Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/FB1BCFB4CDEB11EF8115D720C4F9AE02.roa
File:                     FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (raw, json)
Hash identifier:          QorIyoesfOpL+H4xWShmq3n8AFxxqmelDckb5G5cFas=
Subject key identifier:   42:61:DB:7E:E9:F0:D2:FF:CD:B9:A4:D8:99:53:2A:E4:0C:CD:44:70
Certificate issuer:       /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
Certificate serial:       FC
Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/FB1BCFB4CDEB11EF8115D720C4F9AE02.roa
Signing time:             Sun 03 May 2026 06:39:29 +0000
ROA not before:           Sun 03 May 2026 06:39:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30081
IP address blocks:        103.211.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl
                          rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
        Validity
            Not Before: May  3 06:39:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6eda1-d55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:12:09:c9:f0:ee:94:fd:bc:95:8f:1a:9d:
                    85:e9:0f:00:d2:f0:9a:6e:d3:8c:b3:a3:ad:0c:97:
                    9f:60:1d:69:a8:f3:d8:28:a2:8e:0b:27:01:b2:ed:
                    af:ac:04:46:71:f1:53:35:c4:0e:b1:5f:46:b8:2b:
                    95:b2:96:25:0a:91:10:7c:be:9d:2c:0c:f7:3e:a5:
                    09:76:4c:20:5e:01:fc:47:85:d1:15:9a:4b:3a:b5:
                    bb:07:d1:2d:38:fa:3d:9b:c4:69:8e:14:07:87:38:
                    f4:4d:72:b2:7c:63:5b:58:bb:15:1e:d3:2f:be:18:
                    43:2d:34:23:58:95:c7:1d:ff:49:ee:21:42:c8:59:
                    f9:e1:23:62:59:55:f0:10:cd:e0:33:12:25:10:a0:
                    c9:9a:b2:fe:fb:58:99:37:3e:69:87:f5:3f:31:3f:
                    18:63:0b:a3:70:03:e4:86:02:a0:e5:77:59:73:c6:
                    2d:8e:19:90:02:e5:88:46:03:a9:b9:35:9c:d2:b4:
                    75:78:70:4a:a2:75:1e:78:b3:54:ee:ca:f7:63:9b:
                    30:93:8a:d8:c5:7e:2c:1c:75:53:a6:98:ed:e6:af:
                    2b:fa:e1:32:69:16:2d:31:4d:82:b8:e8:5b:8e:45:
                    59:ca:4d:69:61:1c:8b:39:d1:ff:f6:90:d2:42:31:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:DB:7E:E9:F0:D2:FF:CD:B9:A4:D8:99:53:2A:E4:0C:CD:44:70
            X509v3 Authority Key Identifier:
                keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/FB1BCFB4CDEB11EF8115D720C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:af:55:cc:58:df:dd:5e:c9:04:13:5a:01:a8:5a:e4:90:
         66:8e:7c:bb:91:fb:54:11:47:7f:83:da:88:37:64:be:0f:76:
         a8:3e:9e:41:5b:bc:90:b3:9a:73:11:72:fd:bc:27:c5:bf:bb:
         5d:4d:3f:ed:8d:99:d4:76:ae:2c:ae:14:c7:51:47:92:2e:84:
         5e:7d:56:e9:d4:5f:cd:42:5a:fc:36:31:1f:54:c2:32:f9:a1:
         17:93:07:3b:47:0c:ae:ac:bb:9a:35:95:8d:fd:40:bc:85:81:
         39:26:1a:b7:2f:68:e7:ce:14:28:67:13:9e:82:74:b1:15:5c:
         4c:b8:e6:f8:ee:6e:cd:00:4e:3e:9d:bf:1b:05:49:9b:df:27:
         f3:0c:83:61:29:38:c7:1a:33:09:7f:d1:bf:bb:cc:77:d9:24:
         58:96:95:8d:05:e0:0e:c8:dc:ec:1c:f6:6c:38:6d:4f:c4:16:
         e2:28:ea:9a:68:d1:e4:ae:d1:a9:71:6e:15:3e:45:16:79:13:
         45:97:71:d2:a4:64:c4:0c:6d:d2:3e:c9:77:aa:86:86:2d:69:
         9c:29:76:85:dc:13:21:42:13:5e:99:8d:7f:9d:e5:03:23:c2:
         46:fc:8d:33:86:c6:5e:59:2c:b8:44:8d:f4:8e:46:28:46:ba:
         5c:96:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:53 2026 by rpki-client