Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
File:                     FEDE0F2066C611EC93A73A3DC4F9AE02.roa (raw, json)
Hash identifier:          Zccbv8dcS5H485GgGvv2gnpToyn81cRGaFg9r2jbzac=
Subject key identifier:   0A:97:83:44:07:1B:EC:2C:63:B1:04:E5:82:FE:15:43:A7:2B:82:00
Certificate issuer:       /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
Certificate serial:       04C2
Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa
Signing time:             Mon 16 Mar 2026 23:31:52 +0000
ROA not before:           Mon 16 Mar 2026 23:31:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133585
IP address blocks:        103.178.100.0/23 maxlen: 23
                          103.178.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl
                          rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB
        Validity
            Not Before: Mar 16 23:31:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69b892e8-6cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:b7:d2:38:7c:8e:b5:83:ba:e5:39:05:13:
                    48:3b:47:32:7f:d1:c3:3d:18:f2:53:cf:cd:df:e4:
                    93:92:87:4f:97:91:fc:5f:a2:b7:2c:ae:ea:01:ed:
                    f2:e0:bb:2d:59:a1:85:9c:a1:1d:e3:ae:bc:41:f8:
                    6a:dc:ed:71:75:88:93:d1:89:5a:e6:73:44:66:bd:
                    7f:31:b8:55:be:0f:6e:0b:a3:84:68:98:d1:19:4b:
                    92:2d:ce:38:05:b5:66:e0:27:50:40:a8:20:ad:34:
                    9f:b1:96:49:c8:df:40:d4:aa:9f:c4:40:ed:ae:cd:
                    ec:22:51:7f:4d:d0:5b:37:54:62:17:ca:80:95:61:
                    db:e9:cc:b8:7a:8a:ca:6d:94:9c:c2:10:a8:41:47:
                    4f:2f:ab:0a:3f:d2:70:09:b0:a6:28:bb:1d:82:c8:
                    23:17:0a:d5:8e:e7:ce:71:85:af:7d:45:ca:8f:35:
                    51:60:3c:8e:6c:08:58:1d:f5:e6:41:ab:8c:b0:96:
                    b0:b1:e3:80:32:24:5f:43:99:67:83:3e:ac:d4:8a:
                    d9:cf:3f:a6:92:d3:ef:ae:06:53:cd:d6:af:2c:79:
                    0d:4b:af:0e:64:bf:22:78:2b:68:8d:94:28:d5:16:
                    ff:fc:ba:6e:c4:f6:41:3d:ce:dd:62:e2:92:f9:10:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:97:83:44:07:1B:EC:2C:63:B1:04:E5:82:FE:15:43:A7:2B:82:00
            X509v3 Authority Key Identifier:
                keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/FEDE0F2066C611EC93A73A3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:67:1e:1a:a1:d1:0a:51:5f:38:bd:b2:55:85:39:e4:55:
         2a:12:ff:0a:dd:65:61:26:68:7a:e3:d2:f4:5d:7d:c9:0c:e7:
         91:4d:52:08:e9:57:ba:33:67:df:d1:e0:39:6c:b3:6a:b4:69:
         fb:d1:cb:8e:13:0f:c2:00:84:9d:e7:c9:f6:23:9d:24:1b:4d:
         eb:5b:2c:b1:bc:1c:e8:35:52:c6:ae:29:ab:c5:bd:bd:02:75:
         91:89:f0:77:c6:c6:73:ef:1c:68:da:cc:71:ca:06:4a:35:09:
         33:cf:d0:17:98:c1:c5:99:d7:64:f8:e3:68:28:4b:36:d1:e4:
         cb:34:ab:66:a6:46:1d:9c:5e:9c:d2:ae:a1:49:ea:38:1f:12:
         58:46:b6:51:ed:35:44:21:cb:71:f2:d0:ef:f2:1c:21:4d:6a:
         83:fc:9f:22:11:9f:0b:e0:27:44:72:3c:8e:69:a3:6b:5b:a2:
         e1:a3:55:85:52:3d:8c:1c:53:5b:74:98:8c:99:0a:11:d7:77:
         05:1a:bc:c7:bb:b1:a9:3c:af:05:24:75:17:fd:4a:73:3f:86:
         1d:8a:73:70:b7:7a:9d:0f:5b:6d:b4:60:50:4f:f5:4f:da:bf:
         98:5c:aa:34:23:b4:dc:79:5c:b6:f9:c4:65:a4:47:e0:af:70:
         cd:12:2e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:20 2026 by rpki-client