Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
File:                     4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          8sYcPsbiw5zP7b8gIQawA14VC0P46MJxFwXY502uCtY=
Subject key identifier:   FD:5E:28:DD:3C:5F:1B:3A:39:C7:B2:12:CB:B1:C0:02:9F:5C:F2:15
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       03C7
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:25:05 +0000
ROA not before:           Sat 11 Oct 2025 03:27:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        43.248.60.0/22 maxlen: 24
                          103.39.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 00:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Oct 11 03:27:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44c41-9711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:90:27:7f:17:9b:3d:df:90:8f:76:2b:86:
                    54:8f:db:6c:dd:c9:6c:af:94:be:04:68:06:8b:5b:
                    a3:aa:ef:7a:ef:22:f6:c7:b4:a2:ea:6d:90:a4:e2:
                    20:cd:c8:9c:e3:b1:08:cb:84:10:d7:65:44:83:13:
                    6e:80:11:1e:ec:ec:99:01:e0:fa:f2:9d:34:3d:c7:
                    b5:67:be:cb:71:9e:08:67:9e:66:75:9a:87:14:c0:
                    eb:89:6d:0e:ab:f5:d9:75:2c:81:83:64:8d:6a:13:
                    04:d1:40:19:51:a6:e8:c4:58:ef:78:5c:6c:20:02:
                    3d:1b:34:aa:84:f0:f2:8c:98:14:be:02:70:c8:6e:
                    52:64:3a:63:f4:25:cf:db:c1:db:91:89:74:7d:4d:
                    91:2b:48:d5:60:4d:68:ab:11:93:1f:fa:dd:44:c1:
                    4b:b2:45:6b:69:48:7a:8c:d0:23:18:fc:c3:83:bd:
                    23:cd:71:0c:60:66:da:c7:ac:03:1c:91:aa:fd:55:
                    ce:45:78:ee:e3:58:85:45:45:4d:e4:da:f0:b7:97:
                    97:c0:a1:f2:8a:8e:6f:84:6b:29:dc:31:f1:85:fd:
                    1a:fa:36:64:da:89:7b:3c:d5:de:5e:79:37:6e:f5:
                    f0:09:61:be:f1:63:8c:c6:1b:4d:73:da:02:c4:0a:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5E:28:DD:3C:5F:1B:3A:39:C7:B2:12:CB:B1:C0:02:9F:5C:F2:15
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.60.0/22
                  103.39.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:d3:8b:6b:23:42:c0:03:de:8d:5a:41:60:a5:3d:eb:d6:ab:
         2c:a2:cb:72:c1:42:40:fb:a0:50:78:0b:39:7c:c8:6a:0f:5d:
         73:0c:70:6c:71:d9:84:18:9e:28:d9:f2:33:ea:7e:18:c8:b4:
         53:62:58:38:51:a8:f1:4c:82:2a:6a:97:ca:96:4d:5a:6c:8f:
         87:f1:b2:12:a0:7a:c0:5a:9c:84:28:b9:51:99:ab:cc:08:0f:
         67:0e:46:b6:5f:d4:4e:09:be:7d:b4:af:13:be:a9:5b:dd:be:
         84:44:c3:6a:a0:a1:35:97:d4:e5:f8:48:a5:75:e0:31:6e:b5:
         4e:ab:51:bf:7f:39:6a:5b:c4:e5:1b:9a:9f:e3:8d:fd:bc:d2:
         d9:46:f4:98:88:b1:5f:a9:98:6a:81:5f:b0:7d:4a:0e:0c:06:
         88:5c:91:1d:64:ec:c9:f2:86:dd:1e:38:e0:e7:a0:f1:3f:90:
         73:26:4f:56:5f:0a:c9:b2:57:c7:0f:31:c8:d6:ac:2d:84:c4:
         92:6a:98:4f:54:fd:50:18:8e:25:31:66:01:ea:55:b8:e8:3d:
         66:50:a3:4f:08:4a:b0:ef:e7:54:01:2d:9d:f4:8a:69:5f:c2:
         a3:c3:2e:04:db:05:7c:a8:66:dc:2d:24:82:0b:88:23:a6:33:
         9d:08:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:48:22 2026 by rpki-client