Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/39E76DD0589311EF88BF4665C4F9AE02.roa
File:                     39E76DD0589311EF88BF4665C4F9AE02.roa (raw, json)
Hash identifier:          uV62YvsKnuEUdWquqH2JLcNuEUU3algiTlAGdgEQfJg=
Subject key identifier:   C4:6A:78:F0:EA:4F:80:C8:02:B3:E9:FC:46:08:EF:7F:91:B2:B8:3C
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       014E
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/39E76DD0589311EF88BF4665C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 05:39:32 +0000
ROA not before:           Sat 25 Apr 2026 05:39:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133952
IP address blocks:        43.230.136.0/22 maxlen: 24
                          103.49.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Apr 25 05:39:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ec5394-1365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:99:97:e8:ab:df:e4:c3:18:cd:f5:9f:8b:
                    7a:59:96:0b:50:a2:c2:58:75:94:52:c8:48:f7:ca:
                    07:8c:69:02:8b:0f:3d:d9:4a:77:eb:cc:06:8c:c1:
                    94:88:b6:db:ae:06:3d:81:82:99:7a:5e:72:bf:b3:
                    be:f1:7f:6c:f0:5a:4f:0a:65:46:0a:76:88:fb:89:
                    b9:ea:8f:f6:ae:1f:84:c9:5e:8e:c2:76:0f:df:8a:
                    51:cb:15:b4:6f:42:2d:28:3d:0c:99:57:aa:9a:6b:
                    dd:89:a0:04:39:3b:04:a9:bb:4f:27:f9:11:08:b1:
                    24:92:e1:e8:14:e4:59:c7:33:62:8e:bf:7f:ff:d1:
                    73:1a:90:43:ad:b7:ce:5b:9e:86:d4:67:bd:7d:9c:
                    45:a7:bc:ef:16:00:34:57:ba:29:4b:91:9c:ae:0c:
                    21:48:44:58:dd:8c:d6:ff:e1:88:31:65:5a:10:26:
                    36:40:47:04:43:93:f5:e5:b6:51:e7:38:1d:2d:fb:
                    61:36:db:c8:a0:2a:1f:ff:b0:40:93:8e:84:91:e8:
                    74:2d:64:ce:ca:43:ab:e6:ce:fd:d6:8c:bb:83:d1:
                    ac:d3:45:33:10:cd:7f:ee:43:d5:49:d2:1b:c2:1d:
                    bf:71:2b:29:33:7e:93:20:85:1e:e2:80:97:f0:37:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:78:F0:EA:4F:80:C8:02:B3:E9:FC:46:08:EF:7F:91:B2:B8:3C
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/39E76DD0589311EF88BF4665C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.136.0/22
                  103.49.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f7:9d:5d:3e:23:1e:98:b9:99:8e:0a:e3:71:7a:a6:c2:00:
         89:c4:b9:c8:cd:4a:8a:3d:19:7d:1e:15:e9:a7:c3:e2:7f:b6:
         15:35:61:05:fb:36:20:57:de:99:ec:0e:05:e6:88:24:1c:c8:
         7f:4f:ab:d3:a8:bb:37:2b:65:c2:30:49:4f:f8:d0:e7:c6:23:
         a8:b3:a5:77:17:71:2e:9b:a1:0b:1d:5d:d4:18:e9:01:e5:40:
         fb:fc:83:e1:93:29:f6:bc:8d:94:86:5d:e8:07:af:1f:ae:20:
         ce:3b:04:b7:0d:4f:10:58:40:bf:d6:f0:a7:55:f8:d5:18:4e:
         35:ed:f6:02:70:0e:56:49:7d:78:fa:a9:04:de:77:28:03:20:
         62:38:45:c8:8e:15:d1:44:9d:c0:c1:df:55:19:d2:a1:ca:50:
         4e:75:07:ba:df:6b:bc:7e:5a:88:6b:db:9e:61:5b:8a:f9:9a:
         62:96:13:ac:88:53:09:c4:bd:57:12:ba:ad:3d:65:20:70:25:
         49:36:26:ad:8b:59:e8:95:84:f1:1e:07:0c:86:5b:8f:43:dc:
         63:e5:86:1c:38:71:de:d8:ea:49:b5:c2:a5:ca:e1:89:ec:86:
         be:8c:ad:ec:e5:75:82:28:96:04:06:b6:f9:59:21:2c:4a:96:
         a5:68:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:16:21 2026 by rpki-client