Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa
File:                     43BCAA10601011F1B53A223F8947A888.roa (raw, json)
Hash identifier:          UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=
Subject key identifier:   DF:81:CA:B3:98:C9:A6:A5:6A:61:2E:D7:E1:FA:22:3A:88:9C:68:15
Certificate issuer:       /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial:       0932
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa
Signing time:             Thu 04 Jun 2026 12:24:00 +0000
ROA not before:           Thu 04 Jun 2026 12:24:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154114
IP address blocks:        45.125.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
                          rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2354 (0x932)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
        Validity
            Not Before: Jun  4 12:24:00 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a216e60-9df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:0a:ab:44:14:b4:6d:7d:41:eb:cc:51:3c:
                    50:50:1a:d5:8f:92:a9:7a:ee:2c:67:99:71:20:2d:
                    b0:ab:14:3f:de:02:2c:10:24:05:a6:d9:82:dc:49:
                    f0:a5:fe:1f:73:16:95:50:29:95:09:8c:1e:7b:f0:
                    8a:6f:ad:b6:3e:5f:54:04:2e:c7:64:11:5a:6b:72:
                    a9:dc:c5:cb:ef:22:a4:db:ee:e1:ab:14:71:cd:10:
                    8f:36:40:dd:c8:7d:2e:89:a9:da:c8:00:fe:d9:0d:
                    d2:24:9f:b7:fd:d5:0b:44:4d:81:f7:61:fc:65:b7:
                    46:63:e3:16:8c:64:00:e8:1e:20:6d:fe:fc:2d:60:
                    77:7d:1b:2e:92:f3:37:61:6e:40:d7:d8:e3:d8:f1:
                    22:7d:d1:18:fb:80:f4:6b:f6:00:e2:35:20:20:c3:
                    dc:0e:96:42:16:bb:88:49:b1:2c:ad:9f:35:ce:ff:
                    6b:b5:b9:4e:66:00:60:11:49:ce:49:b4:91:58:61:
                    58:23:08:09:87:c5:40:fe:13:84:83:5c:07:83:d0:
                    0e:7f:73:ce:dc:fe:97:4b:1a:3a:e4:87:8c:34:1b:
                    86:fc:d8:6d:51:0e:ad:1d:cf:a3:07:40:78:57:dc:
                    4a:74:88:e8:32:16:fe:90:31:57:8f:33:c1:d2:f0:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:81:CA:B3:98:C9:A6:A5:6A:61:2E:D7:E1:FA:22:3A:88:9C:68:15
            X509v3 Authority Key Identifier:
                keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:0b:f7:fb:ab:83:de:d5:a6:3c:5e:27:e5:56:ae:57:3b:50:
         13:60:2a:c6:1a:00:10:eb:70:3d:f4:3c:27:4e:49:49:6e:eb:
         15:a6:29:f3:31:b2:eb:6f:1b:95:e2:f4:01:27:1c:a4:1a:64:
         f0:00:f9:48:d7:c2:e7:f4:0b:37:20:6d:11:b9:c2:99:38:7d:
         48:be:74:95:b2:e1:fc:a9:c9:86:23:a3:e3:15:47:3f:d0:48:
         1d:cd:68:9c:77:d2:40:5a:d4:f5:bb:9f:fe:24:ce:d3:85:74:
         74:54:cd:54:95:b4:b8:9d:1a:b6:1c:c4:69:55:af:7e:c2:2e:
         9e:b4:a4:23:bd:f3:4d:70:1a:60:74:f0:62:57:2f:d0:1d:b2:
         2f:26:ce:33:8d:b1:b6:ee:f0:15:0b:1d:74:1a:a7:48:1d:5a:
         28:19:fb:60:b9:c5:78:bd:47:6b:c2:d0:69:6e:ae:60:06:67:
         9d:2f:36:3e:97:d4:97:81:4b:93:54:a8:0e:a7:b4:2d:1e:17:
         68:62:81:69:4f:12:5d:06:3c:f6:e6:2b:5c:f0:e6:30:a6:d4:
         06:43:37:4f:71:e1:89:10:db:1d:81:08:00:31:c8:df:0d:ab:
         99:e4:4f:a2:7c:11:6e:44:2b:c6:88:b3:6d:f9:0f:a3:df:74:
         1f:90:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:14:34 2026 by rpki-client