Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/FCF7126E310711ECBFFF5E62C4F9AE02.roa
File:                     FCF7126E310711ECBFFF5E62C4F9AE02.roa (raw, json)
Hash identifier:          JeUrYB0TpZZfGPutMqhHCJeUmYH749wNTaQ/Ii/GQOc=
Subject key identifier:   91:C1:28:44:92:FE:D6:7A:72:13:68:1C:70:1F:F1:DB:80:C0:4B:DF
Certificate issuer:       /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
Certificate serial:       0548
Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/FCF7126E310711ECBFFF5E62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:47:38 +0000
ROA not before:           Tue 18 Nov 2025 22:44:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147176
IP address blocks:        103.174.190.0/24 maxlen: 24
                          103.174.191.0/24 maxlen: 24
                          2001:df7:d280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95
        Validity
            Not Before: Nov 18 22:44:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45f9a-ce63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:a4:76:21:d7:3f:35:98:fd:6a:53:81:29:
                    fd:a8:86:2c:3f:d6:c5:93:58:3a:fd:2c:5c:6c:0f:
                    0a:17:85:62:80:7e:80:6a:ee:23:90:de:3d:06:b4:
                    46:d8:62:f6:52:4c:ad:2a:23:0b:44:84:86:18:2b:
                    de:a8:1d:51:f7:f7:d3:f5:cd:de:31:5c:ac:ee:8e:
                    a6:7c:1f:8f:5f:0b:af:93:e6:36:02:e0:9b:bb:e2:
                    b7:2d:1c:b1:fa:83:96:00:4a:35:4e:5c:85:1b:48:
                    4c:35:92:d6:57:e7:2c:6c:6f:a8:57:2f:41:74:d0:
                    ac:39:ad:7e:74:72:41:b2:1a:a2:63:03:d9:7b:fe:
                    9d:e5:82:f6:c8:fc:9b:a1:16:8c:35:8b:51:c7:7e:
                    1e:1e:ae:cb:f9:aa:ea:cb:27:8c:4c:9c:36:1b:1b:
                    13:f1:45:95:96:b6:df:22:9f:23:36:c5:37:eb:f1:
                    b3:2a:82:eb:e6:df:7d:8e:d4:91:bd:5e:dc:7c:9a:
                    97:04:f0:15:75:a0:8f:c0:9a:d0:d0:25:10:aa:cf:
                    e0:30:b3:53:a9:a2:82:26:e1:b2:8f:2e:a2:be:98:
                    ba:0f:9a:89:b0:d8:1f:d6:92:f2:75:f2:ae:5c:b1:
                    97:14:ff:b4:8e:a7:8c:94:c5:02:16:bb:ed:11:72:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C1:28:44:92:FE:D6:7A:72:13:68:1C:70:1F:F1:DB:80:C0:4B:DF
            X509v3 Authority Key Identifier:
                keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/FCF7126E310711ECBFFF5E62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.190.0/23
                IPv6:
                  2001:df7:d280::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:b6:1f:6d:f0:fb:e8:5f:37:d9:ac:eb:0d:dc:44:d7:a8:43:
         e7:4a:0b:6e:cc:4f:39:18:cb:78:1b:23:c4:c1:1b:84:fb:93:
         cd:92:9e:68:a0:85:cb:b5:a8:c9:e3:9d:8e:58:1b:46:1b:86:
         6b:a0:84:92:9a:a1:74:f6:5a:83:8c:e0:1e:b0:4a:14:f6:d6:
         56:7e:20:4b:7e:ab:eb:a4:68:da:41:4a:3b:fd:45:02:4b:c4:
         c8:2c:32:37:90:3c:f2:70:5f:cd:f9:40:8c:84:ba:10:25:a5:
         62:aa:a8:f7:ea:dc:d0:a0:36:89:ba:d4:b4:3b:2a:b8:e8:fd:
         e2:32:8d:8e:22:44:04:6f:cb:b8:8b:8e:c7:f7:87:90:b0:80:
         38:4c:09:28:ab:eb:da:de:89:f7:12:69:71:94:8a:dc:02:5b:
         dd:78:ca:b1:ac:92:4b:60:c9:33:85:0d:ec:eb:02:fc:4d:02:
         8b:ff:6e:75:9f:c3:36:45:04:77:38:15:8d:81:2e:da:fd:5f:
         93:06:68:a6:51:9a:48:cb:d6:6a:aa:6d:14:b0:16:23:52:6c:
         21:17:74:d5:e1:ec:b0:1c:ab:38:41:15:6a:7e:33:fa:7b:5f:
         1b:20:b3:1a:eb:26:4b:9f:a8:5e:f0:55:6c:21:0f:df:cf:fb:
         9e:b9:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:30 2026 by rpki-client