Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/E7C34456073711ED8BA93630C4F9AE02.roa
File:                     E7C34456073711ED8BA93630C4F9AE02.roa (raw, json)
Hash identifier:          JBdiolDGXrg1Q+GA3QTIBG2F1Ty2dd4Su0qV2ot2OMo=
Subject key identifier:   21:1B:BA:0D:1A:A4:6C:AD:7B:E6:AD:89:07:28:0E:DC:FC:14:32:22
Certificate issuer:       /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial:       0381
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/E7C34456073711ED8BA93630C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 00:50:29 +0000
ROA not before:           Sat 29 Aug 2026 00:50:29 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     58423
IP address blocks:        43.254.20.0/24 maxlen: 24
                          43.254.21.0/24 maxlen: 24
                          43.254.22.0/24 maxlen: 24
                          43.254.23.0/24 maxlen: 24
                          103.5.72.0/24 maxlen: 24
                          103.5.73.0/24 maxlen: 24
                          103.5.74.0/24 maxlen: 24
                          103.5.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
                          rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919879C, serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
        Validity
            Not Before: Aug 29 00:50:29 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a922cd4-006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:20:f0:e9:a8:d2:08:e4:b9:b1:c8:ac:db:
                    bf:c2:cb:8f:d1:e6:bf:b6:21:7c:03:db:6f:a1:c8:
                    16:9a:17:83:a7:0f:89:c9:9f:14:68:95:bf:0b:11:
                    4a:d8:74:03:ec:e5:9e:29:fd:7a:08:76:5b:dc:de:
                    aa:76:a4:e8:cd:c6:c6:4a:95:df:31:43:08:f2:74:
                    ff:79:90:d2:d5:ab:db:37:2a:57:81:63:e5:cb:5b:
                    2b:5b:da:1e:33:58:5b:09:49:c5:19:c1:d7:d5:7e:
                    b7:65:55:f5:aa:ae:91:c8:b4:5c:65:f3:92:ac:00:
                    88:97:a6:b9:a8:2d:24:38:53:eb:b0:35:59:54:da:
                    59:c9:87:b7:b0:ad:ce:fc:89:a3:06:01:88:98:26:
                    aa:d7:75:b2:6a:eb:a1:bb:d8:c3:2e:08:61:57:21:
                    89:35:d5:1b:73:bf:98:76:fc:04:4f:c5:a7:05:ae:
                    e0:26:bc:e9:46:6c:b7:5d:d3:d2:da:9b:67:37:90:
                    ba:40:a6:e0:ec:4b:93:8e:9b:5e:da:fa:19:53:9d:
                    45:c0:f0:1e:f0:9c:ba:d1:d8:91:12:17:1f:f8:30:
                    69:f3:95:28:e3:36:fd:3e:20:d7:73:11:19:42:fc:
                    c4:43:6e:4c:b0:db:20:20:2a:9c:e8:2e:92:0a:aa:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1B:BA:0D:1A:A4:6C:AD:7B:E6:AD:89:07:28:0E:DC:FC:14:32:22
            X509v3 Authority Key Identifier:
                keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/E7C34456073711ED8BA93630C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.20.0/22
                  103.5.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:57:82:eb:ae:f7:2e:36:4d:cd:6a:38:51:86:1a:27:5b:9c:
         39:dc:70:df:10:9b:32:b7:b8:c8:b2:f6:d1:a4:f8:99:d9:a7:
         af:3b:ea:56:d6:35:93:07:c2:7a:95:ec:31:5f:c6:43:14:81:
         65:d9:f5:f6:9e:53:0b:cc:97:a8:5d:eb:1b:9d:e2:cc:d4:fb:
         b7:b9:93:40:75:39:40:4d:62:a6:e4:e6:a1:51:19:d5:16:35:
         63:a4:d1:a2:59:70:c3:74:38:03:fb:6d:e4:a2:7e:ca:ad:31:
         8e:28:89:d8:55:14:9a:d1:25:4f:77:c6:8e:68:1b:a8:9c:db:
         77:95:08:6a:ae:52:7b:55:91:d2:27:39:d1:9b:f5:97:2b:82:
         fa:60:2e:b0:7d:fc:bb:7b:4c:2b:25:71:77:aa:6c:ad:6a:14:
         60:26:99:50:a4:57:04:10:3e:67:08:1b:34:3c:2a:2b:fa:8b:
         46:4c:27:fa:26:e0:00:29:61:1a:79:90:ea:d7:a5:5e:29:ef:
         ea:ad:4a:54:64:ac:c9:bc:fa:ae:a4:4a:bb:2b:7d:fb:67:4c:
         f1:8b:6e:36:15:60:63:9e:9e:22:3f:16:26:25:2f:9c:7b:f7:
         6b:d2:42:52:09:7d:31:b0:19:6f:1e:a8:2b:ab:32:1a:56:53:
         c1:d4:97:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:38 2026 by rpki-client