Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa
File:                     FACAB78805DA11EB9E484F71C4F9AE02.roa (raw, json)
Hash identifier:          E5X8nAIq+dpQIc0dCSoalaUVPe2WMtMvUdFkb0uNvbs=
Subject key identifier:   85:37:F1:D1:13:4E:47:65:53:28:7C:5C:4D:9B:EF:0C:37:19:96:B8
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       0833
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:23:52 +0000
ROA not before:           Tue 30 Sep 2025 21:53:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        43.239.176.0/24 maxlen: 24
                          43.239.177.0/24 maxlen: 24
                          43.239.178.0/24 maxlen: 24
                          43.239.179.0/24 maxlen: 24
                          103.35.116.0/24 maxlen: 24
                          103.35.117.0/24 maxlen: 24
                          103.35.118.0/24 maxlen: 24
                          103.35.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Sep 30 21:53:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a42fd8-4312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:67:ea:18:7f:2c:af:e3:6b:14:ac:40:8c:
                    a9:2f:b6:7d:cf:f4:6c:75:10:47:10:59:5c:d9:b5:
                    a2:40:d3:93:3f:ed:cf:a7:09:0f:80:d1:db:2e:05:
                    b8:56:c7:bf:d0:7f:49:d0:44:d5:40:0b:6d:39:6c:
                    05:e7:bf:b1:4c:76:d5:0d:7e:2c:ec:0f:1f:33:fc:
                    a9:06:b4:a9:18:75:f6:90:9d:94:ff:ff:83:48:f1:
                    0c:a4:08:79:fe:34:26:7c:04:e9:14:04:06:02:db:
                    b5:b7:4a:db:4e:81:12:67:1b:64:c5:e8:55:3e:fe:
                    3b:16:90:d5:95:28:1f:72:f8:76:c6:04:e5:86:29:
                    5b:9a:7b:eb:b1:95:a7:1a:4a:ac:02:fd:ca:f2:7d:
                    ae:b1:94:48:e2:d4:24:a5:64:91:da:0b:01:7b:50:
                    54:3c:7c:a4:0c:f5:41:ed:5a:21:ca:e3:e2:d4:76:
                    be:7c:dc:a2:52:7f:2f:44:e7:2b:e2:2f:32:3b:17:
                    1f:6f:ef:f5:cb:3e:30:1d:e6:47:1d:1d:c9:50:28:
                    7c:8f:f2:a4:da:a1:88:4e:a3:a2:a6:89:43:3b:d4:
                    fb:fe:f5:18:c1:7a:84:34:55:b4:f1:81:6f:dd:7b:
                    cd:23:a7:e5:76:5c:5d:39:c4:7d:93:11:30:3c:60:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:37:F1:D1:13:4E:47:65:53:28:7C:5C:4D:9B:EF:0C:37:19:96:B8
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.176.0/22
                  103.35.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:8f:33:ff:15:4b:a3:d3:6e:ee:50:91:08:49:2a:a2:c1:d9:
         30:6d:a5:24:e3:82:16:4b:43:0a:42:03:78:b7:d9:ce:a6:6e:
         86:07:e8:92:13:45:78:c9:50:44:aa:6e:03:07:64:e0:86:00:
         c2:e9:92:b9:14:90:62:6f:e9:dc:1f:76:91:3f:df:b6:e9:e1:
         69:be:db:0a:dd:18:c5:ff:8d:b6:1d:b3:d0:6e:21:7f:4c:b5:
         7f:1c:46:3c:56:c8:f7:19:fd:ec:e5:a1:03:86:3f:f5:9c:72:
         fb:ea:ca:67:1f:0d:42:59:3d:74:98:37:f2:ce:ec:e6:e5:76:
         8c:15:e7:30:e9:05:de:a7:11:56:10:b3:68:c3:30:db:75:2a:
         14:4f:b0:ae:8c:55:b2:e8:6b:bf:8a:f6:c2:bd:d5:14:56:4e:
         f5:a2:90:26:9d:97:67:96:9d:fa:85:94:c6:ec:d1:d9:cf:13:
         76:9c:9d:5b:32:2a:4f:48:89:86:90:5e:84:59:f4:c4:72:28:
         78:4b:cb:9e:06:b5:30:d8:23:ec:2e:de:51:c7:56:58:eb:22:
         2f:85:c8:04:06:6d:71:4d:b9:a4:c7:a0:22:fb:53:e5:49:cc:
         fd:0c:ec:0e:2e:44:8a:83:d0:fb:e5:50:10:12:c3:7e:90:34:
         a9:c4:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:15 2026 by rpki-client