Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/FBBECF1A694111F08D368069C4F9AE02.roa
File:                     FBBECF1A694111F08D368069C4F9AE02.roa (raw, json)
Hash identifier:          HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=
Subject key identifier:   D3:AB:FF:B2:A2:ED:93:D6:36:96:21:FF:7D:FA:15:79:71:C5:2F:F0
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       0598
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/FBBECF1A694111F08D368069C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:55:52 +0000
ROA not before:           Sat 04 Oct 2025 23:55:37 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     30081
IP address blocks:        103.73.222.0/24 maxlen: 24
                          103.73.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 22:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: Oct  4 23:55:37 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47da8-e022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:63:11:f0:74:e2:55:0f:ac:4a:16:f4:5c:
                    ab:c3:d2:b6:c2:20:0a:a6:2f:45:d3:95:3f:f5:1e:
                    0b:0a:70:b4:06:d8:31:3d:f2:d0:3a:61:51:26:b2:
                    29:99:45:36:aa:44:9d:21:a8:ed:4a:57:9b:72:08:
                    d0:b1:c0:52:bf:fe:c8:49:bb:36:82:48:41:e5:0d:
                    dd:8b:ef:06:65:53:98:fa:1b:8c:3e:13:d9:9e:2f:
                    5f:ae:85:b8:1c:04:30:f1:21:c0:2e:9a:0d:0d:b5:
                    1f:20:48:ba:a6:fa:f4:03:90:7a:dd:37:aa:ff:7e:
                    c0:18:f0:2c:0d:08:80:ba:e9:ce:fa:8a:94:0e:e6:
                    2a:c9:f2:54:af:bd:ef:36:1b:01:81:c3:b6:24:07:
                    9f:80:57:20:57:41:88:4c:07:45:d2:35:de:57:3d:
                    ab:78:2e:56:eb:92:3b:fa:61:88:e0:db:0b:28:7c:
                    9e:4e:77:9f:75:e2:6c:4b:2e:fe:13:07:ed:f9:6e:
                    ae:5e:34:78:b0:ea:0b:16:75:3c:cf:86:b1:41:0d:
                    1e:bf:b8:82:2b:22:87:6e:f6:84:ad:b1:be:37:e9:
                    5a:86:ce:fe:56:cd:b5:96:37:11:41:d3:4f:45:58:
                    f3:fa:0d:fe:4e:1e:e1:39:79:a3:18:b1:cd:32:46:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:FF:B2:A2:ED:93:D6:36:96:21:FF:7D:FA:15:79:71:C5:2F:F0
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/FBBECF1A694111F08D368069C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:82:43:2d:ea:1a:06:0c:3d:7d:f3:b1:89:d0:b5:d0:65:
         d8:1d:c1:42:ad:1a:16:7c:d8:14:50:51:88:17:16:cc:25:98:
         4e:f0:ac:a9:66:6f:87:4f:15:17:bb:65:82:e6:fb:a2:e1:d4:
         cf:9b:e3:10:b5:4e:ec:51:4b:80:a9:05:6e:22:3c:78:c9:53:
         67:80:e5:76:00:9f:5d:f6:8d:f1:8f:a8:58:25:1e:1d:4c:69:
         a9:f5:3c:3f:06:61:13:a0:2b:bf:78:da:6f:bb:d1:f3:ea:71:
         f5:a6:16:ad:ea:8c:1f:3a:65:dc:4d:9a:83:95:f1:2e:5f:26:
         a6:60:48:17:04:39:e7:f8:a9:fb:55:b7:ee:8a:c1:3b:13:02:
         d8:49:93:f4:fa:de:8d:44:50:82:8c:f5:15:d3:7a:02:42:b2:
         5f:7b:fa:d6:c8:c5:b1:f9:22:16:f9:34:71:d8:ad:0c:36:d6:
         29:0e:7e:d2:3e:ea:63:24:90:ee:3d:cd:03:41:fd:f7:d2:18:
         d5:1f:2c:a5:55:c2:e6:a5:d9:fb:2a:93:90:4c:68:4f:9a:c3:
         0d:13:5f:fb:bd:8e:6f:69:9e:01:3f:51:25:dc:98:ad:3d:c4:
         ff:e2:d0:25:68:4f:35:18:e3:70:64:12:8a:e6:50:b8:d4:a9:
         b8:60:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:32 2026 by rpki-client