPy5
CcZmhYwrDcVBL/1owVls0Q/tQ4qeI7Ez11PhNDPFZfhuHjux8py3K4a/JnQFHV9A
fFFIBXaMzOuFZ6Kb1F3etI1GNAl0yxnUOoC/jY39k+5NSFAmqI8KZ4AtS8WuWGSh
ps2d9yI7deLh4JRcn/UhbZQy0wBMHLQ9dRSrQ7Zfolkh15uhuARcPv2upZ5PcaF1
aQfPIStQXLBo5PcXq9isv4TnhpnFXLhxYSiY36A49CsvCTrl+epId/rZMhFoMyiL
D+jIFCT8xk1K3VY3nFPBYlH4AQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFIcmCBQd
H54ZANdRBPg6TvtRODFtMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE4MTgvNjhFQTczRUMwNjlDMTFFRThDNjY3ODEyQzRGOUFFMDIvOUY3OTg0NjQw
NkU5MTFFRTg4NDUwMTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAou0DAMEAIu0DjANBgkqhkiG9w0BAQsFAAOCAQEAWN7a
/0sImVBIu2KQsYFPWlln8Zhpyr0d9DUUs1k66WWb/jPMlw5DkC9Kt2WByJnCmF70
JKMwcOr5KauoaGBvl+x9INAbVK1J3VHWSbL11jK+PBY3RbkJPM0daXkrJpL/wZO9
AoxklJsF1u1wF9Meo+joEVV1z5/gc8H1Uh4gmLUml5nUnEC4B5eM7nYqJsagjfMR
afFIqn/7ZCDC/jgjTK/jLqw+VLqtJzW/2n4XRHuUOpYogR9dBuVxoW66+8A6dq8j
LVLkNqdqPbBXQN1CpK2687o45jTaoBeeF5I9044HqB3jSmmV/PL09QEnC8TH3tEz
FU6Cqxo+rpsJJMVu7g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:10 2025 by rpki-client