Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/FCB378AC8EF411EBAE4DC623C4F9AE02.roa
File:                     FCB378AC8EF411EBAE4DC623C4F9AE02.roa (raw, json)
Hash identifier:          8t+00iBpm8H7BtmgSYtrLEiPvycs2nvnLiAkxsrZfno=
Subject key identifier:   2D:0B:8C:ED:4C:DC:E7:FA:89:58:08:7D:9B:F2:39:56:3C:F5:CE:FA
Certificate issuer:       /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial:       06EA
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/FCB378AC8EF411EBAE4DC623C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:07:14 +0000
ROA not before:           Wed 30 Apr 2025 22:34:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135384
IP address blocks:        103.158.35.0/24 maxlen: 24
                          103.216.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
                          rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
        Validity
            Not Before: Apr 30 22:34:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a51b02-f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:88:8d:ff:f9:f4:e5:23:8f:6f:aa:fb:12:
                    aa:7e:f3:9c:a3:9a:d4:bf:33:e6:04:9c:91:c3:76:
                    b4:d6:98:da:4d:95:d2:c5:4d:7f:80:ad:ee:42:d4:
                    2f:78:b0:e4:81:d5:9c:11:db:54:d7:c7:13:69:a3:
                    56:e8:5c:1a:96:65:94:24:94:b3:9a:90:91:f1:2b:
                    ce:51:09:0b:65:d3:db:07:b3:3f:ba:27:4f:79:12:
                    31:15:e7:8a:2b:35:ee:a0:c0:7d:3a:a0:e2:a9:19:
                    40:1e:0b:55:2b:21:29:e8:5c:87:ca:94:d7:e1:d8:
                    ee:cf:a2:fa:f2:d6:50:26:13:07:dc:9a:ed:62:77:
                    d9:0f:08:82:a4:04:9b:48:26:0e:2f:89:70:e4:7e:
                    29:ee:fb:20:b3:ef:a4:6a:69:e2:3f:ca:f1:a7:f9:
                    84:12:ec:72:5c:21:23:ea:c6:be:22:97:db:05:e0:
                    0a:62:74:fa:01:01:92:f0:cf:6d:87:54:12:1e:f6:
                    36:6a:e4:4b:6b:3f:89:d6:88:cf:9d:ba:a2:da:01:
                    a1:a0:95:8e:7d:63:45:67:0c:b9:36:b9:dd:5d:23:
                    93:6f:9e:ff:76:fc:de:c0:c0:84:43:55:81:a9:7a:
                    36:72:6f:34:14:d9:23:40:4d:8a:de:0f:4a:0f:bb:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0B:8C:ED:4C:DC:E7:FA:89:58:08:7D:9B:F2:39:56:3C:F5:CE:FA
            X509v3 Authority Key Identifier:
                keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/FCB378AC8EF411EBAE4DC623C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.35.0/24
                  103.216.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d3:3a:6f:53:fc:94:55:89:9e:db:47:a5:69:0f:ce:5e:09:
         77:da:39:ec:bb:6c:49:3b:57:6f:6f:60:f3:28:19:5f:88:fc:
         14:ee:ac:00:ad:fe:b2:9c:99:29:a9:03:28:3f:39:15:6b:5b:
         f2:1a:06:1b:8d:01:66:d5:7f:a7:5a:8d:32:31:2a:13:d0:e7:
         68:95:6f:12:62:bc:96:65:ec:72:3d:40:32:d8:ff:4f:7f:3a:
         d3:aa:49:f1:2d:8d:de:46:ce:e4:13:aa:98:f3:62:c1:60:22:
         a3:08:db:58:90:71:4c:db:f4:24:bd:10:b0:33:81:7b:8a:6b:
         b6:48:00:d9:f3:2a:d8:ba:9b:b5:a6:f6:24:a4:c5:01:e2:a4:
         80:5f:5d:e3:11:6a:25:64:03:60:70:81:55:5c:fa:3c:28:67:
         0d:dd:13:e5:d1:58:ef:2a:3c:92:e4:f8:24:ff:e3:bb:94:f4:
         37:34:16:13:49:c7:98:0d:66:63:64:a1:da:5c:3f:ef:2b:1d:
         53:e3:6b:d1:55:70:02:7b:c8:87:c0:ef:1c:0a:b7:0b:e2:e4:
         cb:95:ef:3f:7e:6f:f1:92:a2:d8:a2:42:7a:e9:70:1d:20:cc:
         90:26:a9:13:74:ea:80:c3:5c:a5:65:2f:87:a9:c2:11:f6:8e:
         00:98:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:10 2026 by rpki-client