Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/43E73F1824D011F0805C1741C4F9AE02.roa
File:                     43E73F1824D011F0805C1741C4F9AE02.roa (raw, json)
Hash identifier:          BvZtidO39xcJVMvtTC2yAWPqZeYJTR1TDRCbq0I40zA=
Subject key identifier:   9B:B4:74:E8:4F:E5:D8:6E:EE:2C:AF:E9:52:F7:9F:53:E8:DE:E3:CA
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       031C
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/43E73F1824D011F0805C1741C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 02:52:33 +0000
ROA not before:           Fri 07 Aug 2026 02:52:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     3144
IP address blocks:        2401:b60:3144::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Aug  7 02:52:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a754871-6bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:db:29:2f:d3:39:91:73:db:ee:5b:b2:53:
                    f7:a6:54:2a:25:39:dd:a2:dd:42:73:58:74:c0:bb:
                    e9:ad:f3:d0:38:7f:16:3e:46:0b:85:e7:fa:97:6a:
                    4d:a8:f0:14:96:3a:79:e4:17:b2:06:46:45:48:75:
                    5d:2d:e6:61:be:b4:f6:0f:c2:6b:52:d4:2d:75:a1:
                    46:48:64:15:1e:76:11:1e:9c:be:bc:92:fa:20:06:
                    78:b9:27:5d:1f:b1:6c:34:6f:f5:46:91:9d:1e:96:
                    44:9d:37:95:b2:c5:ae:a4:36:e7:db:9e:66:5b:cd:
                    ce:f3:cc:34:fa:81:6d:86:d8:f8:26:3a:28:2c:b0:
                    16:4b:65:ed:db:ef:98:89:f6:46:3d:ae:14:a7:9e:
                    e1:96:97:d3:42:ad:57:b9:f8:e5:57:5d:6c:85:99:
                    11:6a:bb:f9:bb:36:db:4c:ee:a4:13:6b:e9:d6:63:
                    b5:bb:95:3f:75:eb:79:98:d7:df:05:13:80:f5:79:
                    c6:a4:e2:11:f7:e5:5f:80:20:da:0f:a0:57:31:6d:
                    12:0c:fc:fa:31:f5:0e:95:3b:f6:3d:82:3c:d8:bd:
                    a5:66:a5:2d:b2:1d:88:69:eb:68:64:04:66:af:c1:
                    3a:ce:69:d7:89:03:26:62:1d:36:82:32:2f:9a:8e:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:74:E8:4F:E5:D8:6E:EE:2C:AF:E9:52:F7:9F:53:E8:DE:E3:CA
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/43E73F1824D011F0805C1741C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:3144::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:06:47:a5:4e:34:85:06:33:12:9a:89:75:a0:e0:a9:eb:3f:
         81:20:9b:1f:9e:e9:37:3f:3f:1b:80:2f:c1:db:8c:35:a1:3d:
         1f:63:ea:0b:2e:cd:a8:20:c5:28:29:58:36:3b:44:0e:b7:3e:
         6a:28:aa:a4:26:22:a5:23:b4:75:1a:e5:2a:b8:7f:1a:07:26:
         79:a5:b4:52:02:f4:d8:bc:db:33:04:e6:03:a7:59:28:1a:07:
         41:c5:40:08:de:2d:1b:00:fd:67:50:74:a8:86:e6:57:0b:cb:
         cd:bd:88:57:d2:af:3f:45:50:4b:76:4d:15:1e:04:f6:58:ca:
         13:33:17:b4:72:b9:28:32:b3:44:d3:b1:17:d0:c3:59:f5:ef:
         bf:fe:e9:22:16:bc:ec:ab:a9:18:f8:d2:93:a1:16:af:f2:67:
         c9:d0:d2:e3:4f:31:7f:f7:0a:46:c3:22:73:17:9e:ac:93:eb:
         ef:af:79:25:0b:af:0f:0f:46:92:b3:a1:72:18:3d:d9:aa:68:
         de:e6:9a:27:2b:5c:8e:95:a3:c8:d9:b8:91:5f:96:35:cc:6d:
         bc:17:bd:7c:bd:5d:a1:ee:f2:ad:e9:f2:b3:bf:38:70:fb:09:
         cf:fb:0e:5d:f6:4a:3b:53:3a:06:1f:b1:3a:b7:09:8b:8a:bc:
         a7:2f:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:48:31 2026 by rpki-client