Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FDC27FFE4A0111F184EE7030BF833773.roa
File:                     FDC27FFE4A0111F184EE7030BF833773.roa (raw, json)
Hash identifier:          BEbloecvory19WuTiRp8DP0BJ65aMRNq8vJZR390ykQ=
Subject key identifier:   9D:B5:32:C2:24:8F:21:B0:29:4B:82:79:B5:3F:31:BF:5E:27:E3:FD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2E21
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FDC27FFE4A0111F184EE7030BF833773.roa
Signing time:             Thu 04 Jun 2026 20:26:21 +0000
ROA not before:           Thu 04 Jun 2026 20:26:21 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     399955
IP address blocks:        43.254.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11809 (0x2e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun  4 20:26:21 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21df6d-611e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:6a:4b:a1:a5:66:8d:fb:c4:53:df:e9:8a:
                    a2:92:05:40:bb:6a:41:d7:68:35:45:28:36:36:a7:
                    28:ed:22:70:99:7d:d6:76:f6:af:4a:97:d2:f0:f0:
                    61:fd:ec:4f:f8:3d:92:db:71:37:ca:77:36:cc:7f:
                    67:ec:bd:47:ef:b5:b6:eb:07:4a:d9:77:1c:80:c1:
                    2a:1a:48:01:fb:d3:d9:2e:0e:7f:fd:2e:76:47:03:
                    fe:b6:f9:f6:1d:aa:56:cd:8a:8d:a3:39:38:c5:4f:
                    ec:db:2a:d0:de:cc:27:0e:2b:ce:22:16:67:37:e8:
                    a8:32:4a:c6:51:c1:4a:a6:b5:66:c3:fb:99:ec:34:
                    d3:74:bb:32:c4:2b:ab:df:a7:8c:df:4a:d6:62:fa:
                    dc:b0:66:f1:5b:c9:3c:ea:5e:a5:1d:bc:3a:7d:1d:
                    5a:ee:9f:b6:5d:c2:46:2e:d9:8a:f5:3e:b5:6a:03:
                    b8:c6:fc:00:04:88:50:bf:65:c3:31:2d:5e:3d:33:
                    3f:31:0f:44:ac:c2:8a:df:b5:1b:3f:30:35:0d:86:
                    21:a5:b3:97:15:03:ab:3f:34:05:12:bb:97:af:bd:
                    11:6f:2f:b5:3e:6e:1e:91:0a:ba:f5:79:45:cf:e6:
                    fb:c7:8d:54:7b:92:d8:89:ed:e4:2f:d2:78:c6:2c:
                    25:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B5:32:C2:24:8F:21:B0:29:4B:82:79:B5:3F:31:BF:5E:27:E3:FD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/FDC27FFE4A0111F184EE7030BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:9a:f8:cd:ec:7b:40:d4:0a:71:57:02:9a:b4:07:91:1f:
         23:c6:ca:f6:56:dc:33:f9:0f:5d:4d:3b:73:dd:a5:4f:41:af:
         62:04:11:5b:e8:4b:62:23:7d:eb:a6:1c:0d:fa:70:14:a0:9b:
         fe:ce:df:29:26:bf:a3:2d:70:8e:3e:b9:26:c4:a7:db:02:ae:
         8a:a5:24:d1:81:5e:98:c9:2f:5c:14:91:01:ef:ab:41:e9:26:
         81:7c:2b:1a:53:af:62:3e:b9:cf:0b:7a:e4:07:4e:ba:21:61:
         86:73:4c:a6:2a:c9:8a:99:db:a4:f9:f6:da:f5:e6:50:e0:72:
         81:18:f9:0d:5c:6f:b2:f6:13:22:09:4e:fe:9a:05:c2:93:28:
         d6:b7:5f:53:48:ae:d6:77:88:5d:39:96:b6:42:eb:01:34:d4:
         93:db:a1:d4:b1:4b:28:09:77:9d:35:d6:83:91:8a:d0:60:1e:
         c6:45:37:b4:ad:a3:17:9f:e4:9c:58:3d:51:6b:0e:7d:8b:53:
         da:0c:0e:5b:cc:9b:17:d7:c2:fd:19:43:35:cd:f6:f3:7a:2e:
         99:ce:c9:02:ec:8b:18:fe:80:d2:cf:3e:04:6f:a2:83:a8:be:
         17:4e:ac:84:37:7e:5b:97:68:4c:c1:9c:56:5a:a2:d7:12:63:
         47:e8:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:31 2026 by rpki-client