Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/25A3C2F46D1B11F09E59264EC4F9AE02.roa
File:                     25A3C2F46D1B11F09E59264EC4F9AE02.roa (raw, json)
Hash identifier:          9X406cRfEaaV9qLi/6kgIQY+OvvghF/tupg4ZJ65XWo=
Subject key identifier:   91:99:99:AD:E2:96:C2:25:55:B5:A3:7D:E1:52:AC:B8:CD:25:1A:FC
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2D1C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/25A3C2F46D1B11F09E59264EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:27:06 +0000
ROA not before:           Wed 30 Jul 2025 07:59:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7843
IP address blocks:        43.254.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11548 (0x2d1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 30 07:59:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4af2a-b49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:26:47:e4:21:e7:79:59:a1:e7:4e:8b:7a:
                    6a:7e:3d:27:ea:7e:e5:10:f3:3a:d6:3a:6e:1f:0e:
                    4d:4c:45:94:1e:81:f5:88:ef:e6:7a:e9:db:ec:f8:
                    00:af:ba:83:f2:83:b5:93:bb:a3:f7:f7:cf:dd:c7:
                    bb:d0:2e:fb:7b:ec:b5:f9:6a:a2:cf:f0:80:39:47:
                    6c:e8:2b:ea:f8:6a:6b:48:c8:74:7f:c4:a2:65:5e:
                    ed:5e:31:39:ce:24:fd:a8:39:7d:d3:06:1f:8c:f5:
                    99:bf:01:77:85:6d:f9:5d:e8:55:05:08:29:a7:82:
                    40:2c:35:2f:e4:14:9f:1b:ab:ba:62:5d:bc:74:f5:
                    de:49:31:9a:f0:21:48:7c:ca:f4:c9:97:45:65:d3:
                    be:19:fc:6e:ec:4b:ed:55:08:4f:3c:df:42:be:c0:
                    09:94:d9:ba:72:a2:8e:10:05:b7:eb:64:81:3b:fd:
                    24:ef:6b:59:56:3d:73:4f:04:5c:ca:04:2d:90:5e:
                    73:bd:93:fb:5f:0a:a2:9d:53:1a:ee:29:e1:86:31:
                    41:5f:46:07:86:8e:84:18:6d:93:d1:88:87:f9:4b:
                    71:19:b6:87:b7:e3:fd:30:73:4e:2c:a2:6b:83:0c:
                    f8:46:d8:95:28:cb:fc:31:79:a0:d7:30:05:f3:ab:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:99:AD:E2:96:C2:25:55:B5:A3:7D:E1:52:AC:B8:CD:25:1A:FC
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/25A3C2F46D1B11F09E59264EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:b5:74:0d:4c:42:bc:20:04:d7:84:0f:93:29:f1:a6:2e:
         f9:20:43:f7:a3:a8:01:32:37:ec:0a:62:95:67:b4:0d:ea:79:
         65:bb:ec:da:46:88:87:8b:0e:64:1a:05:d1:a2:e0:e2:6d:55:
         54:74:9f:a1:20:e4:65:6d:9c:51:27:2c:16:db:df:b3:e8:59:
         87:f5:74:5f:9d:61:3f:d4:d1:97:ea:5b:db:00:71:0d:a9:2a:
         e4:3b:a0:a5:1a:d4:48:1a:b7:da:2c:a8:c3:79:b9:cf:50:64:
         8d:29:29:41:01:6a:fc:fa:3c:14:79:f0:1c:69:b9:6f:dd:bc:
         1f:1f:12:5d:63:94:08:5b:3c:aa:8f:6c:f4:60:7c:0f:00:7f:
         e9:44:72:e3:6c:ca:75:b7:4c:74:ff:34:44:1d:88:62:cf:3e:
         05:09:32:84:35:cd:06:64:1d:bc:18:3b:85:74:a1:32:64:f9:
         66:37:9c:b6:71:dc:72:53:3a:01:92:81:87:36:83:d8:75:65:
         e1:3b:ca:70:a0:ee:49:94:e7:86:5c:b4:bb:14:24:c3:df:43:
         b6:ae:3e:c6:9f:a0:a6:01:b2:cd:c9:7e:87:58:b7:cb:96:8b:
         75:05:e1:91:d5:63:f8:3a:05:85:f3:4b:4e:93:05:c4:05:cb:
         2c:5b:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:30 2026 by rpki-client