Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/8A80B8D69A1011F0AC6E9127C4F9AE02.roa
File:                     8A80B8D69A1011F0AC6E9127C4F9AE02.roa (raw, json)
Hash identifier:          i3hC7Bm4Sc2fZvEP1yJ7KPUWPcWy4K6JJCzO9mbz3fQ=
Subject key identifier:   15:2C:4E:D9:A6:F1:CA:D6:B0:52:6B:C6:32:79:02:47:CD:8A:50:17
Certificate issuer:       /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
Certificate serial:       11
Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/8A80B8D69A1011F0AC6E9127C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 13:09:19 +0000
ROA not before:           Thu 25 Sep 2025 13:09:19 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     7575
IP address blocks:        139.230.0.0/16 maxlen: 16
                          139.230.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E
        Validity
            Not Before: Sep 25 13:09:19 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68d53efe-679c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:e1:e7:da:b6:bc:6d:3b:7b:2a:5f:dd:5b:
                    4b:0f:32:1b:55:93:bc:a1:3f:32:e2:7e:77:10:62:
                    db:e8:2d:7c:c1:e3:c0:ea:44:6b:6e:38:d3:49:9d:
                    c8:1d:81:0b:aa:d4:13:5a:fa:a5:de:e0:49:20:b9:
                    89:a3:83:65:14:a0:68:82:64:96:ca:18:2b:2b:f2:
                    d5:32:c9:3d:7e:32:88:cd:c4:ef:d6:7a:e6:42:3c:
                    68:d4:61:26:73:c6:c2:ae:2f:e9:d4:00:b5:b5:cc:
                    7a:5c:4a:16:5b:90:8f:0d:51:cd:f5:54:e0:36:1c:
                    fb:15:88:c2:bd:af:56:48:91:54:a1:6c:b3:60:d5:
                    67:f5:2a:14:cd:d9:46:4b:49:cf:46:76:26:14:5c:
                    3c:02:b9:b6:11:1c:58:7d:ac:af:8f:6a:49:5c:db:
                    f9:53:29:fa:5a:06:d0:cc:0c:c2:c4:f9:3e:ef:20:
                    1e:44:35:4b:51:bf:3d:00:62:9a:51:ce:f8:9c:5c:
                    39:97:c8:cf:f7:04:94:44:59:8d:ae:45:90:17:b4:
                    51:f8:fe:fd:21:b1:45:54:61:01:37:01:a2:09:96:
                    82:07:8a:a6:d5:c5:b1:dc:49:36:d3:b7:f7:2f:db:
                    08:73:07:07:cf:96:07:6f:86:c6:a0:7b:f1:ec:3f:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2C:4E:D9:A6:F1:CA:D6:B0:52:6B:C6:32:79:02:47:CD:8A:50:17
            X509v3 Authority Key Identifier:
                keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/8A80B8D69A1011F0AC6E9127C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:df:e3:ac:80:27:85:6b:73:03:e2:9f:f3:71:7f:21:78:1b:
         e7:51:4e:5e:e3:a3:5c:a0:81:e4:ba:30:40:5b:ea:6d:2b:ff:
         67:f5:ae:5f:92:84:c2:0a:b1:db:0a:3c:f0:96:b1:0a:87:11:
         56:e3:bd:15:38:10:9f:e1:41:19:a2:c0:c8:03:70:4b:0b:d2:
         1f:98:e4:e1:13:7a:9f:16:a3:30:56:79:c8:b6:eb:f0:05:56:
         c9:91:6b:dc:a2:d3:b1:3f:ed:1e:12:b3:b0:08:05:0f:f0:94:
         0d:64:3a:1f:a8:0a:35:69:bf:96:c5:31:64:24:78:31:28:35:
         4e:6b:a3:b3:db:d6:0d:57:48:a6:fd:f3:b5:99:94:67:01:c9:
         8e:b6:47:ca:4d:f5:3a:11:fa:62:c8:63:9c:f5:7d:6e:a4:91:
         02:51:b7:86:d5:f7:99:45:7b:90:c8:f5:1e:62:66:aa:27:09:
         46:81:e1:5c:f8:72:fa:65:ca:c1:34:35:4c:5d:ef:f4:ef:d1:
         3d:80:c3:a1:3b:b5:e4:59:eb:cb:f4:e3:de:b3:8a:a7:69:d0:
         e2:ad:c8:3f:27:61:e8:d1:21:84:b5:c8:fd:4e:7a:e7:b2:6b:
         46:ad:80:84:e7:3e:8d:65:89:0a:a3:de:3d:7c:c9:02:01:a3:
         f5:1c:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:31:56 2025 by rpki-client