Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D8295BE2E5111F1BDCC7CFB97833773.roa
File:                     9D8295BE2E5111F1BDCC7CFB97833773.roa (raw, json)
Hash identifier:          xtVOmi9fr1vP0neC3ym9m1tf5wYAPnM7AR6VSuRSgYY=
Subject key identifier:   24:4F:50:FC:6F:D4:F2:54:5E:70:9A:0C:A7:47:E0:8A:F1:1E:EE:34
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D46
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D8295BE2E5111F1BDCC7CFB97833773.roa
Signing time:             Thu 02 Apr 2026 05:05:50 +0000
ROA not before:           Thu 02 Apr 2026 05:05:49 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     22773
IP address blocks:        43.254.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11590 (0x2d46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr  2 05:05:49 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69cdf92d-2cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:bf:3f:de:26:44:ca:d2:c6:7c:5a:0c:85:
                    25:a1:ff:f9:b6:66:33:ec:2c:4b:bd:b7:5e:7c:39:
                    12:34:38:35:58:70:d0:e7:3a:d9:80:98:10:c5:e2:
                    92:0c:62:bb:53:d9:ae:20:4b:ec:63:08:a0:0e:2f:
                    fc:a2:c1:dc:15:6d:57:96:8e:d7:a4:b2:30:29:15:
                    a6:f1:04:58:9e:50:fb:e1:fa:a1:ad:fd:e0:44:c9:
                    fb:da:fa:53:86:ed:2f:9b:3b:02:5e:69:22:76:cf:
                    e7:4e:b5:58:f3:c6:58:b1:d0:f6:03:e0:d6:30:52:
                    cd:6a:d2:32:35:0f:c7:07:78:24:12:25:85:76:95:
                    aa:eb:3c:70:6e:22:53:26:ee:cb:cf:fc:bb:26:2f:
                    4a:6a:a0:d9:86:4c:b5:cb:21:b3:76:bd:df:68:c6:
                    fd:88:c4:61:0a:8a:53:65:68:e3:88:78:fa:45:f1:
                    6d:da:df:08:0c:4e:2f:04:6f:48:59:31:5e:5c:2a:
                    79:3b:57:0e:5e:ca:6f:b6:0a:5b:88:40:2c:f6:ef:
                    6d:ee:ea:79:48:75:bd:cc:67:27:29:ce:cf:2d:c5:
                    9d:f2:c8:82:21:84:8f:8f:0c:4d:66:04:f7:db:47:
                    06:b9:16:db:0d:44:b7:99:d3:3d:86:02:89:4e:69:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:50:FC:6F:D4:F2:54:5E:70:9A:0C:A7:47:E0:8A:F1:1E:EE:34
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9D8295BE2E5111F1BDCC7CFB97833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:7d:c0:17:21:6a:ce:de:87:c2:79:e1:f8:8b:1f:6e:23:
         f8:85:3e:fe:7a:a1:20:a5:c3:a4:14:1d:61:9c:6f:93:fa:be:
         c6:45:74:df:33:56:6c:d6:ba:a2:3e:18:34:b6:78:60:b7:4f:
         f8:e4:d1:11:c2:10:aa:85:3b:c8:a1:3c:3c:0e:13:bc:9e:fe:
         86:bb:a8:da:ad:ad:b7:54:6d:bd:f8:4b:97:73:b1:2b:43:a3:
         d1:18:16:dc:32:76:52:86:44:71:80:14:fc:ea:31:fa:52:d0:
         b2:76:98:94:69:78:6d:1c:34:85:fe:4f:a1:e8:bb:dc:18:54:
         47:0d:d1:06:06:17:08:17:9f:08:4f:fa:bf:6e:41:65:82:f9:
         d4:9c:e0:ae:0a:b0:dc:45:46:99:91:b6:a3:bc:ca:ae:6e:79:
         a6:d8:fc:f6:ea:f1:87:67:c5:63:f3:c7:ea:cb:19:92:9c:f1:
         6b:41:d7:69:f5:bd:f9:79:51:a3:c2:e0:96:69:d4:f2:7e:02:
         a7:95:34:6c:28:21:ef:b1:12:b3:3a:0f:eb:65:54:d2:f6:28:
         97:5e:2b:6d:32:c6:e5:80:0d:5c:18:e6:8b:6d:78:76:c0:e1:
         e8:dc:bf:87:93:a7:63:cd:5b:02:a5:ee:ab:ab:72:71:67:ab:
         be:fc:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:45 2026 by rpki-client