Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
File:                     FE1FDB12BCD011EC8283681EC4F9AE02.roa (raw, json)
Hash identifier:          D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=
Subject key identifier:   DE:BA:C7:A3:82:D2:27:72:E9:AC:FB:FF:D2:B2:7D:09:75:39:16:41
Certificate issuer:       /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial:       0872
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 21:25:36 +0000
ROA not before:           Mon 02 Mar 2026 21:25:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     63962
IP address blocks:        43.231.112.0/22 maxlen: 24
                          103.50.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
                          rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
        Validity
            Not Before: Mar  2 21:25:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a60050-f5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:19:88:10:1a:c7:df:c8:c4:42:2a:84:f5:
                    72:8f:61:a6:c5:e0:ff:1c:a8:83:0f:3c:0d:38:07:
                    d6:24:52:ae:05:a6:fb:1f:a0:ca:09:f4:ef:45:70:
                    59:e4:42:dd:5b:b6:3e:d1:77:2a:5c:0d:ee:2c:39:
                    8b:bb:f7:19:56:d3:fb:48:56:75:11:67:2f:2d:8a:
                    0c:33:c3:6d:e1:3e:b8:80:9e:9a:75:b0:58:ff:19:
                    a0:ea:12:41:47:af:bc:b6:a9:93:3a:0f:0a:56:9c:
                    e6:0e:12:01:27:5f:4d:69:38:fe:dc:a7:c8:f1:9d:
                    c7:29:2b:c9:7d:ff:1f:d9:69:d6:7e:59:c8:5b:d3:
                    f3:59:ef:3b:96:b4:49:28:77:1c:de:e8:35:39:79:
                    b9:5e:07:a7:a0:44:24:5d:4f:ec:75:31:98:88:dc:
                    fc:08:39:d6:c4:fa:a2:64:c1:a6:02:86:8f:ab:71:
                    81:0a:a3:8c:b4:1c:68:b2:34:54:56:9c:0a:6c:66:
                    1d:19:db:9b:ee:25:c7:00:93:cc:ad:a3:3e:db:81:
                    1c:f5:31:21:d0:fc:fa:24:23:cd:69:56:20:e5:9d:
                    89:d4:6a:d3:77:8c:6b:21:8d:c6:2a:f6:af:ea:c2:
                    ba:fc:14:76:da:c9:b1:b8:96:2b:a6:b8:1e:74:3e:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:C7:A3:82:D2:27:72:E9:AC:FB:FF:D2:B2:7D:09:75:39:16:41
            X509v3 Authority Key Identifier:
                keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.112.0/22
                  103.50.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:bf:d5:f9:ec:cd:59:92:b1:1a:07:89:5b:59:1e:d6:4e:
         58:6f:8d:fe:29:6e:f6:2f:42:44:d8:1a:6b:19:30:3a:e8:de:
         81:a5:82:5a:fa:c6:39:ea:28:b5:43:b3:26:41:11:70:1b:43:
         08:fd:b6:83:df:33:fb:61:52:4a:2e:11:cf:a7:94:3d:69:eb:
         04:9d:ae:b5:59:13:f8:15:ba:16:ce:a4:4c:59:7d:3e:cb:d7:
         c3:01:ca:7c:85:1a:cd:23:27:d2:d5:28:22:8b:3c:00:18:22:
         2c:3c:73:52:23:4a:ef:e8:48:25:13:14:6c:41:ce:e0:63:6c:
         84:87:95:b7:ca:ae:3e:2a:88:35:d0:2f:fd:ab:d9:89:ac:79:
         6f:6d:e4:90:c6:52:3e:b8:26:71:06:fd:0f:8d:d1:c3:c0:51:
         e1:2d:fc:7a:0e:a4:28:12:e5:76:e5:36:dc:31:f5:31:48:33:
         42:d6:00:2e:4d:92:ae:41:24:d6:58:3c:bd:af:5a:a9:08:5e:
         10:16:e9:10:c0:4b:5f:72:87:c0:cd:88:e1:9f:c4:10:2b:f3:
         33:62:f4:57:46:4d:a3:fb:3d:19:ad:5d:78:a3:1c:e8:6b:28:
         26:ee:a0:55:b6:bc:74:44:05:e8:f0:b9:d9:96:09:1e:bd:ff:
         fc:b1:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:12:32 2026 by rpki-client