Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/FCC260F27E4E11F1A5DCE91883A30FBC.roa
File:                     FCC260F27E4E11F1A5DCE91883A30FBC.roa (raw, json)
Hash identifier:          MmxYdOOkZQTyHaIxgN0xwH3DQu/sa+W3m5592ZA0TDk=
Subject key identifier:   DF:FC:B5:0F:C9:36:71:34:86:DD:F4:29:F8:85:08:AF:86:19:5C:BD
Certificate issuer:       /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
Certificate serial:       1415
Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/FCC260F27E4E11F1A5DCE91883A30FBC.roa
Signing time:             Mon 13 Jul 2026 00:08:35 +0000
ROA not before:           Mon 13 Jul 2026 00:08:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137827
IP address blocks:        103.115.33.0/24 maxlen: 24
                          103.139.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5141 (0x1415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
        Validity
            Not Before: Jul 13 00:08:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a542c82-c32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:52:91:ed:8f:fa:28:5f:e5:b2:d3:d2:84:
                    ce:a5:9c:dd:34:76:d5:22:fd:45:c6:1c:e7:31:ea:
                    99:71:3f:90:aa:a3:9e:0b:9a:92:4d:94:70:a7:c6:
                    3e:d1:d0:0b:7e:a7:84:6e:44:1c:cf:43:9d:b9:00:
                    b5:9c:69:11:d5:9a:0d:10:a0:0c:3c:16:fe:61:ae:
                    2b:61:d8:b5:d4:ed:fd:53:e0:26:3e:6e:e5:dd:a1:
                    2d:4f:93:10:db:59:f9:70:80:cd:c9:a9:1e:5e:a6:
                    6a:43:b3:c3:28:92:f8:69:38:4a:45:71:37:21:32:
                    72:1b:40:c4:06:20:0d:36:59:5b:3c:f3:32:9e:86:
                    5d:46:13:bf:36:bd:68:8e:23:ea:f2:b1:1a:0f:30:
                    fc:6c:57:36:8d:32:3e:d3:c9:05:52:fe:68:f2:57:
                    91:17:21:77:45:8b:58:ef:00:39:3e:4d:a0:e6:92:
                    bc:b3:a7:7f:1f:fc:c9:dd:14:76:26:2e:1b:da:38:
                    36:4e:27:0c:fe:0a:4e:6d:6f:8b:90:48:1d:02:fe:
                    6b:25:c1:e1:b2:3a:1f:b6:0a:aa:2e:4f:e5:57:a3:
                    a8:1d:db:d5:64:ff:34:eb:65:32:05:cb:2a:3b:9a:
                    41:39:8e:af:c8:45:fc:c7:24:e0:e3:bf:57:44:9b:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FC:B5:0F:C9:36:71:34:86:DD:F4:29:F8:85:08:AF:86:19:5C:BD
            X509v3 Authority Key Identifier:
                keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/FCC260F27E4E11F1A5DCE91883A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.33.0/24
                  103.139.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:fd:01:c4:49:ec:d9:b1:2f:ac:e2:c8:ab:70:71:21:0a:
         42:ef:da:12:a9:03:d4:54:51:0a:3e:2e:50:9a:3c:f8:81:68:
         11:c0:74:7e:79:b8:1b:42:4d:39:c8:0c:11:75:c8:6d:93:09:
         84:19:ba:35:1e:7d:cd:3a:d2:73:5e:03:dd:50:dc:19:a2:d4:
         ff:11:71:7f:b4:f1:b6:ee:e9:6a:d4:b0:5b:d8:12:21:9e:b5:
         64:7a:f6:69:ed:5c:96:ab:21:6e:8f:1e:17:35:cd:b2:87:2b:
         92:63:8b:02:5a:a4:7f:1a:01:23:03:e1:5c:c6:71:43:10:4c:
         9d:e5:f6:ae:bc:d5:a5:6c:34:a5:7e:39:db:b1:f8:74:de:66:
         53:7a:62:0d:95:18:92:8a:60:70:48:47:c3:6b:9c:fc:8f:a8:
         3b:87:08:ed:7f:3a:da:cd:e1:a1:e8:53:e9:c1:76:e5:27:b0:
         a9:2f:38:41:16:81:6e:80:0e:d5:66:a4:15:5c:37:01:02:5f:
         b3:2a:ee:0f:01:90:08:92:fb:53:75:e3:4f:4a:d9:e1:f1:85:
         5d:b6:30:61:a5:ef:93:09:33:9d:a6:71:25:3d:1a:41:8f:e6:
         63:f8:e8:67:50:07:93:20:34:a0:66:bb:85:51:61:56:f3:d4:
         19:85:de:49
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4
ODRBRTY5QTIwHhcNMjYwNzEzMDAwODM1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU0MmM4Mi1jMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAixBSke2P+ihf5bLT0oTOpZzdNHbVIv1FxhznMeqZcT+QqqOeC5qSTZRwp8Y+
0dALfqeEbkQcz0OduQC1nGkR1ZoNEKAMPBb+Ya4rYdi11O39U+AmPm7l3aEtT5MQ
21n5cIDNyakeXqZqQ7PDKJL4aThKRXE3ITJyG0DEBiANNllbPPMynoZdRhO/Nr1o
jiPq8rEaDzD8bFc2jTI+08kFUv5o8leRFyF3RYtY7wA5Pk2g5pK8s6d/H/zJ3RR2
Ji4b2jg2TicM/gpObW+LkEgdAv5rJcHhsjoftgqqLk/lV6OoHdvVZP8062UyBcsq
O5pBOY6vyEX8xyTg479XRJsclQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN/8tQ/J
NnE0ht30KfiFCK+GGVy9MB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE
QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUZGRjAvNDRGRUJDOTJBREIyMTFFODlDOUI0NTUzQzRGOUFFMDIvRkNDMjYwRjI3
RTRFMTFGMUE1RENFOTE4ODNBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ3MhAwQAZ4tQMA0GCSqGSIb3DQEBCwUAA4IBAQBS+v0BxEns2bEv
rOLIq3BxIQpC79oSqQPUVFEKPi5Qmjz4gWgRwHR+ebgbQk05yAwRdchtkwmEGbo1
Hn3NOtJzXgPdUNwZotT/EXF/tPG27ulq1LBb2BIhnrVkevZp7VyWqyFujx4XNc2y
hyuSY4sCWqR/GgEjA+FcxnFDEEyd5fauvNWlbDSlfjnbsfh03mZTemINlRiSimBw
SEfDa5z8j6g7hwjtfzrazeGh6FPpwXblJ7CpLzhBFoFugA7VZqQVXDcBAl+zKu4P
AZAIkvtTdeNPStnh8YVdtjBhpe+TCTOdpnElPRpBj+Zj+OhnUAeTIDSgZruFUWFW
89QZhd5J
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:50 2026 by rpki-client