Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6BE346006D1A11F0B1F1074DC4F9AE02.roa
File:                     6BE346006D1A11F0B1F1074DC4F9AE02.roa (raw, json)
Hash identifier:          F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=
Subject key identifier:   4A:61:72:48:17:8E:3C:70:44:59:11:45:99:47:C5:44:5C:AE:31:C9
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       1125
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6BE346006D1A11F0B1F1074DC4F9AE02.roa
Signing time:             Wed 30 Jul 2025 07:54:30 +0000
ROA not before:           Wed 30 Jul 2025 07:54:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7843
IP address blocks:        139.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4389 (0x1125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jul 30 07:54:30 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6889cfb5-0b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:d6:9b:7d:2b:92:2d:d3:cb:21:dc:48:aa:
                    54:26:56:96:2b:70:dc:46:eb:dd:f3:8b:ca:dd:c2:
                    e7:bb:f0:27:70:41:17:bd:89:76:51:fe:40:3e:15:
                    12:72:d0:76:63:a8:92:f9:59:98:f7:18:97:10:d1:
                    5f:c4:32:9a:e3:5b:0a:5a:c5:76:56:aa:31:97:84:
                    cb:49:fc:f7:cf:69:09:d3:a5:a8:93:45:17:4e:53:
                    f9:c6:72:55:67:ff:39:60:57:c4:9b:7e:7c:58:d4:
                    03:15:49:ed:d3:62:e0:1f:b9:a5:c9:42:8b:b1:ee:
                    c3:f8:58:9e:5d:3c:d3:41:d2:7e:a0:6b:f9:80:77:
                    66:ee:cf:e0:d0:67:5e:17:b4:30:01:45:7e:60:b9:
                    66:e4:55:43:0e:51:a2:ee:d1:09:74:b0:49:a2:d7:
                    38:24:6b:a7:f4:08:ec:1c:27:8c:79:61:1c:18:ad:
                    57:da:e0:52:eb:68:92:f0:20:09:7a:80:f8:8f:91:
                    bc:71:b8:d7:7c:5f:5d:af:a3:9d:77:76:88:4e:59:
                    cb:98:66:ef:ae:64:85:83:2c:ef:01:70:5a:80:b6:
                    5a:ea:29:fc:d5:71:e8:32:75:38:b2:9f:72:44:c5:
                    b0:05:99:58:7c:d4:83:1a:75:8c:46:35:a7:bd:2c:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:61:72:48:17:8E:3C:70:44:59:11:45:99:47:C5:44:5C:AE:31:C9
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6BE346006D1A11F0B1F1074DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:18:56:76:57:62:f3:76:38:51:56:df:0e:bf:74:fa:c5:
         f4:79:a6:7f:ac:17:e8:39:a9:60:1e:04:e4:24:ba:46:9b:fa:
         8f:93:ba:1c:ae:13:d5:09:5b:e3:05:98:e5:75:dc:92:c1:5e:
         e4:02:09:e8:f4:d0:30:8d:d0:43:1a:1c:12:66:01:45:f9:ca:
         f0:37:08:71:80:db:d7:d7:d6:42:10:4f:5a:66:fa:3c:6c:4b:
         19:74:93:e0:bc:bb:56:a6:12:1a:cd:f9:5a:e9:ac:27:52:35:
         67:b0:44:0a:e4:e1:73:cb:91:42:01:02:01:3c:1e:e9:99:d7:
         89:70:8a:1d:fd:67:4d:80:1a:4c:52:cb:ea:b2:51:fe:b5:46:
         62:b4:7c:73:0c:6e:62:09:90:2e:65:db:7d:21:c7:e5:4e:eb:
         80:98:ab:da:13:9a:a6:db:ec:77:36:6a:e5:ae:11:50:14:0a:
         2c:f9:56:9c:46:1d:a6:a7:48:fb:ab:12:82:07:cd:4c:d6:6c:
         ba:1c:7e:7c:27:06:46:af:3c:a9:de:7d:9f:83:ec:8c:d5:be:
         6f:3a:49:05:4e:2b:11:cd:ca:0e:16:ff:59:71:eb:2f:dd:10:
         74:65:98:c1:b2:d6:5c:57:08:81:e5:18:e9:01:c4:49:ca:e7:
         d4:75:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:14:12 2025 by rpki-client