Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa
File:                     FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (raw, json)
Hash identifier:          Cs3bVmbYBB0b2ZAeoSeXTm/ceUq6lP9LdgAJFfPHDiQ=
Subject key identifier:   74:AB:29:92:27:44:23:5B:ED:9A:3A:12:F6:23:F6:81:47:08:A2:B2
Certificate issuer:       /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
Certificate serial:       029A
Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa
Signing time:             Sat 01 Aug 2026 03:51:50 +0000
ROA not before:           Sat 01 Aug 2026 03:51:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     10225
IP address blocks:        103.187.190.0/23 maxlen: 23
                          103.187.190.0/24 maxlen: 24
                          103.187.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl
                          rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 01:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F
        Validity
            Not Before: Aug  1 03:51:50 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d6d56-2e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:3d:4e:6a:08:cb:d2:90:25:cf:74:af:10:
                    54:fc:26:79:f6:74:7d:bc:ce:f1:2b:17:72:9b:26:
                    e9:ae:22:76:65:12:b5:83:a5:a6:4e:6c:91:c1:13:
                    0e:37:7e:e4:6e:02:fe:04:66:cc:8e:1f:07:19:f8:
                    84:b7:b2:39:d6:ae:2c:3f:be:08:de:5c:66:91:01:
                    ff:77:eb:33:76:cc:62:11:b5:31:f1:be:78:15:14:
                    51:ac:2b:18:9d:64:5b:7c:a8:da:09:0e:10:e2:9c:
                    5c:06:46:a6:b2:02:d7:f9:79:71:4b:bb:1e:d0:74:
                    e8:b9:09:23:00:53:88:97:86:46:dc:05:4d:a1:b0:
                    12:6a:4f:5e:f5:74:82:2d:33:db:69:ca:ad:e7:aa:
                    9d:86:6b:a4:46:42:cb:ad:f9:68:ab:0b:92:12:b2:
                    06:db:89:de:5b:2a:4b:9a:49:66:97:5e:b5:ca:19:
                    fc:f0:33:e8:9c:93:c3:d3:e5:f0:c7:85:cb:77:8b:
                    0f:24:2a:86:2d:9f:90:67:67:e6:a2:4d:0a:cd:66:
                    b2:e3:e9:48:79:91:9b:3c:6a:c7:f4:8a:2b:34:62:
                    4e:ea:32:79:c5:33:b1:91:32:c7:bf:46:4d:75:ec:
                    c5:2e:95:a1:d0:f1:4f:c4:76:b5:8c:de:18:3a:2c:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:29:92:27:44:23:5B:ED:9A:3A:12:F6:23:F6:81:47:08:A2:B2
            X509v3 Authority Key Identifier:
                keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:d0:ad:88:5c:1b:97:93:21:c7:20:b8:19:9f:1c:92:be:
         ca:dc:0e:05:5f:43:fc:c2:dc:75:69:6d:d1:08:a9:5f:b9:9e:
         28:18:bc:4a:21:e7:a3:52:ad:eb:f8:1f:88:3d:01:e7:eb:ce:
         63:4e:23:fd:94:8f:9b:7d:40:b7:42:8e:b1:fc:1c:36:01:98:
         cf:61:12:7c:5c:52:e7:89:7c:11:64:1f:6d:0f:e6:74:b1:8a:
         68:cf:9e:e9:6d:2e:1b:80:68:9a:a4:63:34:ab:bf:90:c2:b6:
         ce:b5:f2:45:e9:6c:eb:e7:7a:3c:6a:ba:40:a1:af:60:37:83:
         df:7d:9f:b9:08:22:17:45:19:c2:8c:1a:1e:46:1a:13:fd:cc:
         78:2e:23:a3:70:74:08:ce:53:49:3a:56:ea:65:12:a6:da:a2:
         35:64:21:4f:76:a3:fc:bf:34:65:af:35:5f:b1:84:b6:15:c7:
         17:99:96:c8:c3:cb:7c:08:cb:19:36:6c:34:6e:4e:c9:16:94:
         ca:32:68:57:84:34:26:fb:8b:56:3d:f6:4f:ea:5b:65:2b:2e:
         1c:6b:8e:a7:c0:8f:14:54:35:bd:90:5e:ae:8d:db:29:0d:9b:
         4c:a1:a2:54:a0:92:bc:47:07:eb:c6:ca:09:64:e0:88:42:ec:
         43:d6:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:43 2026 by rpki-client