Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
File:                     FE1FDB12BCD011EC8283681EC4F9AE02.roa (raw, json)
Hash identifier:          r37tIom0PQWmaxr5fhR0abZbJcQ9CFZOevZC51ud4HM=
Subject key identifier:   7F:84:6D:16:29:9F:75:90:93:A5:03:34:10:7D:54:51:30:65:96:D0
Certificate issuer:       /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial:       086D
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:36:14 +0000
ROA not before:           Thu 20 Mar 2025 21:01:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     63962
IP address blocks:        43.231.112.0/22 maxlen: 24
                          103.50.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
                          rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
        Validity
            Not Before: Mar 20 21:01:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4088e-bba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:8f:db:7c:42:a9:ae:cd:7b:66:de:ee:85:
                    9d:63:b5:62:65:c2:52:da:60:35:89:ec:14:eb:f3:
                    c6:6f:f1:dd:4d:73:bd:61:87:07:da:af:30:62:4d:
                    7e:df:eb:d8:93:d0:c1:18:eb:7f:70:95:c1:8e:19:
                    80:96:49:fd:1a:52:21:49:c0:3b:24:43:b5:b4:9a:
                    84:e7:82:71:19:24:4f:c7:ab:4b:e7:50:b6:9d:ee:
                    c9:4f:23:b0:d8:88:a4:7c:f8:e0:2c:1d:8b:fc:e9:
                    ba:39:92:76:44:ea:9e:f7:20:53:60:c9:73:e9:2f:
                    2f:73:c6:a8:da:56:3c:44:a4:4f:c5:84:ef:df:dd:
                    b8:cb:9e:ea:4a:b8:a3:3e:7c:f3:31:02:ea:fa:af:
                    22:7a:7b:84:18:e2:bf:f0:50:f2:97:c4:c2:d3:4e:
                    1b:80:40:2c:4f:f8:0e:2f:30:68:41:17:56:cd:eb:
                    63:57:25:74:73:90:e3:d1:f9:cf:e5:57:e4:c3:ca:
                    b2:65:9d:b2:5b:a6:fd:7d:60:11:e0:ee:fd:7b:63:
                    97:3f:b3:ca:d3:e6:31:48:4c:c8:a0:f9:ae:22:fc:
                    0d:1f:31:d3:59:2f:b8:61:cc:aa:b5:27:50:ef:b6:
                    a0:3e:de:d0:e3:ac:eb:aa:7d:14:ea:b1:de:02:3e:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:6D:16:29:9F:75:90:93:A5:03:34:10:7D:54:51:30:65:96:D0
            X509v3 Authority Key Identifier:
                keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/FE1FDB12BCD011EC8283681EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.112.0/22
                  103.50.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:7b:27:fd:fc:8a:da:f3:95:72:df:9c:f5:fd:10:4e:e0:
         8e:57:1a:db:45:a5:55:d8:2e:b8:25:d1:58:60:4f:78:48:d7:
         f1:a4:63:24:d0:1f:11:ee:f0:96:31:72:6b:56:a8:76:f0:dd:
         2c:8e:fc:7f:71:11:b0:75:9a:1c:03:4e:f7:a0:e2:fe:94:d2:
         84:32:1d:8e:68:a4:fa:fb:45:b4:59:b5:33:55:69:91:99:e5:
         b9:cd:79:c1:59:65:a2:18:9a:08:f6:e2:fc:19:af:5f:f4:19:
         84:02:83:9b:08:a1:74:51:cd:1b:e0:85:f9:94:19:d4:a8:e0:
         b1:5c:e7:0b:b0:c2:a3:e9:dd:f4:f7:f2:3d:31:50:f4:cd:70:
         bf:4c:78:e4:4a:01:6a:c0:55:01:db:11:25:e3:bc:78:a4:67:
         cd:6d:c7:74:a6:03:7e:5c:ea:7f:23:80:1f:82:8a:22:8d:61:
         78:d7:6c:ee:98:fe:a4:c9:5d:c5:08:5f:75:0a:b6:0f:6c:b3:
         c0:29:dc:eb:2d:91:64:66:a6:b6:fb:2c:03:87:ee:4c:e5:b2:
         7a:e3:83:ec:80:67:23:6d:d0:f9:78:50:b2:65:04:d7:9f:7a:
         61:aa:e8:51:3e:eb:25:5d:9c:c7:f5:5d:19:e9:50:c4:e9:e5:
         44:b2:37:70
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMjQxMTAvBgNVBAUTKEEwQUM0MjdFOTU3QjM3NEQwMjY3RkE3NjQ4REQzRkY4
NTcwMkRBQjEwHhcNMjUwMzIwMjEwMTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDg4ZS1iYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjj2P23xCqa7Ne2be7oWdY7ViZcJS2mA1iewU6/PGb/HdTXO9YYcH2q8wYk1+
3+vYk9DBGOt/cJXBjhmAlkn9GlIhScA7JEO1tJqE54JxGSRPx6tL51C2ne7JTyOw
2IikfPjgLB2L/Om6OZJ2ROqe9yBTYMlz6S8vc8ao2lY8RKRPxYTv3924y57qSrij
PnzzMQLq+q8ienuEGOK/8FDyl8TC004bgEAsT/gOLzBoQRdWzetjVyV0c5Dj0fnP
5Vfkw8qyZZ2yW6b9fWAR4O79e2OXP7PK0+YxSEzIoPmuIvwNHzHTWS+4YcyqtSdQ
77agPt7Q46zrqn0U6rHeAj7ImwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFH+EbRYp
n3WQk6UDNBB9VFEwZZbQMB8GA1UdIwQYMBaAFKCsQn6VezdNAmf6dkjdP/hXAtqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAyNC9EMzNBNDc5NEYx
ODgxMUVBOUU4MEY3MUVDNEY5QUUwMi9vS3hDZnBWN04wMENaX3AyU04wXy1GY0My
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29LeENmcFY3TjAwQ1pfcDJTTjBfLUZjQzJyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkEwMjQvRDMzQTQ3OTRGMTg4MTFFQTlFODBGNzFFQzRGOUFFMDIvRkUxRkRCMTJC
Q0QwMTFFQzgyODM2ODFFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK+dwAwQCZzLMMA0GCSqGSIb3DQEBCwUAA4IBAQA/Hnsn/fyK2vOV
ct+c9f0QTuCOVxrbRaVV2C64JdFYYE94SNfxpGMk0B8R7vCWMXJrVqh28N0sjvx/
cRGwdZocA073oOL+lNKEMh2OaKT6+0W0WbUzVWmRmeW5zXnBWWWiGJoI9uL8Ga9f
9BmEAoObCKF0Uc0b4IX5lBnUqOCxXOcLsMKj6d309/I9MVD0zXC/THjkSgFqwFUB
2xEl47x4pGfNbcd0pgN+XOp/I4AfgooijWF412zumP6kyV3FCF91CrYPbLPAKdzr
LZFkZqa2+ywDh+5M5bJ644PsgGcjbdD5eFCyZQTXn3phquhRPuslXZzH9V0Z6VDE
6eVEsjdw
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:42 2026 by rpki-client