Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
File:                     FC03153ADBDD11F0AA14A9C858641951.roa (raw, json)
Hash identifier:          9I8gYcek6i+TwMyMT+xhZvoq2H+cOAT/HIwjfSJImos=
Subject key identifier:   8F:10:BB:B0:5A:CD:81:82:D6:A5:5E:DA:4E:B6:21:E3:52:0B:EC:28
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       060B
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
Signing time:             Fri 29 May 2026 08:17:40 +0000
ROA not before:           Fri 29 May 2026 08:17:40 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138926
IP address blocks:        103.170.178.0/24 maxlen: 24
                          103.170.179.0/24 maxlen: 24
                          2402:41a0::/32 maxlen: 32
                          2402:41a0::/48 maxlen: 48
                          2402:41a0:1::/48 maxlen: 48
                          2402:41a0:2::/48 maxlen: 48
                          2402:41a0:3::/48 maxlen: 48
                          2402:41a0:4::/48 maxlen: 48
                          2402:41a0:5::/48 maxlen: 48
                          2402:41a0:6::/48 maxlen: 48
                          2402:41a0:9::/48 maxlen: 48
                          2402:41a0:32::/48 maxlen: 48
                          2402:41a0:170::/48 maxlen: 48
                          2402:41a0:171::/48 maxlen: 48
                          2402:41a0:172::/48 maxlen: 48
                          2402:41a0:173::/48 maxlen: 48
                          2402:41a0:174::/48 maxlen: 48
                          2402:41a0:175::/48 maxlen: 48
                          2402:41a0:176::/48 maxlen: 48
                          2402:41a0:177::/48 maxlen: 48
                          2402:41a0:178::/48 maxlen: 48
                          2402:41a0:179::/48 maxlen: 48
                          2402:41a0:2380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: May 29 08:17:40 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a194ba4-4774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:f8:7e:af:9e:d9:24:ec:b9:09:ab:fe:df:
                    57:c1:76:85:88:27:2d:2a:0a:bd:87:29:5b:9c:69:
                    a8:96:c4:ae:c5:a7:2f:e7:d1:89:5b:e8:e2:f0:60:
                    71:7b:ee:17:82:80:32:26:1e:44:f5:b6:18:5d:cc:
                    10:37:de:bd:c3:91:9c:34:15:00:f9:1f:3b:db:3b:
                    1a:69:a4:a5:b2:1d:dc:84:a6:7f:fd:3f:05:16:5b:
                    38:01:ff:12:9e:90:5d:95:75:1d:fa:0d:8b:93:82:
                    b3:cc:4c:06:86:cb:75:7b:6b:4d:74:79:ae:85:95:
                    3a:ec:3b:05:26:80:3c:29:a1:50:02:46:74:4f:d9:
                    85:b0:ae:ab:fd:80:3a:d2:c5:87:32:54:0d:71:c5:
                    2d:6d:a8:67:a7:32:86:93:19:f6:f5:5c:2d:b6:13:
                    c4:d0:bf:68:80:8b:63:48:09:3d:f9:80:81:9d:93:
                    ed:0c:e3:34:72:b8:1a:73:16:30:a8:3a:d8:06:5c:
                    ff:45:1f:42:70:13:8c:68:92:35:18:c9:d7:69:2f:
                    2f:0e:a6:42:ea:ee:a5:5f:94:60:cd:b6:b8:c2:9f:
                    17:cf:4b:a1:ce:38:5f:d9:70:47:20:e7:8f:51:52:
                    e9:b8:60:75:c3:7d:3c:ad:5e:1a:14:15:2a:40:e8:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:10:BB:B0:5A:CD:81:82:D6:A5:5E:DA:4E:B6:21:E3:52:0B:EC:28
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.178.0/23
                IPv6:
                  2402:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:57:26:24:6b:99:c3:1d:39:34:d8:cb:c8:7b:17:7d:64:
         15:82:ca:3f:dd:32:b6:57:6f:4c:41:15:89:00:9b:45:b4:78:
         99:ad:dc:9e:b8:be:87:c9:d2:44:6f:51:d2:d2:0c:39:3c:42:
         88:95:bf:24:cc:8b:88:54:cf:33:9e:8f:f8:44:59:4e:da:93:
         e3:66:21:56:2a:ae:8b:1a:99:fc:43:5b:7a:04:16:af:5b:18:
         c2:55:e0:73:2a:d1:75:61:6f:84:09:8f:e4:65:ff:5f:10:49:
         a7:d0:e6:36:23:f9:4f:5c:49:0a:c5:8c:cc:c0:c4:79:40:87:
         9c:61:b9:3e:af:73:78:e8:30:6c:74:24:56:9a:22:71:76:0b:
         6a:4a:c1:82:75:ea:f3:c8:0d:49:57:78:a9:44:59:83:74:b7:
         33:5a:c8:10:b0:b7:da:f8:b6:0e:63:b5:6d:a4:32:a8:79:17:
         1e:cf:ae:f6:7e:7d:af:2f:00:44:5e:56:b6:d8:13:89:07:b5:
         81:8e:0b:b4:48:6c:95:64:78:96:fb:51:17:82:6b:8a:82:25:
         73:ba:7c:b7:c1:24:ad:45:b5:eb:5e:d4:d4:46:67:14:16:24:
         f8:26:40:83:f2:79:5f:13:7f:a6:d8:a9:be:45:35:fb:4a:0c:
         a9:13:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 00:54:43 2026 by rpki-client