Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/5BF38D62058E11EA96051368C4F9AE02.roa
File:                     5BF38D62058E11EA96051368C4F9AE02.roa (raw, json)
Hash identifier:          Q8Oy4wo2YJgEZIjyNWkq80rcuQvvGozUBEBODPVmJ6A=
Subject key identifier:   D5:75:3B:4F:16:C9:B6:A1:65:68:5E:E1:BB:1F:AF:A7:26:C3:C1:FA
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0CE4
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/5BF38D62058E11EA96051368C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:23:11 +0000
ROA not before:           Sat 24 May 2025 18:42:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     58927
IP address blocks:        43.249.116.0/22 maxlen: 23
                          103.9.68.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
                          rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3300 (0xce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: May 24 18:42:30 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4057f-48c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:98:c3:92:82:fa:df:e2:ee:44:ad:20:0d:
                    cb:51:b4:25:ac:43:fd:32:e2:e8:c2:0e:9b:d5:97:
                    0a:83:ad:9b:ef:0c:fa:a7:04:69:b4:55:44:61:3f:
                    ec:1b:51:df:cf:b9:f1:15:f7:5d:e0:c2:1d:4e:fe:
                    24:65:34:eb:58:1b:ab:82:87:91:03:f0:f8:50:54:
                    80:f3:5c:7e:d9:9b:f2:2a:4f:c0:ae:82:47:01:cb:
                    9d:27:aa:dc:22:5b:05:0d:b1:52:a4:49:42:34:45:
                    c5:44:c7:b9:ee:01:66:d9:2f:f8:96:83:c0:13:c1:
                    c3:9f:48:05:02:82:31:c9:a6:79:77:c1:b0:55:14:
                    bd:26:e6:77:4d:bc:04:9f:b4:93:1d:ad:94:d7:5f:
                    8c:71:84:87:1a:1d:3a:ca:29:b5:05:c0:70:b2:19:
                    ec:c0:a1:2e:4e:0c:ee:cf:17:c9:8c:06:45:31:fb:
                    78:d1:b7:26:e9:46:89:12:ec:7c:89:be:23:1d:b2:
                    f3:02:eb:e9:98:6e:9e:66:75:17:d2:43:8b:52:b2:
                    c4:a5:8a:b4:6b:c3:78:7c:6b:74:ab:af:82:09:45:
                    28:bb:ea:0f:ce:e8:13:26:d6:56:96:bc:b4:ca:86:
                    f5:51:f7:44:01:95:94:98:dd:d0:e8:dc:76:69:c2:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:3B:4F:16:C9:B6:A1:65:68:5E:E1:BB:1F:AF:A7:26:C3:C1:FA
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/5BF38D62058E11EA96051368C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.116.0/22
                  103.9.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:d6:de:fc:b6:f2:e3:47:30:e6:30:04:1e:5b:0d:3a:0e:
         10:9f:78:4c:dc:c0:25:0e:eb:7a:78:e1:72:c1:87:83:23:c8:
         ec:21:a0:98:0c:58:ea:44:11:06:b6:95:a8:be:4c:aa:1e:0d:
         d1:49:e5:9b:2f:59:5b:99:16:f0:62:a2:1a:43:5a:83:c6:e6:
         c4:df:84:a2:b5:7c:ee:e9:6d:e0:4c:01:6a:64:f2:e2:a4:a0:
         ee:55:74:6f:e6:b0:72:13:29:a2:61:2f:11:76:bc:33:ac:c0:
         04:a2:32:19:a3:25:83:09:45:84:51:fb:80:21:5b:16:b3:de:
         8e:7d:6c:00:f9:86:89:a8:56:00:ce:33:3a:3f:75:9a:43:fc:
         bf:b0:b0:31:bf:f8:e5:c6:44:1e:ed:ff:d3:96:6a:b0:a1:e1:
         f2:d8:89:fe:bd:b9:c8:67:cb:6a:bf:31:01:f6:b9:3d:49:c9:
         7a:9e:e1:b3:f3:4d:c4:32:f6:51:3f:04:81:c3:ea:15:fd:de:
         56:6b:41:7e:95:ef:4d:ea:80:a5:d7:c8:f5:3d:4b:90:e3:01:
         fe:aa:71:f1:1e:4f:60:f3:ea:74:4e:24:be:e5:32:bf:9e:80:
         9e:c5:6f:01:e2:02:f8:71:db:41:2e:f0:73:15:79:39:bd:5d:
         b3:3c:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:05 2026 by rpki-client