Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE8F55206E911EE88450147C4F9AE02.roa
File:                     9EE8F55206E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          R6zicuGc5j5WIEznRKzKMEUHTEcekYg+eZaMy/xb74A=
Subject key identifier:   F8:FC:36:0A:8A:31:F5:C5:27:13:0B:82:4E:A3:6D:D0:F2:79:94:87
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01C6
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE8F55206E911EE88450147C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 03:51:13 +0000
ROA not before:           Wed 03 Sep 2025 03:51:13 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 03:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep  3 03:51:13 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7bb31-fb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:ab:16:11:0b:4e:75:a5:92:8a:d7:94:bc:
                    54:b4:8f:a1:a3:1b:31:88:26:9f:2d:6a:09:10:7b:
                    80:34:a7:09:d0:5f:ea:be:80:e6:e7:1a:64:46:50:
                    6a:a3:b4:63:88:5d:34:72:7d:dc:4e:9d:57:94:b8:
                    66:97:4b:81:95:2d:4b:05:fa:70:3c:b4:26:e2:49:
                    8c:e1:4f:cb:44:89:fb:e9:9a:46:4a:1e:27:39:55:
                    0d:7b:a8:fa:0e:f4:27:68:e2:46:3e:8e:48:75:16:
                    3c:c7:17:6a:fd:79:56:b6:42:1e:9b:db:79:70:2e:
                    f2:0d:90:d2:6a:c1:aa:b7:0a:1b:31:e0:96:3b:08:
                    72:ac:a3:82:5c:8d:32:f1:e0:de:dc:4c:21:27:ac:
                    bd:39:71:59:bd:51:a3:fa:dc:2c:2e:96:f8:e3:3b:
                    02:a0:48:72:54:45:b0:af:8c:f2:14:c0:01:64:5c:
                    0c:4f:82:7f:c9:2b:16:27:c6:f1:6e:69:dc:42:72:
                    d3:8b:ef:fe:3d:84:8b:42:f9:9f:1b:c0:7d:99:5a:
                    ec:d8:14:d1:19:58:ed:5c:67:b4:d9:53:dc:b1:37:
                    b6:b3:ee:f7:72:35:fd:4b:9a:48:26:b0:13:0a:90:
                    e4:6d:1e:2a:1d:fb:35:bf:27:b7:bd:a2:64:88:61:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:36:0A:8A:31:F5:C5:27:13:0B:82:4E:A3:6D:D0:F2:79:94:87
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9EE8F55206E911EE88450147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         51:d3:db:6c:71:94:ab:b6:e3:41:2f:bf:1e:2f:48:cb:53:c1:
         ac:fc:d2:5a:a7:71:ab:af:44:fa:e4:ee:af:5f:a2:b3:0c:50:
         f0:93:cb:1b:91:5f:c2:a3:d7:c0:f4:8a:0e:9d:ac:d2:d0:bf:
         1d:c3:d3:2c:ba:bf:11:4f:8a:cf:d7:86:8c:77:65:44:b7:e4:
         aa:d4:04:71:99:f6:6d:88:7e:07:c6:e8:fa:a5:e6:28:e0:e6:
         4c:5c:c6:84:0f:2d:1e:ea:71:5a:ba:f8:9e:60:ca:a1:41:cb:
         9c:81:05:83:15:f3:64:79:7c:21:6c:15:07:dd:6c:7b:52:4d:
         4f:ad:cd:fb:9c:ed:e7:f5:f6:37:49:5c:e4:ca:d6:7a:d7:3d:
         3d:06:a4:d8:da:09:2a:0d:21:77:05:15:37:28:2a:b9:52:de:
         98:89:8f:42:c7:53:7d:57:35:79:78:8c:be:47:1b:03:4e:36:
         0a:77:8a:ef:77:0d:b3:2b:95:cb:0a:73:c8:80:f0:43:ee:71:
         4f:d4:ad:19:fd:fe:c7:99:2b:29:a9:bc:7f:9e:f3:f8:e2:05:
         ff:0a:71:b0:63:ed:bf:85:01:8b:63:56:95:ef:04:65:d8:94:
         2c:99:e7:6a:0c:59:0b:0e:03:5f:53:22:29:d8:92:f1:a4:b9:
         9d:cf:ea:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:56:10 2025 by rpki-client