Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
File:                     43A05F96ABF111F0AF8F880CC4F9AE02.roa (raw, json)
Hash identifier:          wPYuTSmobZhaRnTY/GjZDyWoVCU3cKsQlUPlALVpkaE=
Subject key identifier:   4F:27:61:4F:64:AD:2C:A6:04:1B:03:6B:45:07:1D:72:36:04:2D:D2
Certificate issuer:       /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial:       0127
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:20:51 +0000
ROA not before:           Sat 18 Oct 2025 07:08:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        103.212.72.0/22 maxlen: 24
                          139.5.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
        Validity
            Not Before: Oct 18 07:08:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58eb3-9e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:e9:68:5a:e2:0d:3f:5b:e6:74:b1:27:50:
                    cc:20:8b:63:17:d7:12:43:c1:b1:29:14:22:6a:b6:
                    f1:18:f6:f4:74:02:1c:37:d4:f9:e8:10:f6:ff:eb:
                    6f:9e:f2:dc:75:98:40:bc:8e:b0:e9:9f:c7:c6:cd:
                    73:3e:04:4e:c3:9e:45:05:8f:83:5e:71:64:47:4f:
                    e7:05:70:33:07:c4:d5:1a:d0:8b:af:f6:e7:ad:15:
                    54:f7:45:a1:31:8f:49:69:35:43:98:0d:79:7d:a1:
                    bf:a3:5b:0d:dd:bb:94:61:cc:78:e8:37:1b:cc:de:
                    6e:3c:a8:76:dd:ac:16:09:9f:77:7a:b3:d2:ad:c9:
                    32:85:1f:00:e0:56:6a:e8:54:b0:64:44:fc:d3:58:
                    04:0a:20:23:a6:6f:22:a0:10:86:75:a5:d0:57:95:
                    95:51:b5:0c:a3:51:75:ca:9e:19:24:59:20:1a:51:
                    b7:95:a5:6c:6f:a0:e8:e2:8a:2e:0a:6c:8d:da:d8:
                    36:65:cd:ef:84:da:b9:0d:8a:1e:47:ac:76:13:32:
                    21:d2:95:c3:9e:23:91:ba:88:fe:e9:e5:22:7d:d2:
                    b2:10:9e:58:dd:1a:94:63:55:77:60:d7:42:25:d2:
                    23:dc:61:1f:b6:4b:61:c2:62:6c:27:91:eb:27:ce:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:61:4F:64:AD:2C:A6:04:1B:03:6B:45:07:1D:72:36:04:2D:D2
            X509v3 Authority Key Identifier:
                keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.72.0/22
                  139.5.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:59:a9:44:cb:00:72:a9:94:01:09:73:d4:42:a6:fe:d0:
         79:6d:22:06:66:ac:bf:1a:c8:a7:a4:28:30:9f:1f:74:a7:64:
         1b:24:3c:a7:e6:3a:48:16:d0:82:09:ed:7d:24:8b:bc:20:ff:
         30:ff:8a:d3:9f:f7:37:85:9b:6d:61:be:b6:96:ac:dc:f5:65:
         b4:fb:74:dd:cf:95:b3:d9:82:89:d4:7b:7a:0c:ab:02:e6:c0:
         a3:20:97:1b:fd:9c:92:e6:71:d0:d9:fc:95:08:5f:aa:0c:10:
         fb:33:99:50:27:e3:c4:0d:1c:7c:01:0d:26:5c:ce:52:74:f0:
         a9:f5:ad:3a:a0:f6:64:2c:b0:48:4c:ae:92:e8:d2:b9:7f:bc:
         b5:b7:31:97:43:2e:0e:f7:d3:05:de:6c:62:74:5c:e9:db:4e:
         90:d3:42:5f:41:5f:9e:cb:a1:5b:30:97:b9:94:44:11:19:6f:
         03:9b:bc:0f:03:06:51:3f:23:fc:ed:2a:6f:de:6a:bb:2f:4e:
         77:b8:9e:db:c1:9b:37:fa:31:1e:07:da:70:d3:32:91:88:6e:
         66:8f:98:a7:3c:cd:c0:d0:ad:9b:7f:b2:e2:06:9a:d9:82:3d:
         0e:1f:68:89:e7:48:38:4a:9a:dc:5a:70:f2:72:10:49:ca:f4:
         b1:ad:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:31:31 2026 by rpki-client