Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/E5925096093911EEABCFA170C4F9AE02.roa
File:                     E5925096093911EEABCFA170C4F9AE02.roa (raw, json)
Hash identifier:          COVvPwRRBQaYkijAL/8dGT7ATCUM7/oNgeAZamGV0AU=
Subject key identifier:   7A:CA:8A:13:C0:96:E4:65:F8:8A:3C:11:1B:33:6E:26:04:6A:73:F7
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       01C5
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/E5925096093911EEABCFA170C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 03:51:12 +0000
ROA not before:           Wed 03 Sep 2025 03:51:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132388
IP address blocks:        139.180.8.0/24 maxlen: 24
                          139.180.9.0/24 maxlen: 24
                          139.180.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 03:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Sep  3 03:51:12 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7bb30-50b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:6c:0a:cc:a9:14:ec:51:61:82:fd:67:af:
                    11:04:53:4c:7a:3b:f6:80:3a:70:bb:54:e3:3b:af:
                    51:71:64:d1:08:47:39:9a:19:8e:6a:b0:cb:a3:3f:
                    8b:08:8e:74:5e:39:f9:19:c2:7e:b9:d9:4c:e5:2e:
                    84:aa:59:60:61:4b:19:b9:fb:46:17:d1:c3:ee:68:
                    dd:0b:48:e0:4e:34:21:19:11:4b:8a:99:e3:4c:51:
                    05:5d:74:72:8e:e0:42:02:3d:ce:23:90:e0:18:41:
                    b3:f6:c3:82:ef:e9:10:3d:96:cc:27:ba:6a:0c:27:
                    f3:c1:8a:0c:96:a4:a0:62:f3:da:fd:8a:68:55:06:
                    e4:2b:db:e5:47:75:f3:70:1f:33:1a:d0:aa:0f:f6:
                    01:5e:df:c9:c9:d8:f9:a6:79:19:b3:4c:2e:43:a2:
                    b9:bd:86:ad:58:89:bb:0f:2d:f5:aa:eb:a4:79:61:
                    6d:d9:b5:48:ee:21:2b:14:43:21:8d:82:6a:cd:0b:
                    df:de:4c:ee:71:32:32:54:11:3c:f6:53:7d:8c:46:
                    2e:a1:4a:e5:bc:ce:28:98:e1:8d:72:ea:fd:f0:c7:
                    35:ec:f0:20:28:4e:10:7e:dd:3d:e9:fd:b3:68:b0:
                    d8:6c:38:8f:85:4a:b2:9c:2c:89:b8:8c:81:48:6f:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CA:8A:13:C0:96:E4:65:F8:8A:3C:11:1B:33:6E:26:04:6A:73:F7
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/E5925096093911EEABCFA170C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.8.0-139.180.10.255

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:58:27:89:71:79:6e:25:4a:6c:ad:54:04:54:83:c7:0b:
         72:dc:3c:ce:c3:bd:d7:09:f5:1b:ed:66:9b:f8:3b:3a:66:0d:
         4d:c5:f4:3c:79:3d:17:31:6e:57:46:42:bf:b7:02:a0:20:d4:
         7f:c6:6b:c1:fc:b7:25:59:ab:8c:36:81:40:86:ab:53:95:a4:
         d0:4c:10:48:ad:f2:99:66:3c:d2:64:78:3e:15:e8:63:91:6a:
         ca:ef:a5:f8:5f:d2:79:22:19:84:9f:4b:bf:51:94:8a:cf:9c:
         2c:35:0e:ec:6a:de:dd:91:dc:a1:1c:b2:f3:04:b1:95:09:53:
         59:04:43:91:cd:36:19:c7:f8:76:b4:8e:82:b4:95:80:d3:96:
         c9:5a:04:fd:3f:4e:18:c2:6b:60:04:eb:fe:e2:81:b1:e1:69:
         92:e2:32:9a:26:cf:13:5e:1d:82:7d:3e:5f:b2:4b:e1:cd:3e:
         9d:08:da:19:7c:49:74:09:d4:f9:6e:dd:9f:00:31:a8:e7:d4:
         17:d7:9f:d9:93:3e:af:49:ee:df:6e:0d:38:32:0e:aa:c2:49:
         80:ba:89:81:1e:94:27:51:bd:e9:29:73:a6:7a:fa:24:3f:b4:
         70:10:22:09:28:9a:93:7d:09:58:86:5d:f2:4e:ae:b8:94:a6:
         07:72:f4:ca
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjUwOTAzMDM1MTEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3YmIzMC01MGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LNsCsypFOxRYYL9Z68RBFNMejv2gDpwu1TjO69RcWTRCEc5mhmOarDLoz+L
CI50Xjn5GcJ+udlM5S6EqllgYUsZuftGF9HD7mjdC0jgTjQhGRFLipnjTFEFXXRy
juBCAj3OI5DgGEGz9sOC7+kQPZbMJ7pqDCfzwYoMlqSgYvPa/YpoVQbkK9vlR3Xz
cB8zGtCqD/YBXt/Jydj5pnkZs0wuQ6K5vYatWIm7Dy31quukeWFt2bVI7iErFEMh
jYJqzQvf3kzucTIyVBE89lN9jEYuoUrlvM4omOGNcur98Mc17PAgKE4Qft096f2z
aLDYbDiPhUqynCyJuIyBSG8d3QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFHrKihPA
luRl+Io8ERszbiYEanP3MB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE4MTgvNjhFQTczRUMwNjlDMTFFRThDNjY3ODEyQzRGOUFFMDIvRTU5MjUwOTYw
OTM5MTFFRUFCQ0ZBMTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEA4u0CAMEAIu0CjANBgkqhkiG9w0BAQsFAAOCAQEAnGxY
J4lxeW4lSmytVARUg8cLctw8zsO91wn1G+1mm/g7OmYNTcX0PHk9FzFuV0ZCv7cC
oCDUf8Zrwfy3JVmrjDaBQIarU5Wk0EwQSK3ymWY80mR4PhXoY5Fqyu+l+F/SeSIZ
hJ9Lv1GUis+cLDUO7Gre3ZHcoRyy8wSxlQlTWQRDkc02Gcf4drSOgrSVgNOWyVoE
/T9OGMJrYATr/uKBseFpkuIymibPE14dgn0+X7JL4c0+nQjaGXxJdAnU+W7dnwAx
qOfUF9ef2ZM+r0nu324NODIOqsJJgLqJgR6UJ1G96Slzpnr6JD+0cBAiCSiak30J
WIZd8k6uuJSmB3L0yg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 07:28:00 2025 by rpki-client