Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
File:                     8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (raw, json)
Hash identifier:          WOG/JDnTMbLnKggPICFOEZMrJLYgxzH3vajEoHzJKiM=
Subject key identifier:   CC:8C:82:F1:4F:62:5B:AC:94:30:08:B4:95:1F:E2:B6:45:2D:A8:8E
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       122D
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 20:25:41 +0000
ROA not before:           Thu 04 Jun 2026 20:25:41 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     20115
IP address blocks:        139.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4653 (0x122d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jun  4 20:25:41 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df44-8c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:62:6e:32:28:ed:dd:41:3d:da:6b:bb:de:
                    cd:99:2e:f9:a4:b6:41:0d:dd:7f:f6:49:bc:ad:24:
                    88:a1:13:dc:86:92:d4:0d:46:e7:73:82:7b:aa:ff:
                    60:03:9c:0c:56:fa:7a:f9:dd:bb:89:8f:70:e3:8d:
                    d8:15:58:65:83:8e:8f:e1:f8:81:d8:c6:c5:6a:60:
                    53:54:70:1f:c1:5f:8f:1e:4c:4b:d6:c2:59:cb:36:
                    c8:d5:d7:1d:47:2c:d1:13:41:58:29:c7:86:24:20:
                    c8:9e:ca:bb:18:1a:ba:3f:4d:b5:cc:97:12:92:f8:
                    09:90:ca:8d:24:70:e8:19:95:9c:8c:21:14:2e:57:
                    80:6a:36:78:d0:82:e7:e6:50:c2:03:76:b9:4c:96:
                    83:b5:6b:1e:46:62:24:8c:ef:3e:f5:32:d2:b7:e6:
                    a8:b3:4e:b0:57:1b:dc:3a:e2:0d:38:e1:e4:08:ea:
                    2a:41:42:f5:89:85:01:79:f9:77:b2:7f:6d:9b:f9:
                    c2:e7:9e:c8:08:b9:94:11:e0:dc:12:05:e5:0c:a2:
                    3e:79:b7:07:28:f6:db:01:99:52:89:9e:cc:72:a2:
                    31:14:3d:a4:a8:d5:81:47:dc:6d:67:5b:9d:3b:d8:
                    c8:52:91:14:6a:54:02:e1:30:bc:cc:6a:df:19:2f:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8C:82:F1:4F:62:5B:AC:94:30:08:B4:95:1F:E2:B6:45:2D:A8:8E
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:cb:4e:62:5c:9c:cb:f6:6f:78:92:d5:4b:1a:a8:a5:53:32:
         d3:9b:a8:e7:12:ed:dd:83:04:70:a4:70:4c:8a:84:aa:1b:ec:
         fe:89:df:db:66:1c:cb:23:c6:f2:19:7f:f1:4a:10:37:59:80:
         78:21:60:3b:78:c2:f5:66:61:2d:33:eb:12:61:cf:61:b7:3e:
         70:58:3b:10:7c:ba:54:4c:4b:16:b5:8e:f4:b3:97:3b:54:06:
         70:9d:f2:e7:00:4d:e2:39:4e:21:af:bd:9b:89:51:24:9b:54:
         30:32:1a:f6:ae:01:dc:72:df:f7:27:71:e1:69:ad:fd:fd:de:
         fd:df:38:3d:df:24:d1:2e:e6:5d:00:ab:5c:70:6f:2b:35:62:
         24:16:10:91:23:ff:73:20:9c:4f:fd:ff:fc:57:1d:1c:79:ff:
         8c:93:8d:72:95:30:0f:c8:35:c5:7a:85:a4:b7:ad:9a:bf:2e:
         16:59:6b:f5:ad:ac:24:59:82:09:54:32:34:7d:4e:57:da:c1:
         6f:95:3f:9c:e3:ea:36:04:33:bc:dd:18:c5:fa:5d:aa:90:06:
         d4:ed:9d:5a:c8:9d:86:1e:60:0b:b0:ec:07:cd:7b:9b:30:0a:
         5c:d0:bd:6f:29:58:4c:f9:ef:df:7d:d0:77:b7:9d:73:a4:00:
         5d:2e:dd:f2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1
Rjg4Mjc2RDMwHhcNMjYwNjA0MjAyNTQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZGY0NC04YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp55ibjIo7d1BPdpru97NmS75pLZBDd1/9km8rSSIoRPchpLUDUbnc4J7qv9g
A5wMVvp6+d27iY9w443YFVhlg46P4fiB2MbFamBTVHAfwV+PHkxL1sJZyzbI1dcd
RyzRE0FYKceGJCDInsq7GBq6P021zJcSkvgJkMqNJHDoGZWcjCEULleAajZ40ILn
5lDCA3a5TJaDtWseRmIkjO8+9TLSt+aos06wVxvcOuINOOHkCOoqQUL1iYUBefl3
sn9tm/nC557ICLmUEeDcEgXlDKI+ebcHKPbbAZlSiZ7McqIxFD2kqNWBR9xtZ1ud
O9jIUpEUalQC4TC8zGrfGS9GVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMyMgvFP
YluslDAItJUf4rZFLaiOMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk
dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEJBRTFGRkE2
RDFBMTFGMEE0RTk0MDREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFi77AMA0GCSqGSIb3DQEBCwUAA4IBAQCjy05iXJzL9m94ktVLGqil
UzLTm6jnEu3dgwRwpHBMioSqG+z+id/bZhzLI8byGX/xShA3WYB4IWA7eML1ZmEt
M+sSYc9htz5wWDsQfLpUTEsWtY70s5c7VAZwnfLnAE3iOU4hr72biVEkm1QwMhr2
rgHcct/3J3Hhaa39/d793zg93yTRLuZdAKtccG8rNWIkFhCRI/9zIJxP/f/8Vx0c
ef+Mk41ylTAPyDXFeoWkt62avy4WWWv1rawkWYIJVDI0fU5X2sFvlT+c4+o2BDO8
3RjF+l2qkAbU7Z1ayJ2GHmALsOwHzXubMApc0L1vKVhM+e/ffdB3t51zpABdLt3y
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:30 2026 by rpki-client