Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FDDFE12EC78C11EE911F1A30C4F9AE02.roa
File:                     FDDFE12EC78C11EE911F1A30C4F9AE02.roa (raw, json)
Hash identifier:          Vf1cU0OTqGXKVq5VdC76/TbtFkbF1mkfV7Z7Mpnnl3s=
Subject key identifier:   66:14:E8:A8:E2:CA:11:8A:56:A5:1F:32:BC:A0:16:CF:9C:B5:4A:29
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       0196
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FDDFE12EC78C11EE911F1A30C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:40:38 +0000
ROA not before:           Wed 23 Apr 2025 05:00:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        103.111.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: Apr 23 05:00:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59355-32be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:a7:26:4f:2e:31:e8:cd:df:36:8c:c3:08:
                    e8:fa:33:a8:cc:51:ae:57:15:4f:56:e4:8c:f1:6e:
                    5d:3d:ba:b7:a5:dd:77:00:cd:28:87:aa:ac:2d:c1:
                    96:44:ab:c3:d0:c7:95:82:50:81:a8:bf:54:99:87:
                    8b:f7:eb:f4:75:08:d3:de:36:6a:0c:8e:35:54:6f:
                    ee:de:3c:d4:f4:4e:0c:e6:76:b5:66:fe:3d:cd:07:
                    10:18:ae:2d:10:86:78:cf:5e:b6:ca:bc:47:9f:24:
                    12:0a:e1:9f:da:d3:81:20:35:f5:0a:de:eb:a8:38:
                    da:58:25:7a:32:f9:c5:5b:98:27:fc:15:e5:87:71:
                    14:36:a6:35:eb:37:e4:96:ef:43:b3:41:2b:3c:70:
                    04:d2:83:d0:bc:c4:d1:9d:4a:28:e7:da:92:70:ea:
                    f7:04:47:d2:a5:36:bc:c9:15:3b:2a:30:63:37:ec:
                    d4:fd:be:af:7a:f2:7f:38:a2:de:e7:1c:fb:53:39:
                    2f:98:50:12:31:f8:8f:ff:0a:d5:a7:7c:06:79:87:
                    8d:33:45:87:5a:af:90:ac:8c:91:a3:a9:b4:cf:7f:
                    67:64:43:50:0c:30:b3:95:ad:34:1c:a4:70:34:68:
                    a6:92:a3:7a:b5:77:3d:1a:88:0c:59:e5:b7:d5:ef:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:14:E8:A8:E2:CA:11:8A:56:A5:1F:32:BC:A0:16:CF:9C:B5:4A:29
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/FDDFE12EC78C11EE911F1A30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:15:3e:65:3a:59:e1:39:af:17:f8:cd:f1:c2:b1:eb:52:
         aa:86:58:f5:69:25:57:63:b9:2d:4d:89:49:05:89:59:a1:37:
         e6:55:61:3d:66:15:c1:0c:44:3b:b1:43:82:57:bd:77:68:39:
         3b:c8:8f:f1:f9:a6:4e:91:b0:06:b3:d1:1e:47:8a:93:fa:82:
         d9:c6:85:f4:c3:ea:7d:ec:64:fb:d5:4f:9a:12:15:98:60:6f:
         fe:05:98:61:f3:ef:01:78:f4:cd:63:f7:02:2c:ca:7c:fc:b0:
         a6:4b:1b:ea:1a:a4:11:11:62:56:e2:54:5c:36:df:81:a9:08:
         0f:59:48:e2:c5:18:85:8e:8a:b9:a4:24:49:31:8a:85:41:2d:
         dc:9a:7d:ab:73:95:65:b9:76:69:3a:2e:46:49:06:57:c6:ce:
         53:5e:30:6f:1f:cd:94:99:13:8b:49:38:d6:06:a6:0b:8c:a8:
         d0:da:d6:fa:3f:2a:2d:e4:f5:97:03:e5:65:d2:c9:4d:ba:cf:
         70:1f:b5:0f:42:af:df:d0:e9:e7:42:dc:4d:33:68:3a:64:b5:
         29:6d:55:e6:f7:40:40:02:4b:56:16:ee:96:87:7a:be:bd:bb:
         f5:a5:17:1a:fb:bf:be:0e:cb:dd:ce:02:a9:1b:4c:eb:ad:e6:
         ae:7e:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:16:15 2026 by rpki-client