Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
File:                     9F79846406E911EE88450147C4F9AE02.roa (raw, json)
Hash identifier:          YHuylOe6V4D7vzWx7g/TehTUSl3K2ldhZbpjU9gbWi4=
Subject key identifier:   6A:7A:A9:CD:F9:7C:54:3F:0D:41:38:60:60:76:61:DA:52:F4:8E:BE
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       029D
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa
Signing time:             Wed 07 Oct 2026 02:51:37 +0000
ROA not before:           Wed 07 Oct 2026 02:51:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        139.180.12.0/24 maxlen: 24
                          139.180.13.0/24 maxlen: 24
                          139.180.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Oct  7 02:51:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac5b3b9-0be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:b6:37:5b:0c:f7:a5:fb:9e:f4:6d:cc:15:
                    ca:cb:b1:32:b7:e1:64:55:09:5e:9e:0b:9e:1a:5b:
                    0c:8e:b9:a8:4d:f6:4b:2a:f5:1e:45:e1:2d:38:d0:
                    bc:fc:0d:54:f7:c0:1d:44:d5:6e:a7:be:29:3e:99:
                    d5:8a:88:99:e0:82:b4:1e:1c:c7:55:c4:66:77:05:
                    a0:cb:82:cd:7c:b6:47:63:1d:d9:8c:d8:f0:92:80:
                    f9:69:bd:76:8f:19:fd:61:5d:18:26:16:ea:43:7c:
                    f7:7e:93:6a:38:ef:37:d3:08:a6:da:e3:7b:9d:e0:
                    70:51:25:fb:95:ef:eb:d2:89:74:b9:69:a0:0e:ae:
                    67:8f:69:ea:a4:c2:24:8d:fa:b0:2a:eb:41:94:25:
                    84:9e:3f:15:59:f6:1d:eb:23:c9:59:24:b2:40:b1:
                    c7:c5:0a:7a:03:c5:18:44:51:2c:ec:a7:a3:c8:02:
                    60:22:1b:eb:56:ba:b8:04:37:fd:d6:b2:61:dd:b2:
                    f1:24:a4:b1:7d:de:72:87:10:09:66:9d:0c:da:95:
                    89:98:42:98:08:8d:cd:12:d9:fa:17:5e:91:4e:f3:
                    7f:90:d3:a9:d6:12:be:d5:ab:70:36:57:86:a5:21:
                    6c:a1:c2:da:3f:67:db:18:e0:1e:ce:35:78:13:c2:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7A:A9:CD:F9:7C:54:3F:0D:41:38:60:60:76:61:DA:52:F4:8E:BE
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/9F79846406E911EE88450147C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.12.0-139.180.14.255

    Signature Algorithm: sha256WithRSAEncryption
         54:80:7f:41:38:d5:fc:08:e8:9e:9d:6a:dd:08:0b:39:31:2d:
         a8:e4:90:3b:01:e9:2d:28:24:b1:01:97:8f:39:a3:a4:31:c0:
         09:27:b9:04:d5:d2:d7:55:77:de:ba:cd:65:59:ad:23:74:03:
         44:83:1f:5c:f1:da:5c:e5:ed:a0:14:d3:8b:50:e8:7e:4e:69:
         c7:29:db:bc:37:92:ce:ca:a2:06:35:66:99:19:82:4f:4e:ed:
         84:e6:3e:54:d8:3c:82:7d:0a:7f:6f:a3:39:f8:6d:b0:2e:74:
         ad:f3:8a:eb:35:41:1d:8a:9c:64:c5:f3:ec:cb:f5:18:34:8e:
         d5:2d:b6:bd:86:93:02:47:a1:61:47:e9:f6:d2:da:9d:73:5c:
         ad:b2:0f:00:3a:07:6a:93:1d:28:6f:ce:78:15:b9:78:47:f7:
         94:47:f9:eb:fb:ba:77:fb:98:d1:56:c3:49:4a:50:49:a8:41:
         d3:f7:9b:af:e7:67:ab:a0:b8:c9:b1:67:f0:be:53:e4:66:7f:
         a7:92:16:af:24:96:41:21:41:b4:c2:6c:26:f7:41:d2:cc:59:
         09:de:a8:a3:82:e0:7f:96:50:91:74:c1:41:07:4f:41:3b:f0:
         5c:d4:5d:19:a6:ae:69:b4:38:4f:9d:62:94:2f:28:e3:04:5c:
         bb:9d:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:17:34 2026 by rpki-client