Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/8A80B8D69A1011F0AC6E9127C4F9AE02.roa
File:                     8A80B8D69A1011F0AC6E9127C4F9AE02.roa (raw, json)
Hash identifier:          Dpuua3C8HF/TzJDPbTHc748WAwDZUWGv1xbXjI6Ri+E=
Subject key identifier:   F9:AE:33:FD:13:04:A4:78:03:FB:EA:F2:26:E7:19:53:BB:B8:4B:DE
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       6A
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/8A80B8D69A1011F0AC6E9127C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:55:00 +0000
ROA not before:           Sat 13 Dec 2025 07:25:25 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        139.230.0.0/16 maxlen: 16
                          139.230.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Dec 13 07:25:25 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46f64-9791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:d0:bf:43:00:ca:d9:55:9d:68:ad:df:ca:
                    21:0e:ed:9b:f8:52:bd:05:00:be:76:7c:33:da:4e:
                    d6:f4:54:93:6d:5b:1b:43:ef:5a:90:9f:10:1c:f7:
                    6f:5b:5b:d9:1e:e5:37:5b:30:72:05:1d:20:bb:63:
                    d3:c4:ec:48:fd:a5:c8:ce:29:dd:ec:85:6d:e3:dd:
                    11:48:ee:d3:0e:5a:45:e1:aa:f1:3d:6d:32:64:3e:
                    bd:d5:ec:f7:f1:5c:a7:2d:90:d2:47:1e:fe:91:e6:
                    1b:ec:62:51:29:1c:05:0c:dc:bd:bc:1e:6e:e9:ec:
                    fd:d6:d2:e5:9f:01:0f:44:96:af:f1:74:c0:cd:7d:
                    85:8f:80:4c:b9:fd:ad:f4:8d:c6:1f:0b:be:e1:6c:
                    05:65:b0:54:4f:af:2a:f6:87:d8:7d:18:d2:9c:00:
                    0f:ce:3c:5b:23:19:47:40:c1:9a:d6:d0:9c:b9:2a:
                    5c:9b:7c:c5:b0:32:6f:68:54:72:62:14:50:47:3d:
                    cc:9f:8f:d5:49:ca:e2:0b:13:9b:42:52:e5:ad:e5:
                    55:3f:86:27:19:ed:4b:b0:5e:99:6f:aa:da:ec:a8:
                    38:e0:e8:bc:6b:09:b5:f6:4e:8d:ba:a1:a9:6f:66:
                    24:30:e0:2f:4b:10:ed:b4:4c:f2:ac:6c:8e:93:78:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:33:FD:13:04:A4:78:03:FB:EA:F2:26:E7:19:53:BB:B8:4B:DE
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/8A80B8D69A1011F0AC6E9127C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:4e:93:ad:71:99:d6:8c:7a:06:1c:71:df:38:4d:06:d5:
         b8:71:4c:4d:a9:bc:f5:4f:40:0a:09:a4:68:c4:82:05:b8:54:
         e2:64:89:0c:1c:7c:21:f6:f1:cf:0b:98:39:37:a1:28:80:9c:
         64:11:be:16:2a:34:78:b3:6b:09:ee:39:db:91:97:62:4f:a4:
         e2:41:62:3a:6d:50:98:f2:e2:2c:a1:17:67:1e:c3:5e:33:35:
         0c:10:ed:51:b1:7b:15:f0:58:1f:cf:14:69:70:5f:62:bc:73:
         9c:5c:fd:73:83:a8:bb:29:82:d8:18:90:2c:cf:8e:1e:6e:96:
         91:c9:7c:c7:0f:8b:73:06:dc:7e:0c:64:5f:8c:e3:23:c4:05:
         6e:2b:87:2f:bc:9d:09:87:b7:fa:32:aa:e8:9b:59:c8:0c:f7:
         23:44:17:c6:99:94:7d:86:91:4a:fa:b2:ca:83:78:a7:a8:bb:
         c9:b1:ed:33:92:e7:61:ac:0e:07:ff:bc:3a:e3:02:71:c3:15:
         86:e2:86:8e:8a:47:f3:82:3f:c4:c8:64:92:b7:f1:a9:24:51:
         99:ae:c2:1f:c8:b9:bd:62:6e:27:73:75:de:75:71:94:e0:50:
         c0:f5:7e:15:c6:22:28:f0:82:a2:00:7a:09:a1:5e:c0:0d:cd:
         74:19:96:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:04 2026 by rpki-client