Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/65F1D4D27B4711F19E9575A595A30FBC.roa
File:                     65F1D4D27B4711F19E9575A595A30FBC.roa (raw, json)
Hash identifier:          j1KSZGnBJFImlCboNtO/7BW4Ss7Y/vqy8d8BNTY/u1c=
Subject key identifier:   4A:E2:99:BB:DA:47:33:16:60:4B:E4:DC:CB:A6:3A:0B:56:9E:72:C6
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C7C
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/65F1D4D27B4711F19E9575A595A30FBC.roa
Signing time:             Thu 09 Jul 2026 03:36:41 +0000
ROA not before:           Thu 09 Jul 2026 03:36:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139468
IP address blocks:        43.239.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Jul  9 03:36:41 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a4f1749-95dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:0d:96:a4:61:0e:e3:73:1a:05:4e:ad:eb:
                    04:ec:46:da:25:d3:5b:5b:e2:61:bd:3e:5c:76:16:
                    05:82:9e:7c:96:80:23:cb:27:b3:be:37:ed:12:97:
                    76:fb:b0:3c:e1:22:2f:f6:ff:62:a8:86:be:a3:68:
                    8b:5c:d5:bf:4e:ed:3e:29:c6:4e:16:e7:9c:ee:fe:
                    1e:b8:61:92:01:14:a9:4c:37:b9:2c:d2:68:78:c9:
                    e6:47:31:56:64:29:66:24:49:ea:8c:7e:b9:51:df:
                    04:c4:3d:03:29:16:01:c7:7a:78:5b:0f:f2:1c:5f:
                    28:b6:ee:4d:82:5e:48:b6:60:6d:03:ad:e0:7c:af:
                    24:d4:ac:0d:1f:27:79:f5:96:2d:ef:db:58:cc:c2:
                    63:42:3c:d0:cb:be:7c:ed:18:44:ee:4d:ad:d3:6b:
                    05:4e:31:80:47:80:19:6e:77:0d:30:5f:78:14:d1:
                    cb:dd:83:90:10:73:02:0f:81:b7:a8:3a:48:f5:11:
                    74:92:9f:c4:56:d1:17:12:2d:03:4f:9f:d6:54:5f:
                    e3:f0:51:ad:8c:c2:2b:2e:e2:47:f4:14:3e:e5:b0:
                    13:5e:3a:2d:12:ca:92:5b:c9:4c:e4:8c:75:48:8d:
                    ca:13:24:19:af:2f:32:56:66:a7:cf:be:b9:f6:1a:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E2:99:BB:DA:47:33:16:60:4B:E4:DC:CB:A6:3A:0B:56:9E:72:C6
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/65F1D4D27B4711F19E9575A595A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:26:39:5a:af:5c:c6:2f:92:ca:b6:b5:60:59:2f:4f:1d:f9:
         90:cd:2e:da:4e:7f:89:74:08:54:b1:3b:f8:c2:f0:78:b4:8b:
         ed:c1:fa:72:18:05:21:50:7d:94:a1:12:12:05:cb:5c:a0:eb:
         65:32:f5:23:89:39:93:8d:70:7e:58:2b:37:34:6b:d5:6a:fa:
         9f:bb:ce:5a:d4:3c:f6:e2:05:c1:92:c4:01:df:7e:41:0f:09:
         3d:b1:03:98:5d:68:fe:cd:3f:36:89:26:35:9f:41:10:dc:d5:
         c1:26:c3:4e:cd:21:1a:85:bc:27:76:fc:3e:b6:66:df:ff:07:
         59:d6:26:ae:81:e1:75:c9:b9:a4:f0:6c:62:78:e8:96:36:0b:
         7b:1c:ec:4a:1d:5a:be:02:f6:76:47:93:62:5d:73:8c:db:11:
         46:f1:ec:aa:0e:86:f9:c2:e0:d5:47:a6:a6:6b:cd:f2:28:75:
         5a:db:fa:08:55:87:cc:b6:a9:d2:28:e5:e5:c8:52:d8:74:05:
         41:35:b6:3e:52:ff:a4:b7:c4:0f:50:05:b8:50:ec:4d:a4:03:
         02:90:9b:82:02:b2:e9:4b:fb:09:29:df:e6:44:f7:ef:26:91:
         1e:99:a0:85:44:f1:b7:72:29:07:19:3e:2e:f5:34:f1:1b:66:
         98:ac:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:24 2026 by rpki-client