Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/FC46090E9C2611F093B6FA57C4F9AE02.roa
File:                     FC46090E9C2611F093B6FA57C4F9AE02.roa (raw, json)
Hash identifier:          +Z0u2AO6pzWMC+2Zqy2emMfgxJlMpGAWqdjJa7j1R38=
Subject key identifier:   E6:7C:D0:09:4D:2C:A9:84:4E:45:8F:A2:79:19:B5:21:7C:1F:B1:46
Certificate issuer:       /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial:       0A60
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/FC46090E9C2611F093B6FA57C4F9AE02.roa
Signing time:             Sun 28 Sep 2025 04:52:50 +0000
ROA not before:           Sun 28 Sep 2025 04:52:50 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     140100
IP address blocks:        103.148.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
                          rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2656 (0xa60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
        Validity
            Not Before: Sep 28 04:52:50 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68d8bf22-b327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:1d:64:db:ab:32:3e:bc:c9:24:a2:45:3d:
                    58:d5:5b:82:a9:6b:6d:f6:2d:ba:34:7d:a5:fe:6f:
                    95:1f:d5:be:e4:e9:35:d9:f1:86:c6:ec:bd:2a:57:
                    51:9b:1a:8a:a6:38:47:48:80:0c:0c:34:f3:f7:54:
                    ff:f0:b9:64:f9:77:29:37:6e:af:3a:7b:cf:24:20:
                    18:e9:67:7a:92:70:31:f4:e6:80:22:a4:98:1e:72:
                    9d:d4:be:af:db:61:22:29:fb:e2:61:20:44:37:10:
                    f2:9e:23:f4:ca:1e:eb:3e:9c:b1:8f:46:84:81:7f:
                    a4:48:4d:93:eb:d1:76:cc:77:65:24:00:6f:a2:9a:
                    23:bd:e9:ad:fe:fb:b4:24:59:d5:81:82:a1:8e:34:
                    3f:a8:d8:9a:2e:63:ff:46:45:2b:e4:aa:b1:85:47:
                    09:56:ac:ed:ac:7b:19:0a:ee:c2:9c:8b:b2:dc:cb:
                    8e:f7:09:ff:b9:15:be:6e:6d:a1:9d:f1:22:9b:29:
                    7e:8d:c3:8c:5a:b8:a3:09:45:73:70:bb:31:f5:10:
                    cb:18:79:9c:83:6b:ee:4a:c7:28:a4:63:a1:c1:66:
                    bc:29:06:55:5e:e2:ca:4e:90:ff:f6:e0:d7:5e:f0:
                    82:91:31:25:bb:4b:25:c9:7c:92:61:f3:5e:a2:85:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:D0:09:4D:2C:A9:84:4E:45:8F:A2:79:19:B5:21:7C:1F:B1:46
            X509v3 Authority Key Identifier:
                keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/FC46090E9C2611F093B6FA57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:32:cf:94:8b:3f:bc:25:b0:72:8e:9a:dc:23:5f:fe:6d:05:
         65:f9:ee:71:fd:f9:fc:bf:35:71:c8:ef:bc:ab:55:91:00:15:
         0f:1c:da:bc:98:01:04:99:24:11:8f:3f:e5:af:49:7c:32:00:
         17:14:e3:e2:de:0f:9c:fe:6a:63:2e:01:7c:b1:96:f6:32:42:
         e9:ef:b3:b0:8f:6e:4d:a8:13:1c:6d:69:82:b7:92:48:af:26:
         df:3d:7f:17:40:c9:f5:36:83:b1:df:9f:21:c4:1e:b7:69:fe:
         b9:96:80:32:71:5f:b7:c5:a8:76:ef:c4:dc:b0:b0:7c:09:d3:
         09:df:56:9f:19:27:6c:b5:b8:10:bb:98:84:94:79:af:4c:90:
         3f:a9:c1:13:12:ec:c0:1b:77:3b:a0:5d:e0:19:f7:a2:50:b6:
         90:a1:94:e7:0c:3e:0f:ae:34:7c:7c:92:be:86:c2:71:1b:fe:
         91:0a:ea:dc:4f:ac:b3:04:08:ee:43:2f:6c:79:06:0a:24:1e:
         e5:91:71:3f:9b:bc:30:99:78:fa:d1:83:44:53:49:09:83:de:
         18:08:f3:85:f9:33:28:7b:fb:27:86:5d:50:d8:15:bd:5e:4a:
         0b:b8:e7:ae:24:3b:7f:6b:d1:8d:ae:7f:3e:4c:74:fc:d2:61:
         2b:a4:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:58 2025 by rpki-client