Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
File:                     43A05F96ABF111F0AF8F880CC4F9AE02.roa (raw, json)
Hash identifier:          jHfK6IyCLOgzWRIKFIJt7aRe94FDSOoHp8+mPczDRNw=
Subject key identifier:   6C:99:9A:A8:12:21:F3:CE:B0:18:FA:3A:8C:94:5E:FD:4B:CA:26:BB
Certificate issuer:       /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial:       E1
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
Signing time:             Sat 18 Oct 2025 07:08:36 +0000
ROA not before:           Sat 18 Oct 2025 07:08:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        103.212.72.0/22 maxlen: 24
                          139.5.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 07:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
        Validity
            Not Before: Oct 18 07:08:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68f33cf4-b73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:60:a7:4f:7c:16:85:d7:fd:01:56:46:84:
                    dc:2d:99:49:b6:9b:75:89:c0:84:49:58:e5:29:79:
                    ce:43:67:12:8c:8f:7f:b4:7f:d3:b4:f8:9e:fa:ae:
                    08:33:db:c6:41:e0:5e:55:db:84:46:e2:7c:14:5a:
                    41:79:46:7b:d7:cc:d5:a0:4e:2c:68:85:b3:56:61:
                    1a:48:17:a9:32:23:7b:aa:11:88:c7:37:cb:e7:14:
                    23:ab:e3:b5:25:e6:63:d7:ef:3c:28:e1:73:3d:67:
                    68:b8:ae:e7:15:8a:8a:8b:98:e9:f9:05:08:58:df:
                    8f:be:8a:b1:da:df:7f:41:6d:ab:d8:b0:a8:16:0b:
                    08:99:55:9b:88:ea:f2:13:58:00:35:07:26:e5:61:
                    9e:20:e7:5b:30:a4:66:e5:9e:bb:7e:b8:f1:13:d0:
                    92:3c:1b:aa:72:cd:85:da:46:7e:97:c7:df:91:b6:
                    18:53:f6:92:05:98:03:30:19:50:39:9b:7b:fb:7f:
                    97:2b:06:e3:b2:ac:e4:a6:1d:0d:13:93:bc:50:f2:
                    5a:aa:36:61:d9:17:8a:08:09:56:fb:42:ca:bf:81:
                    41:3f:55:6b:ac:2a:d0:49:7d:98:ec:2f:5f:60:df:
                    1a:87:63:a0:dd:90:55:25:23:fe:81:fb:e3:ba:d8:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:99:9A:A8:12:21:F3:CE:B0:18:FA:3A:8C:94:5E:FD:4B:CA:26:BB
            X509v3 Authority Key Identifier:
                keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.72.0/22
                  139.5.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:bf:55:30:df:f9:a3:1f:93:85:14:b5:6c:c8:86:f5:79:12:
         1d:bb:8b:f4:30:d3:bd:7c:33:48:28:da:da:a8:8b:a7:ab:7c:
         d6:1a:87:43:c6:bd:8f:44:fa:95:85:43:0e:21:d5:96:06:f0:
         93:63:f1:7c:0f:17:db:09:d1:9b:c0:95:2f:9c:54:17:33:97:
         f2:04:33:09:d3:b9:74:72:4c:44:e9:82:8d:ce:3a:63:5c:85:
         11:fa:96:89:d2:ea:fb:88:71:47:3f:98:e4:15:4f:88:50:8c:
         88:5f:9b:c3:ee:9a:a6:d3:8e:62:76:35:4e:dc:f4:05:a4:d5:
         64:03:05:56:aa:80:80:9f:17:7b:12:c9:c0:e8:85:d4:ac:58:
         ba:15:e2:b4:6a:e3:b2:f4:a3:42:14:5d:fd:50:78:8c:4f:da:
         c6:44:4e:6e:ac:a2:93:01:25:db:68:a5:79:1d:0b:8c:2f:14:
         ec:a4:89:a8:93:b3:5b:26:06:84:51:96:48:81:c6:5d:bd:41:
         d4:8f:14:27:ff:cf:e3:86:33:af:b3:9f:df:4f:0c:40:8b:b2:
         af:cd:bc:25:30:2e:f6:83:04:41:02:e8:b2:63:8a:26:6e:02:
         dd:df:87:e6:85:82:b5:4d:16:27:22:3f:5a:8c:38:5e:17:58:
         e0:ff:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:43:39 2025 by rpki-client