Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
File:                     FD5158C044C511F0ABA4E977C4F9AE02.roa (raw, json)
Hash identifier:          A3mprKP4/bzMlJDhCze5Spg/p0sS0GlpyT+kIwue5HU=
Subject key identifier:   BE:32:AE:F5:9D:A6:A4:F9:EB:9B:E6:F0:BE:78:7F:11:51:64:C6:E0
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       125D
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
Signing time:             Wed 26 Aug 2026 17:34:44 +0000
ROA not before:           Wed 26 Aug 2026 17:34:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     216047
IP address blocks:        103.140.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4701 (0x125d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug 26 17:34:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8f23b4-db5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:44:f8:58:52:10:84:de:d4:c2:58:2f:54:
                    c6:88:50:ae:32:59:13:a2:5a:06:01:9d:93:d4:04:
                    28:81:7c:89:c1:f6:67:86:73:d6:8f:76:b1:91:3c:
                    fa:a7:63:c1:e8:29:80:d1:da:b5:8e:0a:1f:33:cc:
                    27:29:30:04:33:c4:aa:40:3c:1a:90:da:03:27:74:
                    c7:9f:73:57:ec:14:cf:df:0c:4e:28:e9:d1:3e:17:
                    7f:59:6e:9b:df:a8:ca:e2:6d:57:2f:33:d5:f0:7c:
                    bb:bf:35:1a:26:bb:d8:a0:5e:70:b9:d5:33:ff:9a:
                    d9:3d:b4:13:0b:3d:2e:61:44:70:10:c8:20:5a:aa:
                    60:d5:55:37:1f:2e:d9:1d:9e:ea:f8:f0:2e:87:d3:
                    bd:4d:c0:d8:79:6f:c4:c7:64:03:d0:5f:2f:75:30:
                    9a:b4:50:4b:52:16:4c:a2:5b:d7:a9:f9:55:c9:71:
                    86:8a:57:bc:81:26:bb:29:18:ba:a5:7a:23:2f:2b:
                    81:55:be:4a:89:4c:13:4b:4d:c8:9d:53:c5:5a:c5:
                    67:58:d3:8a:54:9b:c3:0e:2d:10:e1:f3:75:46:8b:
                    b4:76:ef:2d:f1:83:4d:27:eb:fa:0a:b3:8c:93:4f:
                    76:72:96:5f:d4:a1:93:41:81:d3:80:79:83:58:c6:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:AE:F5:9D:A6:A4:F9:EB:9B:E6:F0:BE:78:7F:11:51:64:C6:E0
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ac:3f:96:a9:a2:52:65:33:13:e4:ae:d0:35:20:1e:84:8d:
         f0:fa:5a:b0:8b:9e:52:7e:e9:88:cb:f1:98:98:b3:fe:7f:9c:
         bd:3e:3a:80:86:80:e0:b3:80:13:94:e2:a5:40:71:a9:4a:be:
         45:7e:96:c6:5e:56:26:47:7d:f0:72:51:67:05:7b:89:83:04:
         5e:a7:ae:9c:33:b8:6a:60:81:a8:3e:cb:1d:f1:d8:26:dc:ea:
         d0:f9:cf:9c:24:fb:4d:22:15:57:c9:6c:ab:d4:d3:89:42:92:
         55:e2:37:e4:04:41:9e:ba:10:b3:ba:6a:bf:6b:52:33:2f:e0:
         a7:7e:68:2d:a3:be:d1:a0:c0:6e:80:91:d4:5c:a5:75:22:2f:
         26:80:d0:17:28:b5:71:4c:2a:c4:69:89:e9:1e:c4:74:72:fe:
         5b:1e:1d:e8:8b:32:3d:47:6f:fa:49:d2:37:30:44:88:67:cd:
         76:f1:43:d8:d1:10:22:46:72:13:7f:42:b9:00:80:28:3a:12:
         fe:db:c2:e8:1b:84:a1:39:58:8d:ca:b3:27:47:fd:90:e1:3b:
         d8:8a:cd:6f:f4:ef:7a:98:77:8c:7a:5a:e5:83:32:99:3c:12:
         d8:3e:99:af:75:dd:95:a6:37:13:a9:8d:ad:85:2b:3a:fc:98:
         9c:69:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:21 2026 by rpki-client