Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa
File:                     24B754BA9B7911EFBA9A2A42C4F9AE02.roa (raw, json)
Hash identifier:          nYeFBOsuOa+AhwOe+QjEdtDHW5x1Jxsma/8+kniQAXk=
Subject key identifier:   D2:B1:3D:D8:57:E7:5E:33:AE:67:59:64:F4:C8:2D:42:B5:35:56:11
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       11EB
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:20 +0000
ROA not before:           Wed 30 Jul 2025 07:53:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7029
IP address blocks:        139.190.192.0/19 maxlen: 19
                          139.190.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4587 (0x11eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jul 30 07:53:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a489b8-1066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:14:ef:59:90:a2:8f:f4:90:18:b9:bb:eb:
                    f0:b2:8a:0c:86:aa:89:8b:b6:0d:58:0d:a2:95:08:
                    c7:c6:46:3e:46:38:76:b6:9f:8e:14:1f:fe:4c:c0:
                    a3:94:e3:89:45:a7:fe:f2:3b:34:e8:9a:73:c0:24:
                    9c:4e:73:36:27:0a:75:68:83:03:95:49:72:1a:02:
                    e2:0c:19:50:dd:86:a8:0d:bd:38:f8:e6:39:3d:65:
                    93:07:f4:d1:3e:59:de:1e:af:e6:fc:72:36:62:37:
                    74:08:34:ee:25:f2:44:7b:7a:04:b0:84:0a:b2:1e:
                    8b:d9:0d:d2:3d:2b:17:25:46:48:5a:ca:c4:f9:10:
                    fa:66:b5:47:01:c1:6f:ad:58:12:b9:a0:bb:82:35:
                    74:2e:d3:cd:02:81:43:f3:e3:2e:03:ae:da:1f:67:
                    cc:32:08:1f:90:31:e8:d4:2d:b8:c3:42:16:b6:3a:
                    3e:51:4d:12:b6:de:7d:e8:ba:9d:3b:f9:77:78:d8:
                    e4:8c:cd:10:04:53:bc:04:92:4b:ef:e6:b9:0b:1f:
                    a0:64:f0:67:1c:c8:e9:08:6b:ce:1f:26:8a:73:09:
                    ea:7a:3a:a3:c4:99:36:63:c9:95:3d:18:36:59:e6:
                    31:7a:02:b3:fa:b0:6e:6c:7b:02:b1:4b:fd:f2:97:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:3D:D8:57:E7:5E:33:AE:67:59:64:F4:C8:2D:42:B5:35:56:11
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/24B754BA9B7911EFBA9A2A42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.192.0/19
                  139.190.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:37:d8:45:f7:31:fa:fc:be:59:b6:27:41:71:f7:fa:6f:
         5f:7d:c7:9f:a8:2b:17:1d:a5:e8:7f:75:a2:b2:9a:0e:24:57:
         e3:5d:a6:de:c2:19:3c:3e:10:42:7b:af:b6:af:4d:7a:54:50:
         37:01:77:d6:28:e8:e3:23:38:16:09:4a:11:16:29:ef:7a:0f:
         d5:0a:fa:fa:62:8d:1f:33:36:8e:27:11:3e:49:98:f2:c8:31:
         e9:87:d4:c3:f1:1d:31:9f:30:14:85:fb:0a:00:5d:21:f5:9e:
         71:07:fe:29:1d:26:90:11:76:a7:6f:26:0c:45:ef:8e:93:d5:
         be:e5:6c:06:aa:02:5c:91:dd:08:94:a2:75:f2:92:75:f4:6c:
         44:d0:0a:d4:54:b2:5a:f8:48:5e:f4:c2:64:95:10:07:a8:a1:
         79:f2:9d:d3:80:b0:fb:18:d8:d1:e9:e6:ed:a8:99:76:cf:15:
         5a:05:cf:fb:02:6b:dc:b3:a1:fd:e7:35:03:29:86:d4:3b:c3:
         c6:0f:83:a8:36:7f:4a:68:98:8f:9f:8b:6d:c7:56:dd:53:89:
         f3:c2:ec:1f:d1:9d:c8:05:c8:4e:c1:03:cb:a3:d4:07:66:44:
         4c:45:d5:0d:63:64:c8:66:60:df:64:a4:cc:d2:93:77:8c:fa:
         84:dd:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:02 2026 by rpki-client