Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/E926A8ECDA8C11F1AFD446DE2566CEF9.roa
File:                     E926A8ECDA8C11F1AFD446DE2566CEF9.roa (raw, json)
Hash identifier:          ZWFQZuRBAewvOj+NfDqKQgWzz71qqqbTNnsuZfsZcnw=
Subject key identifier:   F8:28:72:B9:DC:E1:1F:23:83:24:0A:D6:2D:70:35:E9:E9:4F:C5:1D
Certificate issuer:       /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial:       08BF
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/E926A8ECDA8C11F1AFD446DE2566CEF9.roa
Signing time:             Sat 07 Nov 2026 09:23:37 +0000
ROA not before:           Sat 07 Nov 2026 09:23:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40605
IP address blocks:        139.5.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
        Validity
            Not Before: Nov  7 09:23:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aeeee19-926c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:05:f7:b7:d1:53:aa:e1:93:e0:a2:5b:af:
                    1d:14:f0:b5:a5:fd:1b:5f:69:b1:91:77:09:b6:95:
                    ce:23:f3:23:66:da:2e:1a:e0:e1:ec:cc:b1:a5:f1:
                    35:6c:20:e3:f3:24:fd:0a:f2:de:5f:d8:58:37:2f:
                    36:56:39:ba:35:4b:57:a8:08:19:42:8f:48:e2:2c:
                    e4:16:16:65:dd:6f:3d:b3:59:00:f9:eb:fb:89:0f:
                    ce:64:d0:ac:3b:87:13:f9:f1:93:32:03:8b:c7:48:
                    73:ee:df:fa:f7:17:3a:15:3c:e0:35:70:75:06:c9:
                    f0:c3:b5:9d:9b:fd:d3:d1:de:49:d6:d6:c9:62:ca:
                    e6:cc:d9:71:7e:fd:ea:f3:72:29:de:06:2b:93:46:
                    9b:82:2c:a3:9d:83:e1:60:6d:97:42:29:a8:c1:77:
                    c5:d3:b3:22:e2:28:f0:8e:e6:0e:1a:39:b8:ec:23:
                    93:30:a4:34:3a:c2:d4:65:e6:d7:75:8d:b8:af:c1:
                    b7:b1:b4:90:2e:97:ea:19:18:fc:23:1d:95:6b:c6:
                    85:58:8d:3d:f5:bc:b2:1f:12:2c:8f:f5:17:39:62:
                    18:18:bb:d4:b3:c9:fa:fd:68:9a:f4:a8:49:26:a9:
                    7e:84:93:b7:a2:6e:b4:d0:8f:6b:1e:df:80:a6:ae:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:28:72:B9:DC:E1:1F:23:83:24:0A:D6:2D:70:35:E9:E9:4F:C5:1D
            X509v3 Authority Key Identifier:
                keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/E926A8ECDA8C11F1AFD446DE2566CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:64:89:15:ce:58:37:67:71:e4:58:c4:50:0d:88:14:14:62:
         40:10:2d:7c:f3:47:e0:c9:ba:69:4d:3c:9d:4a:62:0d:ef:0e:
         b0:b7:58:c4:d9:38:c4:71:b0:75:10:c5:9b:52:3d:24:79:a1:
         17:3e:4e:7e:a0:55:f9:19:b7:f3:1f:b6:11:be:41:92:3a:ff:
         ab:f1:a2:1a:bb:90:10:ee:49:0a:82:5d:29:49:48:b7:53:c9:
         6a:b3:19:69:f1:4e:7e:82:9f:58:6a:16:8b:8f:c1:5f:41:2d:
         0d:8b:05:ff:02:4b:2f:7e:dc:0b:bc:fa:ea:8a:6d:73:bd:80:
         ac:99:9d:5c:2d:6a:a3:9a:57:8f:d5:3f:0d:96:d7:5e:83:9a:
         90:55:0c:ea:d3:fa:0c:b4:cf:ae:4c:9f:38:aa:c9:74:79:00:
         d2:bb:6c:74:9c:93:4e:68:63:f5:c8:2d:04:d2:e6:3f:cc:9f:
         42:d8:eb:a9:9e:de:97:1b:df:2f:e1:24:46:0b:94:9a:68:3a:
         87:db:29:a8:c1:1c:23:09:1a:7d:b5:ba:6a:6e:9b:e0:6f:b1:
         23:ea:06:e5:9b:b1:1b:8b:ee:df:0f:36:46:3d:7a:9e:98:9b:
         52:26:af:33:f0:b7:cd:4c:80:e0:a8:96:6f:72:8b:08:04:87:
         00:35:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:10 2026 by rpki-client