Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/E5BFB52CC22C11F19499EDEB5811F970.roa
File:                     E5BFB52CC22C11F19499EDEB5811F970.roa (raw, json)
Hash identifier:          B48fDexo3emAfg93spGSY7zqAJp+cV8Xe3mEub+W+6M=
Subject key identifier:   04:7C:08:51:6E:0A:F2:55:E6:87:8A:EA:09:20:F5:A0:A7:5E:4F:B8
Certificate issuer:       /CN=A91ECDC0/serialNumber=38F3A997D2FE1AC40144F5C7B235091DD13F8947
Certificate serial:       04
Authority key identifier: 38:F3:A9:97:D2:FE:1A:C4:01:44:F5:C7:B2:35:09:1D:D1:3F:89:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPOpl9L-GsQBRPXHsjUJHdE_iUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/E5BFB52CC22C11F19499EDEB5811F970.roa
Signing time:             Wed 07 Oct 2026 08:56:06 +0000
ROA not before:           Wed 07 Oct 2026 08:56:05 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23884
IP address blocks:        43.255.60.0/22 maxlen: 24
                          103.80.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/OPOpl9L-GsQBRPXHsjUJHdE_iUc.crl
                          rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/OPOpl9L-GsQBRPXHsjUJHdE_iUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPOpl9L-GsQBRPXHsjUJHdE_iUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 09:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECDC0, serialNumber=38F3A997D2FE1AC40144F5C7B235091DD13F8947
        Validity
            Not Before: Oct  7 08:56:05 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ac60925-c02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:fd:a4:cd:e0:ed:b5:8f:37:0e:ff:77:fd:
                    13:cb:e9:ce:26:78:cd:72:43:9c:a8:a8:5b:82:50:
                    b7:d5:1f:46:9a:cf:d7:75:d8:33:4d:7e:55:46:5a:
                    f7:92:cb:52:60:51:32:07:ae:6c:1c:9f:ad:e6:7c:
                    26:3c:1e:6a:63:63:de:d8:47:0a:a2:0e:72:70:a7:
                    9b:ef:19:66:f2:43:8d:bc:d7:50:b2:b8:c6:d8:e3:
                    28:6a:63:fb:5a:e2:f1:74:1b:70:b1:d6:77:08:40:
                    46:c3:2f:1c:8e:ea:c0:9a:38:ea:4a:39:51:66:3f:
                    5b:72:09:91:fb:e2:03:fc:27:3f:04:02:24:16:17:
                    2d:6f:11:9f:73:66:56:88:57:c1:7b:d2:a8:07:a7:
                    a5:9e:cf:84:12:89:7d:76:6e:ae:e4:ac:33:0c:dc:
                    92:14:1d:00:48:73:2c:18:c0:73:e4:60:76:03:67:
                    ff:ec:8c:d2:87:75:1f:26:e4:64:9b:32:0c:10:a3:
                    32:a7:cd:e4:8b:0c:b0:0b:b3:de:e6:aa:5d:f0:d1:
                    f5:b4:c0:03:cc:6b:56:d3:16:c7:0f:a6:5e:63:9d:
                    97:01:37:12:e7:12:b6:b4:73:99:ed:b9:0b:94:89:
                    f6:46:94:6b:e4:98:5c:cd:21:24:8a:31:c0:c4:d6:
                    8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:08:51:6E:0A:F2:55:E6:87:8A:EA:09:20:F5:A0:A7:5E:4F:B8
            X509v3 Authority Key Identifier:
                keyid:38:F3:A9:97:D2:FE:1A:C4:01:44:F5:C7:B2:35:09:1D:D1:3F:89:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/OPOpl9L-GsQBRPXHsjUJHdE_iUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPOpl9L-GsQBRPXHsjUJHdE_iUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECDC0/292171BCC22C11F19E5ECFBB5811F970/E5BFB52CC22C11F19499EDEB5811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.60.0/22
                  103.80.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:85:cd:30:a2:a2:fe:8a:75:dc:be:44:97:0f:4b:a9:93:
         d7:48:2a:df:90:fd:d1:6e:b1:a0:3d:b9:82:26:1d:7f:11:84:
         7b:31:d2:50:85:69:ed:87:01:f2:5f:9c:2d:69:46:98:95:d9:
         eb:9e:fb:42:8d:7a:d3:50:5d:df:2f:e8:9a:0f:e2:37:75:b2:
         23:17:0f:50:52:53:9e:bd:a3:e2:ee:57:57:08:cd:b0:8c:24:
         68:f4:3a:bb:8a:e6:33:68:c2:67:13:8e:b2:aa:7c:c3:5a:91:
         ce:06:a3:ca:1a:f6:8c:5b:18:52:b0:b9:5c:2d:be:b1:68:ac:
         65:4d:05:d8:7c:60:59:6e:42:0b:1f:98:0d:48:c9:fc:da:24:
         cb:9f:21:f3:62:01:cf:3e:68:e1:51:38:de:56:a9:ed:04:c7:
         95:26:ce:a9:f4:92:b7:e5:cb:a0:df:44:ab:e2:47:f7:72:97:
         ea:21:e9:da:fd:91:37:c5:c3:3d:e8:aa:5a:56:55:ca:4c:24:
         8f:7b:67:aa:0d:c8:aa:dc:3f:7d:8e:5b:cf:5b:cd:30:1d:20:
         e4:4c:25:45:ed:73:22:ce:ac:0a:61:45:2f:fd:bd:bd:fc:3a:
         5c:60:37:7e:1d:24:d0:8c:73:0b:e4:7f:88:5e:40:13:60:82:
         51:cc:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:15 2026 by rpki-client