Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1E541192D5A111EE9D73FA44C4F9AE02.roa
File:                     1E541192D5A111EE9D73FA44C4F9AE02.roa (raw, json)
Hash identifier:          jYQnQTapQDOvaPG9VJ0HqGlbdCQ/MXOLGDOsBB+iKXA=
Subject key identifier:   E3:AB:FE:94:AA:B0:AF:F9:C3:F5:DF:B5:8A:B7:5E:59:FC:44:1F:A1
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       0269
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1E541192D5A111EE9D73FA44C4F9AE02.roa
Signing time:             Thu 29 Oct 2026 03:51:38 +0000
ROA not before:           Thu 29 Oct 2026 03:51:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        43.239.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 03:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Oct 29 03:51:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ae2c2c9-affb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:3c:34:55:d4:04:84:98:5f:10:bd:e9:c9:
                    f2:61:86:9a:f2:f3:37:34:ea:d2:35:df:78:5c:8e:
                    50:c6:69:12:a7:c0:f4:07:2d:0d:13:ea:5b:41:ad:
                    0b:ad:13:b3:43:2c:a8:93:29:0f:cc:5d:a5:40:ae:
                    51:80:38:bb:20:c6:6e:24:83:10:7d:60:d1:c9:93:
                    d3:e5:21:7d:90:54:51:f6:fe:95:43:09:4b:38:a8:
                    6a:f0:e0:de:8e:2c:0c:66:e6:55:9c:b3:b5:c5:a7:
                    7e:0a:e2:0c:e4:95:37:0a:3c:96:dd:c9:70:6f:ca:
                    73:e7:28:3c:aa:d5:33:5f:b0:f5:e0:0b:d6:89:71:
                    4f:12:52:5b:20:a9:44:d3:9e:69:10:51:fd:06:60:
                    8f:0a:91:b8:03:b0:85:f0:93:c8:83:13:33:d0:f2:
                    c0:6c:ae:28:c8:8b:b0:5e:fd:df:2c:d6:e0:c7:76:
                    d3:1f:4a:6c:15:f1:01:4b:1d:8d:a4:fc:e1:c6:b8:
                    68:c8:f1:78:c6:27:d3:9f:db:84:b0:b6:4d:fb:cd:
                    1a:c7:ce:e5:b9:e4:23:aa:c1:0d:90:65:09:ed:7d:
                    75:80:2b:96:c3:20:c3:4c:b9:9c:59:a5:e4:8d:bf:
                    e9:f3:47:d1:0e:85:be:b9:f4:83:f4:e0:09:14:d1:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:FE:94:AA:B0:AF:F9:C3:F5:DF:B5:8A:B7:5E:59:FC:44:1F:A1
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1E541192D5A111EE9D73FA44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:b7:d3:61:63:8b:5e:b9:21:9a:23:3d:5f:28:47:7a:10:
         81:17:fb:9c:cf:dd:9c:49:82:0e:c6:9a:77:50:a7:67:6a:94:
         ce:6e:66:41:7d:cd:f4:58:9b:98:86:64:1a:93:6a:3f:53:b6:
         ad:5d:46:5c:b8:42:9d:25:7c:57:07:b9:51:09:2b:74:5e:6f:
         61:27:c3:d6:3a:a3:b8:6d:14:a3:5c:ee:74:e6:d1:fc:e3:d1:
         28:e4:52:a4:54:46:eb:b0:66:b2:eb:fe:34:0f:5b:4b:2c:7a:
         a3:32:ab:61:77:23:f6:7e:60:f2:52:59:ac:34:2e:49:7c:6e:
         c9:b9:49:a9:5e:27:70:50:32:cd:96:72:af:4d:c9:d8:6c:3c:
         1b:87:cc:85:7d:95:e7:84:c6:ee:23:e9:7d:fc:77:87:4b:b7:
         8a:2e:a5:89:a0:91:b5:79:61:95:b4:74:ee:96:29:f4:86:30:
         10:de:9c:dc:4c:ae:dd:10:df:84:47:3f:97:f5:f6:db:39:3c:
         de:81:b1:dd:aa:a6:44:ed:b7:57:1e:82:26:a3:32:c5:1b:7e:
         b3:f2:ff:79:3e:bb:af:df:3c:ed:0b:b5:3b:a9:42:96:ed:ef:
         68:a7:79:78:1a:74:13:52:b1:9b:f4:56:f7:96:f5:2f:f7:71:
         5f:af:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:52:28 2026 by rpki-client