Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9415082C580911F1AF5AA0C49D833773.roa
File:                     9415082C580911F1AF5AA0C49D833773.roa (raw, json)
Hash identifier:          FvQJFCPhXE7HVK2mh8xsfjFJf3P4zYwFV1DGQVJhka8=
Subject key identifier:   F7:59:C6:C8:B6:3A:13:0C:99:B5:F1:75:00:03:C7:3A:09:26:DA:AB
Certificate issuer:       /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial:       1224
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9415082C580911F1AF5AA0C49D833773.roa
Signing time:             Mon 25 May 2026 07:15:59 +0000
ROA not before:           Mon 25 May 2026 07:15:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        139.190.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 20:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4644 (0x1224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
        Validity
            Not Before: May 25 07:15:59 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6a13f72f-bb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:08:e1:41:f1:3b:6e:19:11:d0:f0:a8:03:
                    1e:55:20:25:71:ba:22:94:7f:cb:27:0b:02:c7:f9:
                    08:f5:b5:7d:32:ed:4e:1d:b0:ca:ec:0e:f3:c6:53:
                    14:67:f9:fd:de:cf:d0:27:fd:59:a3:7b:a9:1c:03:
                    99:5b:74:e3:c4:35:65:4e:eb:27:32:3e:a6:06:3f:
                    f8:13:d4:b5:3c:cb:87:37:ef:1c:42:e9:89:82:1b:
                    94:34:e8:90:54:f2:0a:81:b9:c6:f2:fa:82:e8:2b:
                    b3:cc:2a:5b:8d:99:a1:a6:7b:70:75:8a:98:63:8e:
                    f1:53:21:d8:c3:5b:cc:19:e0:1a:ab:e7:d5:a8:b8:
                    81:9d:e2:f2:67:c1:74:d4:9f:c9:a7:a2:d3:45:c1:
                    1d:3c:0b:70:22:d7:3c:ec:f8:c8:e8:2e:f6:ea:30:
                    61:31:c3:39:f6:a2:4c:0d:0d:6d:94:f6:5c:dc:fb:
                    83:f9:a3:4a:3f:17:4d:15:25:31:35:66:19:42:f7:
                    a8:17:6f:9e:51:50:f5:46:9c:eb:65:4f:fe:8c:f8:
                    09:e1:03:11:54:ed:ae:c4:38:fd:72:ce:0f:dd:7d:
                    fb:fe:c5:a5:3e:5c:e3:15:50:9b:3d:3d:c1:90:82:
                    2e:20:1e:7e:79:47:7f:ea:4d:e2:73:c3:00:7c:b4:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:C6:C8:B6:3A:13:0C:99:B5:F1:75:00:03:C7:3A:09:26:DA:AB
            X509v3 Authority Key Identifier:
                keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/9415082C580911F1AF5AA0C49D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.190.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:bb:38:c6:ee:4b:ba:7c:2e:21:20:c5:ba:ce:e5:85:77:
         3e:81:23:5c:15:12:04:59:db:a8:e7:95:11:d5:b4:0b:c3:fa:
         23:46:34:aa:6b:ad:18:e3:5d:46:16:88:38:93:b1:37:25:99:
         70:d7:2e:c2:63:c1:2f:9b:f4:6d:a4:74:74:82:38:c3:ce:e7:
         0c:43:5b:91:e1:3b:30:38:e6:6b:89:63:73:3f:7f:8d:60:1b:
         7a:31:46:b8:3d:a6:3a:e4:e3:59:81:1d:2e:51:99:3c:8f:32:
         e4:fe:25:88:2b:da:bb:e9:81:cc:ce:eb:72:bc:3b:7e:1a:a4:
         c2:45:0f:80:63:ad:45:39:f0:b3:11:54:93:62:8f:93:5d:9b:
         47:07:b1:a0:df:51:9d:6d:54:9a:60:50:63:e6:b6:14:72:f0:
         75:50:d4:f4:52:b5:42:ff:f3:8d:29:ea:e3:51:3b:50:59:a3:
         77:e3:6c:ed:22:e9:66:17:2a:c0:a5:3d:84:75:cb:65:cc:61:
         09:7f:26:99:95:b0:e3:d2:5d:d3:a2:fd:9a:bb:0e:7f:f4:23:
         e0:50:84:06:65:08:fa:15:97:36:32:e6:03:18:37:f0:75:41:
         6c:26:a4:15:b4:b5:18:52:95:1d:7a:5e:35:d4:ad:37:ac:01:
         74:95:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:40 2026 by rpki-client