Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
File:                     8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (raw, json)
Hash identifier:          9kr7YRweIjs9sYz5LEa5FyxtFuVknS+hpV3R4t44fNs=
Subject key identifier:   62:9F:BB:1E:EF:0A:16:C5:A5:22:13:F9:89:A4:F8:CD:CC:60:32:DF
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       11ED
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:22 +0000
ROA not before:           Wed 30 Jul 2025 07:55:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     20115
IP address blocks:        139.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4589 (0x11ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jul 30 07:55:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a489ba-8605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:4c:23:1e:3a:43:72:17:31:b3:03:ae:7f:
                    c0:36:64:99:30:04:75:05:6c:1f:28:16:7b:c9:b7:
                    49:e1:40:50:9d:5f:3d:32:21:63:76:0a:c6:3b:6b:
                    35:6c:92:22:63:ca:ee:3b:e0:7a:1c:ce:64:2e:f1:
                    c1:39:0e:31:b2:bd:c0:4a:21:8c:7e:0a:86:19:e5:
                    fe:1b:66:21:f5:16:4f:42:af:0e:50:d0:cf:c3:4a:
                    6c:27:fc:26:f4:8b:f6:e2:40:1e:7b:a6:5a:12:dd:
                    d6:27:e6:27:df:82:ad:c7:e5:83:00:12:e0:ba:dd:
                    d0:67:a5:da:7d:5f:d8:93:71:a8:29:31:92:45:bc:
                    7c:58:bd:f8:a9:6a:45:4a:e8:c8:76:ac:0d:75:3f:
                    fd:8d:9e:52:4a:60:69:47:69:2e:9b:4e:b2:41:2a:
                    76:93:23:28:a6:a8:84:fb:ed:c7:b3:35:69:4a:69:
                    8d:c4:05:11:05:ce:0d:6c:f2:42:17:99:c6:20:0d:
                    36:1c:2f:10:94:39:91:40:ff:e7:7f:71:90:2f:55:
                    37:2d:65:3a:dc:f1:1d:9f:68:4c:a4:9f:92:54:9c:
                    3c:12:0e:bf:f6:a9:9c:a6:07:9c:7c:3c:f9:e7:dd:
                    fc:b2:19:c9:2a:14:c4:1e:24:f3:11:22:08:a9:55:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9F:BB:1E:EF:0A:16:C5:A5:22:13:F9:89:A4:F8:CD:CC:60:32:DF
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:b1:9c:ee:c4:6d:e4:cb:97:d6:0e:0e:49:b4:2f:79:18:
         18:bd:e6:37:a4:c6:e9:db:bf:b8:5f:e6:94:90:13:9e:aa:96:
         7e:e1:d9:bd:77:df:56:38:43:1f:8a:f1:eb:4b:a1:95:59:6b:
         19:f5:ec:1d:2b:b1:2c:de:e7:a6:7a:28:96:b3:1a:6e:e9:7a:
         ea:02:39:1a:f3:e1:7a:a7:01:44:e6:b7:39:0e:97:43:60:32:
         ee:a3:ae:ab:bf:0f:fa:e0:80:4d:d5:c7:dd:67:5d:c4:e9:22:
         47:4b:ec:04:9f:6c:d5:0a:75:6e:48:bc:9e:53:73:05:b2:72:
         d5:ed:4a:d4:c7:59:68:93:83:20:26:39:08:4e:5c:61:3b:ff:
         42:7d:10:47:8b:a8:38:f4:66:b6:e9:35:28:c5:98:04:73:b6:
         a7:64:6d:e2:d6:ac:5d:71:eb:2b:bc:95:2d:11:7e:a6:e9:3a:
         35:39:ac:2a:5b:07:8a:f5:45:31:1e:30:bb:4e:4a:75:c5:1e:
         3e:98:32:f5:22:7a:13:9d:41:92:2d:55:40:e4:91:fb:84:27:
         f1:60:24:00:77:12:28:53:57:9c:a3:85:78:0f:3c:a8:50:4f:
         cd:59:bb:d0:ba:6c:53:b6:8f:b0:21:0c:99:3c:a4:a7:a5:e4:
         92:7e:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:10 2026 by rpki-client