Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
File:                     FBFF89FC3AC611EEB790D485C4F9AE02.roa (raw, json)
Hash identifier:          6+5b1CfcZTuiHBvdAxqJb6CWPbZsPji1n33pmOP0SN8=
Subject key identifier:   D6:D5:1B:13:7E:EC:73:7C:8F:79:43:1D:BB:53:7A:66:9A:6F:19:15
Certificate issuer:       /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial:       0C81
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 19:22:35 +0000
ROA not before:           Mon 02 Mar 2026 19:22:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132038
IP address blocks:        103.42.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
                          rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3201 (0xc81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
        Validity
            Not Before: Mar  2 19:22:34 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5e37a-742e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:5e:d4:39:93:dd:25:b3:68:0c:71:e5:fc:
                    c4:82:6c:e6:22:17:8f:80:72:f7:50:6a:e1:ce:73:
                    32:be:1d:69:12:54:bb:22:08:3a:13:4b:db:65:4d:
                    7b:1d:b7:12:b2:f3:fc:c0:a6:af:dd:69:6b:33:ba:
                    f1:c7:96:e4:5a:7e:b5:4f:26:e2:70:6a:e8:44:6b:
                    b8:2f:70:20:d6:95:2f:fe:de:a0:aa:00:65:33:dd:
                    1f:53:3f:0c:5b:19:ca:50:bc:8f:5f:d2:d1:93:69:
                    21:e8:13:7c:e0:9a:38:a5:0a:ff:f4:86:1b:e9:55:
                    ed:c5:e9:64:38:1a:03:61:40:d7:55:3a:c2:dc:19:
                    be:97:da:98:26:aa:0c:c2:05:d3:1f:3e:a2:51:94:
                    32:81:a2:46:00:b7:a2:d9:34:f6:ae:85:42:a9:05:
                    ca:9f:74:ee:da:10:a7:68:d1:88:8f:c5:e1:62:b6:
                    ed:e6:18:a8:30:bb:aa:4a:93:a6:f8:3e:93:27:39:
                    bf:09:07:43:bb:20:ac:31:51:48:be:9e:58:cd:e3:
                    82:23:f3:57:0c:18:08:37:77:ed:d4:11:3e:62:83:
                    9b:ad:55:48:7c:91:f2:a1:e0:7d:d3:b7:30:94:2c:
                    08:3e:cf:e6:5f:8c:a5:db:28:49:27:a5:6d:fa:11:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:1B:13:7E:EC:73:7C:8F:79:43:1D:BB:53:7A:66:9A:6F:19:15
            X509v3 Authority Key Identifier:
                keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:2e:a9:69:b4:37:d4:bd:90:92:6b:36:39:20:d9:62:04:
         9d:ae:f4:d9:5f:70:f9:12:b3:0e:b4:08:3f:15:90:b4:1c:44:
         59:8b:6f:3c:9b:f3:ed:dd:48:35:f5:56:f6:8b:2e:34:66:3c:
         89:f2:38:f7:ea:3a:e2:93:23:95:ca:49:47:62:ce:8c:59:4d:
         5c:fe:b1:09:b3:0f:2d:e5:a7:a3:67:76:48:a4:33:9a:1d:7e:
         38:03:44:d5:60:57:ca:f9:87:f5:00:a2:fd:2a:51:8b:c2:c9:
         35:41:49:13:eb:92:8d:21:c4:ba:50:da:a7:7d:c3:e1:a6:06:
         02:8d:67:76:bc:51:dc:b8:c8:b7:49:09:38:25:9b:a7:67:e0:
         cf:72:ad:6f:5a:a9:50:60:60:a2:80:e1:05:cc:19:f0:a2:d9:
         09:8d:d5:d0:04:c3:0f:d6:d8:bc:91:a0:1a:e4:28:13:33:48:
         06:dc:36:48:99:9c:b7:b0:9c:75:ff:d6:3b:8f:6f:ea:de:ac:
         3e:8b:7c:30:09:d5:c6:5e:3f:68:52:72:da:bd:1d:6a:6f:be:
         97:9f:1a:cf:e0:81:9e:7c:1f:e8:93:f8:ae:3b:6c:bf:40:9a:
         fe:ea:67:30:d0:77:4c:ce:2e:05:8b:6f:de:3c:24:a2:a2:ee:
         27:33:27:90
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND
OEZEODU5MzkwHhcNMjYwMzAyMTkyMjM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ZTM3YS03NDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo85e1DmT3SWzaAxx5fzEgmzmIhePgHL3UGrhznMyvh1pElS7Igg6E0vbZU17
HbcSsvP8wKav3WlrM7rxx5bkWn61TybicGroRGu4L3Ag1pUv/t6gqgBlM90fUz8M
WxnKULyPX9LRk2kh6BN84Jo4pQr/9IYb6VXtxelkOBoDYUDXVTrC3Bm+l9qYJqoM
wgXTHz6iUZQygaJGALei2TT2roVCqQXKn3Tu2hCnaNGIj8XhYrbt5hioMLuqSpOm
+D6TJzm/CQdDuyCsMVFIvp5YzeOCI/NXDBgIN3ft1BE+YoObrVVIfJHyoeB907cw
lCwIPs/mX4yl2yhJJ6Vt+hFm6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNbVGxN+
7HN8j3lDHbtTemaabxkVMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB
NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc4NkEvMTI2REZDOTYxQTU1MTFFQTg4MDQyMjExQzRGOUFFMDIvRkJGRjg5RkMz
QUM2MTFFRUI3OTBENDg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZypzMA0GCSqGSIb3DQEBCwUAA4IBAQBqiy6pabQ31L2Qkms2OSDZ
YgSdrvTZX3D5ErMOtAg/FZC0HERZi288m/Pt3Ug19Vb2iy40ZjyJ8jj36jrikyOV
yklHYs6MWU1c/rEJsw8t5aejZ3ZIpDOaHX44A0TVYFfK+Yf1AKL9KlGLwsk1QUkT
65KNIcS6UNqnfcPhpgYCjWd2vFHcuMi3SQk4JZunZ+DPcq1vWqlQYGCigOEFzBnw
otkJjdXQBMMP1ti8kaAa5CgTM0gG3DZImZy3sJx1/9Y7j2/q3qw+i3wwCdXGXj9o
UnLavR1qb76XnxrP4IGefB/ok/iuO2y/QJr+6mcw0HdMzi4Fi2/ePCSiou4nMyeQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:23 2026 by rpki-client