Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
File:                     FBFF89FC3AC611EEB790D485C4F9AE02.roa (raw, json)
Hash identifier:          x6ISI3hdOnr22UZ05u8VzkkkNIxcoiILlvgsEcngUR0=
Subject key identifier:   08:DA:C7:4C:2D:D4:23:23:D4:28:6D:3B:78:CB:E3:21:17:F2:A0:B3
Certificate issuer:       /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial:       0CB3
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
Signing time:             Sun 31 May 2026 19:22:37 +0000
ROA not before:           Sun 31 May 2026 19:22:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132038
IP address blocks:        103.42.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
                          rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
        Validity
            Not Before: May 31 19:22:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c8a7d-023f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:73:cb:20:b6:94:76:10:f5:ee:2e:13:8e:
                    1e:64:2c:61:bc:05:4e:90:09:8d:a7:60:d2:31:4e:
                    ba:9a:50:69:b3:74:0d:1c:41:c5:e8:ce:8a:cb:cd:
                    17:46:00:29:8e:5f:32:7c:95:b1:7d:e1:18:c2:10:
                    16:83:d1:98:1a:9c:46:98:19:43:96:9e:3f:3b:0e:
                    52:c3:7d:1c:04:88:7f:09:4f:61:62:12:70:d2:52:
                    9b:cb:b0:97:d0:41:54:43:8f:dc:1a:ca:e9:bd:ee:
                    24:36:80:53:68:e0:1a:c3:7c:7e:17:81:e2:00:62:
                    0a:94:70:94:a6:e6:d2:7e:a2:23:21:66:bb:d4:3d:
                    04:43:c9:87:38:9e:90:cf:c3:70:cb:73:c4:a1:06:
                    a5:cb:7c:02:9f:7f:78:34:26:5c:a9:ff:1a:16:2c:
                    c2:16:c1:9c:d4:41:5a:10:14:8a:85:08:bf:f5:63:
                    f7:4e:ca:51:23:78:ac:2a:00:2f:52:6a:95:7e:3e:
                    88:9f:ca:47:66:8d:5f:11:3c:6b:f7:1f:f0:77:cd:
                    d9:31:31:3d:02:d6:e4:ab:b2:61:5e:e6:35:2f:40:
                    94:af:09:c1:a3:ce:98:fd:8c:0e:60:cd:d5:2c:67:
                    b0:e8:21:c8:1c:3e:d7:72:f2:e6:fb:ca:35:95:12:
                    35:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DA:C7:4C:2D:D4:23:23:D4:28:6D:3B:78:CB:E3:21:17:F2:A0:B3
            X509v3 Authority Key Identifier:
                keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:44:3e:40:fb:2e:21:5b:b7:7b:c7:35:d2:36:ab:0d:e5:
         e5:22:ec:30:c1:94:e1:4a:c0:03:30:0d:da:b6:98:4d:8f:5b:
         28:cf:f6:d5:79:6c:d7:05:91:a2:5c:52:89:4f:3e:6b:95:d3:
         8b:fd:97:6d:58:28:08:de:cd:3f:86:03:d0:e6:61:72:29:04:
         be:7f:12:ae:41:ad:b2:34:e4:3c:48:c7:04:55:12:0a:49:69:
         94:f6:75:00:3e:7a:43:4c:ee:13:ae:e7:91:17:23:85:39:08:
         3d:b4:c7:56:7b:ac:14:50:49:7d:d1:d9:63:57:f9:f5:70:fb:
         28:47:60:9a:21:0b:c1:7a:3a:3b:4f:14:96:23:4f:c4:c1:a4:
         d6:73:08:1d:e7:98:06:d6:8a:20:2e:7d:da:cf:08:c3:29:da:
         c9:7f:f0:b8:b0:85:b6:5b:ab:3e:7d:85:35:5a:d7:19:d6:c2:
         f2:c9:af:2e:a6:6e:92:39:a9:4e:f9:e6:3b:87:85:20:08:76:
         d5:a6:2d:e1:ef:4d:e0:75:83:1a:11:62:31:25:50:f7:99:ba:
         8a:81:10:2e:a5:0f:46:b1:aa:52:0b:c7:0f:63:8c:38:77:55:
         db:9f:4a:a9:ca:83:2a:88:ee:3f:dc:87:64:34:65:8d:bb:0b:
         d1:ab:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:53 2026 by rpki-client