Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa
File:                     3A904D64210111F181AE0DC81F3D8C67.roa (raw, json)
Hash identifier:          dX+ruN2dMXVRIFLuH2W9vLFpYo75wMU0NdM15IPQhxI=
Subject key identifier:   73:B9:BD:BF:BD:D5:3A:CD:30:F4:5D:FB:A9:57:6D:48:9A:23:3A:50
Certificate issuer:       /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial:       03CC
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa
Signing time:             Tue 24 Mar 2026 02:24:41 +0000
ROA not before:           Tue 24 Mar 2026 02:24:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142002
IP address blocks:        139.5.108.0/24 maxlen: 24
                          139.5.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
        Validity
            Not Before: Mar 24 02:24:40 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69c1f5e8-43ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:db:90:a8:79:57:51:89:30:b9:8f:96:6c:92:
                    15:55:28:e8:74:d6:21:e4:a6:43:52:67:57:f0:b0:
                    37:e6:c5:e7:dc:02:01:3b:f0:6b:19:d5:7c:ba:cb:
                    f0:1d:92:a7:56:c7:c3:42:cd:ba:b5:0e:5e:df:e8:
                    52:b0:e9:6c:56:39:22:28:ed:8c:e9:fe:ac:da:d7:
                    da:b1:40:10:7e:cc:23:01:87:53:e4:26:c4:19:47:
                    5b:8c:4d:24:17:a5:98:d4:9f:ad:f3:88:7c:79:66:
                    79:75:76:df:ac:bb:c3:50:bf:a9:30:17:b5:f1:50:
                    79:17:21:9e:7c:fe:17:97:50:64:a1:0b:14:65:05:
                    2f:cb:c1:cc:6c:87:e0:9d:79:4d:da:34:3e:fc:ba:
                    bd:c0:19:a8:4b:d0:f5:42:0a:c7:7d:ef:5a:56:42:
                    be:c8:72:eb:ab:5a:0f:87:c8:fb:f0:9f:f6:9c:b7:
                    02:99:db:fd:79:b7:6c:32:c9:f9:24:e1:46:71:ae:
                    1b:6b:20:16:72:c7:83:bc:de:74:39:26:b9:88:84:
                    48:df:fa:26:82:9c:f7:5a:99:6a:db:d0:11:c1:4d:
                    e4:a0:34:01:14:fc:28:8a:32:41:2f:71:4d:e4:2f:
                    48:2e:15:bb:1f:9f:c1:ef:9a:98:6f:3b:b4:90:02:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B9:BD:BF:BD:D5:3A:CD:30:F4:5D:FB:A9:57:6D:48:9A:23:3A:50
            X509v3 Authority Key Identifier:
                keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.108.0/24
                  139.5.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:14:4f:0a:45:9d:fe:98:bf:f4:8d:aa:47:ba:de:f9:32:
         9e:57:60:8e:cc:ea:79:78:0f:e1:4b:68:64:6b:b7:de:51:38:
         f9:ed:6e:3a:df:82:03:ae:eb:3b:ce:f7:5a:cd:b7:b9:dc:7a:
         cd:08:97:fa:75:77:22:2d:49:77:c9:31:0b:25:30:50:f7:d5:
         13:1c:82:07:79:6a:e1:47:8c:40:09:69:26:83:e5:34:c6:8d:
         c7:19:24:e8:b8:94:26:dc:3b:9d:a2:0d:c5:d2:e6:1e:35:26:
         e4:2e:ae:33:c0:4c:f2:48:5c:bf:70:65:95:7f:99:9f:70:7f:
         fa:28:5d:24:e9:e8:e8:6c:54:59:66:3f:0a:d7:b9:90:d4:8b:
         6b:17:f8:00:1a:e6:91:34:bf:ed:6f:d7:cc:9e:bd:dd:fd:ce:
         eb:c1:3e:e9:d4:84:71:7d:52:67:7c:ce:72:c0:32:a0:77:e6:
         15:14:a2:49:48:fe:8e:a5:8c:7a:f1:e7:e5:94:45:6c:91:9e:
         50:fa:0f:61:27:ee:01:0a:d8:8b:e7:86:36:d9:eb:02:c9:bf:
         d7:62:5f:06:a7:7a:6b:86:3d:a2:43:84:6b:b7:14:e2:ca:04:
         4f:07:06:76:51:8f:f3:8e:91:bf:0e:51:a4:c8:92:0c:16:f4:
         f5:71:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:22 2026 by rpki-client