Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/E70D393E3E1211F1B8544D87AE833773.roa
File:                     E70D393E3E1211F1B8544D87AE833773.roa (raw, json)
Hash identifier:          QKtJAkqUtPB3mTAjjBY4LLg9Wgtws5WpGtADkwoN/hg=
Subject key identifier:   3A:5A:85:FE:2D:F3:D1:C7:94:65:E7:20:2C:27:5F:94:84:72:63:4B
Certificate issuer:       /CN=A91456CD/serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
Certificate serial:       05
Authority key identifier: 62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/E70D393E3E1211F1B8544D87AE833773.roa
Signing time:             Wed 22 Apr 2026 06:23:11 +0000
ROA not before:           Wed 22 Apr 2026 06:23:11 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     63888
IP address blocks:        43.228.232.0/22 maxlen: 22
                          43.228.234.0/24 maxlen: 24
                          43.228.235.0/24 maxlen: 24
                          103.47.240.0/22 maxlen: 22
                          103.47.240.0/24 maxlen: 24
                          103.47.241.0/24 maxlen: 24
                          103.47.242.0/24 maxlen: 24
                          103.47.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl
                          rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456CD, serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
        Validity
            Not Before: Apr 22 06:23:11 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e8694f-2263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:08:d7:e1:b6:48:1d:0b:54:b6:40:e5:5a:
                    e8:88:4e:ab:d1:b0:8a:87:d7:41:0a:8a:d6:ec:16:
                    21:00:f3:54:b8:89:b8:ba:4e:03:8c:2c:ec:74:23:
                    79:55:fa:2c:4a:bb:e1:14:d1:be:a4:ab:bb:09:e2:
                    99:32:fd:9b:ff:5d:18:b3:59:2d:88:c0:93:43:1f:
                    29:d2:70:9d:10:aa:25:2c:b8:6d:e4:2c:d5:3d:00:
                    15:6f:ea:72:c0:a8:fd:7b:9e:14:4d:1b:4c:91:5b:
                    1f:f1:8f:31:0f:a6:b7:eb:22:d8:98:85:3e:6b:46:
                    aa:e3:53:19:8c:9e:b6:f1:ab:e6:aa:54:43:3a:d4:
                    b0:9f:67:0b:00:1b:92:76:94:6b:f7:fd:55:a3:b6:
                    7f:52:80:73:f3:34:7f:4b:63:d4:ae:c3:0f:01:d3:
                    2f:7b:ab:40:3f:bd:a0:ba:16:5c:41:84:be:64:4b:
                    98:4e:c4:ef:ec:31:d9:13:3f:42:fc:e2:3f:b0:37:
                    0f:0c:b4:30:2e:f1:df:1c:96:45:14:c4:6f:39:b1:
                    80:8d:f3:9d:03:c5:b7:7b:a4:f1:fc:7b:9d:16:6a:
                    2f:90:f5:fd:60:be:28:08:9f:21:90:58:89:4b:b2:
                    e4:59:d2:31:61:a8:78:37:e8:be:78:19:62:8c:34:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:85:FE:2D:F3:D1:C7:94:65:E7:20:2C:27:5F:94:84:72:63:4B
            X509v3 Authority Key Identifier:
                keyid:62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/E70D393E3E1211F1B8544D87AE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.232.0/22
                  103.47.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:26:4e:b2:44:aa:b8:87:1c:53:fd:7e:e1:5c:00:67:7e:a2:
         2e:85:93:6b:ff:3d:5b:9a:38:57:aa:90:7d:09:45:ed:57:a1:
         5a:c6:11:e9:fb:ac:37:7e:67:07:82:e1:10:58:4a:61:75:be:
         bc:09:6b:39:b2:6e:92:03:c5:32:1c:18:42:ba:fa:df:64:c6:
         fa:de:c2:bd:b1:e6:49:59:de:d2:a7:6a:10:c5:16:11:5a:60:
         46:33:fe:d0:72:42:59:09:31:8b:51:d8:d7:ea:8d:05:9a:8f:
         a5:d5:dc:66:4f:31:da:b5:a2:a9:5a:db:41:7d:6e:64:6d:22:
         5e:49:bb:80:cf:8a:58:34:1a:c2:08:1b:93:99:b7:7e:4e:91:
         01:2c:48:87:14:d8:ec:ae:51:bb:63:67:67:28:c9:e5:74:aa:
         a1:43:aa:17:df:62:c4:9a:bd:37:f0:60:1f:58:04:8b:91:85:
         40:10:f9:40:76:29:5c:2a:87:cb:f4:8a:7f:b9:17:17:e4:f5:
         a9:9f:eb:b6:c6:c7:7a:98:71:be:50:54:32:2b:56:08:20:2f:
         d2:32:4e:54:05:7a:84:32:68:17:2f:c8:97:0d:36:f8:c8:a7:
         a9:98:f3:34:5c:ed:16:99:15:26:0b:a6:4a:65:d0:9d:16:88:
         6b:84:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:41 2026 by rpki-client