Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6BE346006D1A11F0B1F1074DC4F9AE02.roa
File:                     6BE346006D1A11F0B1F1074DC4F9AE02.roa (raw, json)
Hash identifier:          B6cIG1afbkG3vI1TqciNvobQif79q4lJ3Y9WuIuXm0U=
Subject key identifier:   08:99:48:D9:9B:AA:9E:A6:35:8F:73:E7:DC:4F:93:DD:FC:41:BF:FE
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       11EC
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6BE346006D1A11F0B1F1074DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:47:21 +0000
ROA not before:           Wed 30 Jul 2025 07:54:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7843
IP address blocks:        139.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 19:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4588 (0x11ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: Jul 30 07:54:30 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a489b9-a5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:d8:c9:7a:fc:28:35:08:c3:7b:e1:ca:bd:
                    db:93:ba:79:57:53:f0:e4:55:24:6b:17:5d:3e:e5:
                    e9:cc:f9:74:3f:9a:57:05:94:c2:3d:02:2d:3e:e7:
                    f3:1e:e4:28:c1:e7:a7:8b:ce:3b:7c:49:70:3f:33:
                    09:3b:70:fe:94:07:14:bf:0f:39:12:d4:54:b5:56:
                    13:a5:80:80:ba:53:bf:ba:2e:ad:f9:59:f5:37:5a:
                    77:48:db:db:6b:9c:44:f3:8a:89:1d:9f:e4:13:d3:
                    08:d7:e2:8d:ef:42:8d:af:5e:32:c8:d0:e2:5b:51:
                    91:c3:25:07:95:f0:b3:47:a0:03:a2:29:aa:74:ed:
                    1a:52:ea:69:3a:1b:80:88:62:0b:98:1a:bb:b2:6f:
                    2d:cc:d7:30:c7:ce:1f:7b:98:bb:e5:6b:75:04:35:
                    9d:31:28:d4:49:78:11:02:95:40:15:88:cd:47:ea:
                    dd:a5:97:ff:8c:f9:91:9d:a8:20:d6:9d:52:d8:24:
                    fa:11:9d:a2:0a:68:93:1c:a8:d8:1a:aa:21:d4:2e:
                    b0:3b:b3:42:a2:e6:1a:f4:9e:91:32:79:6c:e7:96:
                    ba:0c:4c:cd:67:fe:65:d6:77:0a:a8:bb:c5:fc:0c:
                    06:0b:de:de:7b:28:fa:bf:8d:e6:c4:5d:40:a2:10:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:99:48:D9:9B:AA:9E:A6:35:8F:73:E7:DC:4F:93:DD:FC:41:BF:FE
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/6BE346006D1A11F0B1F1074DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:0d:11:74:71:91:a2:c3:d3:bc:4d:ea:97:1b:29:e9:bf:
         91:ea:a7:40:b4:89:14:d5:b8:01:f9:f9:47:9e:6d:6c:a9:b8:
         9d:f4:62:3f:50:f4:1a:ce:e2:76:a6:a7:fe:68:54:fd:5c:16:
         7f:53:ba:0e:3f:75:7e:33:1d:d2:77:78:53:b2:ca:96:7e:09:
         46:95:91:98:52:ec:81:25:56:8d:83:dc:5d:5c:01:27:7f:ef:
         ec:bd:23:b7:9e:1d:0e:04:64:25:79:e1:2a:6c:90:f7:aa:3c:
         16:1f:b1:b5:e0:1a:b6:c3:ac:f7:9e:88:a8:73:1d:bc:97:94:
         d3:11:fd:3c:36:39:64:e5:f1:14:b0:d8:63:bd:1f:15:33:2e:
         be:67:9b:91:6f:ff:a2:41:b0:e9:f5:61:c9:16:78:9c:f0:99:
         a2:bc:11:a5:3d:a4:d4:af:3c:40:0c:24:a5:5d:e9:4e:cc:fa:
         98:91:0b:3c:fc:e6:f6:5e:45:fc:ee:05:7b:63:80:70:d5:d9:
         85:71:12:38:72:f7:d5:51:dd:dd:fb:08:3d:f9:15:5d:e3:98:
         90:5e:2f:4e:72:af:22:32:11:85:34:b2:d6:4b:60:b8:e6:e5:
         67:45:99:5f:13:e2:bf:de:c1:6d:a5:89:55:2d:27:3e:e1:82:
         7b:9e:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 15:44:07 2026 by rpki-client