Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa
File:                     FBDB9F4A57F911F0B7986D41C4F9AE02.roa (raw, json)
Hash identifier:          e4UjmrKJitpM4Vxaxw9KuUtr2QIytzgyUGtC5yL1UHY=
Subject key identifier:   DB:8A:E6:E9:8F:CE:9D:E6:C4:D3:C6:EC:20:F5:7E:12:08:E1:DF:9D
Certificate issuer:       /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
Certificate serial:       D0
Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 03:51:38 +0000
ROA not before:           Wed 29 Jul 2026 03:51:38 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     150797
IP address blocks:        103.109.8.0/23 maxlen: 24
                          2400:e8a0::/32 maxlen: 32
                          2400:e8a0::/36 maxlen: 36
                          2400:e8a0:1000::/36 maxlen: 36
                          2400:e8a0:2000::/36 maxlen: 36
                          2400:e8a0:3000::/36 maxlen: 36
                          2400:e8a0:4000::/36 maxlen: 36
                          2400:e8a0:5000::/36 maxlen: 36
                          2400:e8a0:6000::/36 maxlen: 36
                          2400:e8a0:7000::/36 maxlen: 36
                          2400:e8a0:8000::/36 maxlen: 36
                          2400:e8a0:9000::/36 maxlen: 36
                          2400:e8a0:a000::/36 maxlen: 36
                          2400:e8a0:b000::/36 maxlen: 36
                          2400:e8a0:c000::/36 maxlen: 36
                          2400:e8a0:d000::/36 maxlen: 36
                          2400:e8a0:e000::/36 maxlen: 36
                          2400:e8a0:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0
        Validity
            Not Before: Jul 29 03:51:38 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a6978ca-6d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:0c:2f:f8:c7:5e:cd:bc:64:17:63:f3:da:
                    bd:f1:9d:85:65:9a:93:24:56:29:2e:e8:d0:d5:9d:
                    e7:27:18:9d:38:c8:92:31:f3:29:17:60:97:ea:50:
                    6f:99:fc:7a:0c:5b:81:6c:f6:5d:d6:3d:a5:71:f9:
                    27:54:06:ec:f0:8a:7d:72:88:27:d2:65:dc:98:32:
                    de:03:63:b1:9e:f7:61:5c:98:1e:43:96:b7:a6:5f:
                    95:4e:af:c5:18:6b:d6:ee:73:e2:27:d2:e1:3d:ff:
                    67:15:d4:cc:00:72:57:ef:b8:61:88:44:a8:f4:51:
                    6b:26:c2:3d:d2:e7:19:15:bc:64:2e:d0:08:6b:1d:
                    58:87:77:9b:de:ea:75:fa:e1:cf:71:7c:3d:74:a0:
                    c0:92:e9:49:9b:9a:aa:54:56:78:be:bd:9c:71:9d:
                    e5:b9:97:0b:8c:d6:16:c3:54:ef:b3:16:57:6e:93:
                    7c:91:12:fd:aa:5c:e8:ff:5c:05:3f:1e:63:d7:fd:
                    88:d7:b6:3f:db:8e:af:46:93:31:22:9d:61:69:be:
                    1c:33:e4:b5:1d:fb:09:86:9e:76:26:6c:8a:8c:ef:
                    13:61:b7:9d:89:60:e4:dc:8b:f1:42:70:45:6d:51:
                    53:61:21:c0:c3:3f:24:b7:7a:ea:42:28:6e:c9:05:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:E6:E9:8F:CE:9D:E6:C4:D3:C6:EC:20:F5:7E:12:08:E1:DF:9D
            X509v3 Authority Key Identifier:
                keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.8.0/23
                IPv6:
                  2400:e8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:80:51:ed:a7:00:ce:8c:5d:80:6b:39:7b:d9:4c:5e:05:3d:
         5f:e9:c1:99:ec:76:89:e6:03:60:6e:35:fe:f8:c4:71:c3:7c:
         f7:2a:02:32:46:c5:53:8c:ad:b4:04:ee:6a:a0:5d:4c:16:95:
         37:5d:0f:f6:83:3f:17:cb:9d:39:53:13:f8:81:a5:02:be:10:
         78:20:ec:82:45:9a:60:aa:36:ab:81:c6:5a:35:1a:47:ce:fc:
         d3:73:b1:3a:04:df:e2:f7:ae:1b:a2:f0:82:38:9b:b2:42:e1:
         4a:e9:91:ba:14:fa:d9:94:46:b6:32:b3:6e:ef:ae:2d:ae:1a:
         dc:17:47:42:05:34:ac:7a:bb:69:09:e2:4c:61:ef:42:bf:70:
         83:30:42:7f:96:a8:8e:52:96:1d:b9:50:9b:61:a8:6e:18:ae:
         c7:06:81:78:82:e4:2f:e2:10:ac:be:12:9e:e5:c9:01:9f:44:
         96:d0:65:a5:70:7d:3a:74:57:38:20:10:7d:8f:52:8b:92:48:
         b9:a8:09:f2:ea:16:1d:09:55:de:9e:57:a4:a1:c8:41:54:7e:
         48:90:2d:80:47:19:8d:26:93:19:49:5f:06:a2:25:20:da:97:
         0c:1c:dd:2f:9a:b7:72:b9:94:c3:07:93:cd:25:4f:2e:b7:ad:
         ce:e5:69:1d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ2MTQxMTAvBgNVBAUTKDRCNUMxNjIzRkJCMzNEOTZBMjQxQUIzNURCMEYwQkRF
QjVDMzlDQjAwHhcNMjYwNzI5MDM1MTM4WhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5NzhjYS02ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoboML/jHXs28ZBdj89q98Z2FZZqTJFYpLujQ1Z3nJxidOMiSMfMpF2CX6lBv
mfx6DFuBbPZd1j2lcfknVAbs8Ip9cogn0mXcmDLeA2OxnvdhXJgeQ5a3pl+VTq/F
GGvW7nPiJ9LhPf9nFdTMAHJX77hhiESo9FFrJsI90ucZFbxkLtAIax1Yh3eb3up1
+uHPcXw9dKDAkulJm5qqVFZ4vr2ccZ3luZcLjNYWw1TvsxZXbpN8kRL9qlzo/1wF
Px5j1/2I17Y/246vRpMxIp1hab4cM+S1HfsJhp52JmyKjO8TYbediWDk3IvxQnBF
bVFTYSHAwz8kt3rqQihuyQW+4wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNuK5umP
zp3mxNPG7CD1fhII4d+dMB8GA1UdIwQYMBaAFEtcFiP7sz2WokGrNdsPC961w5yw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF
REMxMUVEOEUwQUREODBDNEY5QUUwMi9TMXdXSV91elBaYWlRYXMxMnc4TDNyWERu
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5MQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkQ2MTQvMURGMDc1RTJCRURDMTFFRDhFMEFERDgwQzRGOUFFMDIvRkJEQjlGNEE1
N0Y5MTFGMEI3OTg2RDQxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ20IMA0EAgACMAcDBQAkAOigMA0GCSqGSIb3DQEBCwUAA4IBAQC5
gFHtpwDOjF2Aazl72UxeBT1f6cGZ7HaJ5gNgbjX++MRxw3z3KgIyRsVTjK20BO5q
oF1MFpU3XQ/2gz8Xy505UxP4gaUCvhB4IOyCRZpgqjargcZaNRpHzvzTc7E6BN/i
964bovCCOJuyQuFK6ZG6FPrZlEa2MrNu764trhrcF0dCBTSsertpCeJMYe9Cv3CD
MEJ/lqiOUpYduVCbYahuGK7HBoF4guQv4hCsvhKe5ckBn0SW0GWlcH06dFc4IBB9
j1KLkki5qAny6hYdCVXenlekochBVH5IkC2ARxmNJpMZSV8GoiUg2pcMHN0vmrdy
uZTDB5PNJU8ut63O5Wkd
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:42:23 2026 by rpki-client