Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
File:                     4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json)
Hash identifier:          xwWWISkzf0btU4XnSYbv2CyxUkjvyAAYT2JHS7cyDnY=
Subject key identifier:   FE:05:7C:BE:CF:97:A3:A2:A4:55:B9:BA:23:2E:53:37:47:5C:BA:B4
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       037B
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
Signing time:             Sat 11 Oct 2025 03:27:51 +0000
ROA not before:           Sat 11 Oct 2025 03:27:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        43.248.60.0/22 maxlen: 24
                          103.39.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Oct 11 03:27:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e9ceb6-88be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:73:d9:99:69:73:86:53:70:23:f3:4a:0b:
                    e9:35:63:f2:55:d5:7d:fb:de:1a:92:13:58:09:0b:
                    3a:50:76:76:91:45:42:07:67:98:d7:9f:9e:87:fd:
                    0a:9e:e8:e9:71:c0:4f:f0:11:81:6a:60:7d:d1:0b:
                    7a:b0:48:a3:c5:3b:e7:a1:f7:35:74:42:f9:e5:22:
                    e1:fb:0e:cc:d5:44:4c:dc:29:04:dc:a7:d4:dd:0f:
                    76:93:70:d1:1a:50:a0:ba:34:80:3e:f6:04:b0:93:
                    e6:3d:91:18:a2:e5:e5:f9:be:8b:eb:93:dc:d2:e2:
                    55:9e:78:47:6f:5b:3d:17:49:59:2f:f1:15:f0:5d:
                    ce:88:c8:2f:fb:4c:21:62:e3:08:b1:6d:ab:27:06:
                    40:8b:e3:1c:c5:67:66:a3:8f:cc:66:52:72:44:23:
                    df:a1:1a:0f:39:2f:35:0d:f1:4a:2f:a4:31:a5:34:
                    12:c8:3d:68:a0:e8:a7:8a:23:e0:63:f7:38:3f:18:
                    2d:d9:d7:5a:6f:08:16:13:10:1b:21:38:98:b9:1c:
                    e1:9f:fb:4a:8d:1b:bf:78:ad:ca:d8:44:f1:a2:af:
                    a9:ec:b5:99:e6:b5:52:e6:0e:f8:d4:4e:a4:af:4f:
                    66:ed:c5:da:5f:f0:9e:28:02:c8:61:e9:66:17:a9:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:7C:BE:CF:97:A3:A2:A4:55:B9:BA:23:2E:53:37:47:5C:BA:B4
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.60.0/22
                  103.39.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:d2:be:0f:33:a7:11:60:1e:fa:94:b4:c2:09:64:b9:b3:6e:
         f2:19:5e:5d:1d:59:b7:0f:0f:a5:58:1f:af:88:7b:d2:8c:36:
         ea:27:46:e9:cd:9f:fb:4a:15:53:b5:86:c9:d9:f5:76:28:28:
         10:0f:8d:97:be:80:f6:8e:b2:99:2c:3e:10:c1:7d:2f:63:f4:
         38:ee:7a:b6:65:3e:27:de:92:57:c7:64:11:5e:d5:be:eb:8a:
         4c:c8:fe:4b:6a:74:0b:36:59:87:2d:70:a9:97:25:85:ca:e4:
         ed:2c:79:27:e4:9c:4f:ee:66:f2:dd:25:0e:54:10:04:89:b5:
         7c:19:cb:39:a4:4d:d4:0f:84:66:93:b8:69:c8:ba:60:c0:af:
         4e:65:e6:c7:c7:d3:ca:38:83:b3:c2:e6:c7:c8:97:b7:9b:75:
         a4:0a:1d:a8:fa:63:70:7e:b7:55:5f:24:e7:f9:17:7d:e9:a7:
         e0:ca:21:8a:df:d6:f0:af:46:1b:2c:45:87:62:89:14:24:d0:
         34:5f:6b:d3:e8:dc:a4:10:f3:7e:da:b8:43:9d:77:dd:c3:11:
         9c:aa:f2:48:7a:a7:6d:7a:08:88:8f:85:24:e1:00:72:c3:5e:
         22:b5:75:85:d1:17:47:c2:52:13:bb:a4:e7:1f:31:6b:99:4a:
         b5:aa:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:14:23 2025 by rpki-client