Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
File:                     9D8E6D02C2A511EBB2025B36C4F9AE02.roa (raw, json)
Hash identifier:          PlEnsEP21PJC16O7WpqiMN6BCHLW/59u/YvhE9nkz+Y=
Subject key identifier:   FD:2F:25:0D:32:BC:9E:81:1D:26:BF:F7:26:C6:B5:7A:31:69:8F:BD
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3916
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 14:50:33 +0000
ROA not before:           Fri 04 Jul 2025 14:50:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     17860
IP address blocks:        139.5.226.0/24 maxlen: 24
                          139.5.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 14:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14614 (0x3916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6867ea39-5172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:9f:0e:c2:a4:23:4c:3f:54:9f:99:bf:fc:
                    24:c2:c2:e4:c2:ef:29:30:2a:94:29:e2:ae:3e:a8:
                    39:7a:e0:c3:13:33:c4:69:a2:f4:b3:fb:0d:48:95:
                    d0:66:67:52:d2:fd:55:ae:aa:6a:23:eb:7d:45:30:
                    53:43:71:92:d7:df:52:91:d5:b6:19:bb:8d:da:f9:
                    9d:c1:71:65:dc:ce:58:94:5b:68:81:71:8b:03:14:
                    f9:32:ff:42:31:c9:7d:df:d9:3b:3e:d6:39:96:dd:
                    fb:d9:14:d5:04:65:a7:95:6f:bf:5e:2e:d5:73:2b:
                    8b:b5:35:57:e9:92:a1:6d:f4:4d:88:b5:aa:cf:0a:
                    4c:01:80:76:00:a7:76:fc:7e:b3:2a:66:fe:e4:24:
                    8b:f6:31:01:4d:70:1b:a4:83:2b:e3:c2:3d:a7:09:
                    9a:21:09:17:a9:8e:83:5d:09:81:b7:b0:c8:f4:90:
                    62:a6:40:55:3f:a3:5c:6f:3f:51:1a:a5:e9:0c:29:
                    1c:de:02:f1:db:41:80:56:04:ab:86:b7:46:cf:d7:
                    d0:08:fc:d8:bf:04:9d:cc:c7:16:61:7f:bd:97:62:
                    54:98:56:1f:3b:0c:b1:89:d9:d8:86:c9:df:87:21:
                    32:73:fb:4f:b7:b9:14:c9:e1:44:aa:2d:a1:4e:a7:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2F:25:0D:32:BC:9E:81:1D:26:BF:F7:26:C6:B5:7A:31:69:8F:BD
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/9D8E6D02C2A511EBB2025B36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:94:8d:63:b9:8c:a2:e1:50:72:d8:3c:75:87:0e:a3:bf:0a:
         57:74:a0:da:98:ac:55:8a:16:9d:39:1f:64:c9:22:cf:ea:9f:
         db:b7:98:98:a9:96:bf:ec:72:96:0a:88:d2:d0:7c:d0:10:ef:
         b0:97:bb:71:e7:20:fa:48:0c:d4:1b:2d:75:89:d3:92:04:3f:
         cf:c1:b9:d6:68:6f:0c:82:d6:a3:28:27:53:10:c7:b0:b9:4b:
         3b:4b:0a:aa:9f:78:65:11:37:7c:0d:6b:5d:d1:ef:cd:9e:87:
         c6:b6:a2:b6:5a:8c:01:a6:1d:94:4a:c7:63:36:e6:89:57:f8:
         74:f0:4f:ca:09:6c:38:8c:7f:3c:89:72:1a:09:60:f5:fa:8c:
         f1:f5:0c:b3:73:28:58:63:5a:ef:1a:15:93:00:f6:58:3f:73:
         35:67:d5:9f:49:b6:4c:6e:43:ed:cb:47:81:d0:dc:74:fa:29:
         c0:b2:6d:e4:07:ac:0b:1b:d9:3c:e1:6c:2d:84:55:66:dd:25:
         27:8c:2a:a6:3e:77:82:bc:ba:8f:f1:56:cd:15:39:30:e8:a2:
         98:1c:b2:29:59:49:0e:fe:7d:35:2c:d5:f3:17:dd:3d:76:bf:
         56:af:78:de:ed:b2:17:7e:dc:d2:29:04:9d:38:cc:47:a5:d1:
         6e:b4:22:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:23:46 2025 by rpki-client