Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
File:                     FC3C8A6A81E211EE963BAB87C4F9AE02.roa (raw, json)
Hash identifier:          O6fMeAHfmA8sNvhbsQlGasdy3CAaIHGwFKK0ajItLH4=
Subject key identifier:   F9:28:BC:39:48:67:82:03:70:01:F2:78:CB:23:15:7C:39:1A:61:CD
Certificate issuer:       /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial:       01D9
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
Signing time:             Tue 05 May 2026 03:35:07 +0000
ROA not before:           Tue 05 May 2026 03:35:07 +0000
ROA not after:            Tue 31 Oct 2028 00:00:00 +0000
asID:                     136262
IP address blocks:        103.141.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
        Validity
            Not Before: May  5 03:35:07 2026 GMT
            Not After : Oct 31 00:00:00 2028 GMT
        Subject: CN=69f9656b-8c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:c3:76:68:18:e1:cf:d9:44:66:c5:3b:59:
                    96:c3:cf:31:64:f1:8c:26:bd:06:ca:c4:c1:d4:e8:
                    9d:11:db:aa:d3:56:8f:35:92:e8:fa:fc:e2:97:b0:
                    ef:23:0c:52:a2:8f:48:5f:e3:26:c8:f3:81:e3:ba:
                    93:aa:73:a6:39:ca:d5:db:a3:ba:62:f4:a3:cc:46:
                    68:cd:7c:06:4a:49:98:51:a6:96:d2:b9:80:de:a6:
                    3e:39:ab:8e:c7:7a:64:61:25:4b:c5:55:4f:59:60:
                    5d:2e:c8:e4:2d:a1:cd:c7:bc:c8:bb:8f:9f:c6:27:
                    2f:c4:c8:2d:cc:94:39:34:0b:37:0e:ab:57:26:5a:
                    d0:b5:f1:05:df:01:ad:ca:d2:ca:a3:98:b7:ab:4b:
                    f3:c7:32:41:c2:6e:be:68:68:64:fc:51:a6:db:09:
                    c9:7d:5a:5d:63:c6:f3:e9:72:33:04:8e:69:14:6b:
                    da:76:90:a1:0f:48:96:fe:6b:7b:1d:f6:0a:69:43:
                    ac:b8:07:2a:fd:6a:5d:26:09:20:02:54:66:d6:29:
                    67:b3:db:be:0c:3a:7a:ca:77:7e:2a:7f:a6:e1:ca:
                    07:e6:ed:37:3f:76:83:70:71:c9:00:e7:a6:13:b2:
                    b8:b5:62:83:38:fe:e9:e3:fc:1c:23:64:dd:fe:e8:
                    e5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:28:BC:39:48:67:82:03:70:01:F2:78:CB:23:15:7C:39:1A:61:CD
            X509v3 Authority Key Identifier:
                keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:d9:c5:3d:af:a5:d7:bc:c0:7a:e2:19:8b:05:81:73:59:
         f7:80:b1:7d:e8:50:70:6d:00:fc:e4:e7:e2:21:6a:01:64:5d:
         98:d5:42:22:9a:18:08:50:b3:f1:a9:12:f0:3a:e3:08:52:22:
         b9:db:5c:b9:1b:27:6b:53:de:26:41:6b:61:7b:cb:e2:04:e6:
         59:f5:bd:82:cf:88:ea:5f:e1:e5:93:8c:e4:ed:9d:a9:a4:fc:
         6b:af:2d:f6:ea:24:21:6c:df:7a:95:4c:4e:a3:59:33:34:37:
         77:de:83:90:04:9e:bf:23:59:8e:20:42:f5:35:c9:14:80:65:
         b7:89:67:0d:e6:27:b6:ca:d6:e7:e2:d3:0e:35:05:9b:51:51:
         35:bb:85:ce:49:66:f2:4b:c4:e7:22:47:1a:8f:c1:8f:d4:3f:
         d3:50:85:be:42:30:75:3b:dc:2e:48:0c:f7:53:2e:a9:c7:1d:
         d5:29:f9:b7:80:84:b9:c4:ee:3a:b8:6d:de:5a:e9:45:9b:73:
         32:ce:92:6c:e4:f2:56:eb:70:6a:06:d0:26:cd:00:74:35:4e:
         44:92:1b:6f:a3:7e:39:f9:ba:14:a0:d0:b2:e4:a6:86:f0:dd:
         53:32:49:fc:67:c4:b2:88:de:f7:3e:bf:86:6c:78:17:d3:ef:
         ac:09:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:54 2026 by rpki-client