Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
File:                     4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          omwpsvBWIQRT2nPj+/Y5ztwMSp4mFzo1rBBtMtqdXfY=
Subject key identifier:   D4:5F:95:18:55:46:18:D6:1F:3B:48:F6:56:02:00:BC:F1:BE:E8:96
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       043E
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Sun 11 Oct 2026 00:50:11 +0000
ROA not before:           Sun 11 Oct 2026 00:50:11 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     132742
IP address blocks:        43.248.60.0/22 maxlen: 24
                          103.39.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Oct 11 00:50:11 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acadd43-138f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:c4:20:0e:d5:58:c4:84:69:32:1d:56:89:
                    02:1e:8c:1c:5e:ff:57:63:bb:8b:80:73:13:5f:f0:
                    4e:a2:94:59:44:ea:d6:07:f0:bd:90:7a:b8:5f:1e:
                    4b:83:7a:57:94:2a:c7:5d:fd:62:eb:33:dd:17:de:
                    b5:3b:51:aa:dd:cd:a7:0c:51:4e:d8:bc:aa:84:9c:
                    d8:fb:e4:e4:20:9b:48:5b:f7:61:df:10:c9:54:c7:
                    18:ba:59:67:79:e4:ec:46:c4:c3:e6:14:d7:a9:39:
                    e1:e2:f4:8a:cb:65:c9:a2:88:67:58:d0:ac:0e:a7:
                    17:25:bd:3d:10:8f:5c:96:83:13:f7:e8:8c:b6:05:
                    64:fb:7a:57:cc:6e:b5:3e:16:fa:e5:48:c2:f4:b5:
                    99:1a:e4:bc:97:4a:e8:23:58:86:12:c2:83:18:b6:
                    13:95:e8:5d:8d:77:d4:17:0d:53:51:77:e8:13:2c:
                    91:d4:c7:f8:b8:5a:39:86:13:1c:0f:0f:18:34:ee:
                    32:06:7b:d5:1e:14:6e:03:b0:2e:14:eb:42:72:cf:
                    87:fa:3b:06:b1:94:36:2d:d3:53:b3:b6:92:98:bb:
                    c8:f4:44:79:f9:53:a6:a8:68:e6:9a:fb:a1:fa:69:
                    87:dc:7e:07:25:d1:90:9b:41:f7:da:11:4d:45:59:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5F:95:18:55:46:18:D6:1F:3B:48:F6:56:02:00:BC:F1:BE:E8:96
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.60.0/22
                  103.39.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:58:51:f8:c7:6c:86:3d:43:e3:7b:2b:cb:b5:18:7f:2f:38:
         34:64:9e:c4:fa:90:00:44:46:29:97:6e:f0:ca:b0:09:8c:36:
         e3:20:95:0d:e4:18:a9:5d:3c:31:3a:da:0c:83:d9:6a:23:e6:
         dd:13:d2:b1:9f:0b:fa:08:0f:86:11:c8:73:d9:d1:8f:96:77:
         b2:4c:86:6d:15:5a:fd:68:cb:5f:b2:ff:31:08:a6:2d:72:23:
         27:2b:53:d1:ca:26:e1:e4:8b:6f:0d:f9:40:d0:c5:e8:d5:5c:
         63:f5:b8:0e:17:7e:9d:9d:a5:12:61:af:30:51:79:40:66:c0:
         9a:52:7d:64:4f:88:59:1a:ba:41:f1:ca:01:d9:ba:82:7b:00:
         03:63:ae:d3:b0:49:cd:b2:f4:ec:51:88:4f:92:0c:ee:26:b8:
         23:54:ca:22:31:9a:d0:79:65:5f:fc:44:d3:b0:14:9f:89:8a:
         bf:5d:45:02:be:50:6f:56:5e:b5:e5:69:a8:82:e9:e1:db:d2:
         e0:d7:53:76:f6:7d:0e:74:dc:01:55:85:0b:a9:f0:62:c0:6f:
         21:de:eb:08:3a:ff:e2:5e:ac:c5:50:c7:77:22:e6:9a:3e:b2:
         b2:d1:e8:a2:09:56:0f:bb:84:50:ca:01:a3:14:49:3c:65:50:
         26:80:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:48:37 2026 by rpki-client