Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FCF704124F7611F1B9EFA95FCB833773.roa
File:                     FCF704124F7611F1B9EFA95FCB833773.roa (raw, json)
Hash identifier:          zSKTJzBxZvxoHybivTfpfW3FS6vri5wDDwmf9GXXE+U=
Subject key identifier:   09:E3:6E:C8:04:F8:9E:CC:31:D0:99:9F:BE:76:27:FE:CB:AF:69:36
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E55
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FCF704124F7611F1B9EFA95FCB833773.roa
Signing time:             Fri 02 Oct 2026 15:29:13 +0000
ROA not before:           Fri 02 Oct 2026 15:29:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150826
IP address blocks:        103.109.186.0/23 maxlen: 24
                          103.112.210.0/23 maxlen: 24
                          2400:e8e0::/48 maxlen: 48
                          2401:10e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28245 (0x6e55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:29:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdc8-affa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:d1:50:c5:43:af:92:b4:27:b5:a5:8c:5a:
                    b2:7e:b5:00:a7:3b:44:88:37:a8:df:62:c7:18:aa:
                    44:e8:84:9f:3c:e1:2e:8f:15:80:58:ca:84:ef:f5:
                    98:b6:60:c8:8c:9e:42:ac:a2:12:af:0f:98:07:cc:
                    36:8b:f7:85:0e:41:e0:ba:99:f6:26:ec:53:14:6e:
                    e7:43:10:45:06:26:99:9b:71:52:38:a4:81:6d:cd:
                    97:3a:d1:a5:4b:42:13:7d:dc:a9:6a:84:ef:bd:1a:
                    e5:4b:f8:c4:d5:c7:60:ee:1a:c0:69:b2:53:3e:e2:
                    82:f0:0f:6e:8a:c1:58:85:d2:65:1c:82:fe:65:bb:
                    c6:d2:ec:f4:54:af:26:af:d2:d2:7b:c6:16:48:b2:
                    c9:6c:ef:3c:b4:22:a7:f7:c0:52:6d:4a:d9:24:ae:
                    44:5f:3e:d6:fd:b8:f5:3d:3e:1b:54:8f:c1:dc:45:
                    92:dd:12:86:f0:05:31:35:ba:fd:79:55:76:fd:ce:
                    82:c4:23:6b:1a:ec:4e:59:03:ec:a1:21:55:b0:c4:
                    57:c2:95:90:5b:5e:38:8a:f2:af:c7:fe:37:09:5f:
                    f2:8e:48:24:fc:c7:54:2f:66:53:31:69:fe:82:48:
                    a3:44:6e:f8:27:e0:45:d2:61:ce:9f:ef:9a:ee:ac:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:6E:C8:04:F8:9E:CC:31:D0:99:9F:BE:76:27:FE:CB:AF:69:36
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FCF704124F7611F1B9EFA95FCB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.186.0/23
                  103.112.210.0/23
                IPv6:
                  2400:e8e0::/48
                  2401:10e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:cf:82:aa:8f:bb:a6:99:17:1f:c6:eb:4e:d0:c8:d0:16:
         73:45:84:18:99:e2:93:72:25:55:1c:18:26:dd:e6:cd:2a:81:
         0b:8e:c1:06:e8:0b:d8:45:c7:f5:e1:6e:0e:29:3a:5c:40:97:
         39:55:74:57:3e:d2:54:70:cf:4f:ce:43:3f:e4:b1:4f:af:d8:
         30:05:12:ff:50:85:a9:a1:1b:5f:7e:35:34:43:c3:66:d2:67:
         5c:1e:e4:3c:02:3c:e7:79:97:e5:30:7b:da:6d:38:7a:d9:1e:
         87:45:4c:cb:21:7a:91:53:dd:14:98:d2:b4:3d:4b:9d:a7:52:
         1f:9a:9f:38:cb:85:6d:19:92:6a:e2:1b:d9:85:02:ca:d0:29:
         b9:23:7d:bf:8c:67:b4:cc:b9:7e:8e:4f:88:33:3d:24:29:f2:
         bd:92:2b:94:9f:5f:e3:35:09:ba:0e:fd:fe:99:27:58:f7:14:
         7a:4c:78:6c:74:29:ae:e8:84:3f:3d:45:b2:ac:9e:34:d1:cc:
         d9:37:e0:6f:78:cb:dc:0d:09:4c:89:d7:58:a7:cd:51:72:25:
         04:2f:46:c8:0f:85:f6:20:16:3c:4e:00:7d:ec:35:24:c8:b2:
         be:f6:67:23:cb:d7:d3:17:ff:df:0e:f0:d7:4c:6e:ce:60:22:
         01:75:53:97
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICblUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyOTEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2RjOC1hZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoq7RUMVDr5K0J7WljFqyfrUApztEiDeo32LHGKpE6ISfPOEujxWAWMqE7/WY
tmDIjJ5CrKISrw+YB8w2i/eFDkHgupn2JuxTFG7nQxBFBiaZm3FSOKSBbc2XOtGl
S0ITfdypaoTvvRrlS/jE1cdg7hrAabJTPuKC8A9uisFYhdJlHIL+ZbvG0uz0VK8m
r9LSe8YWSLLJbO88tCKn98BSbUrZJK5EXz7W/bj1PT4bVI/B3EWS3RKG8AUxNbr9
eVV2/c6CxCNrGuxOWQPsoSFVsMRXwpWQW144ivKvx/43CV/yjkgk/MdUL2ZTMWn+
gkijRG74J+BF0mHOn++a7qwduwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFAnjbsgE
+J7MMdCZn752J/7Lr2k2MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkNGNzA0MTI0
Rjc2MTFGMUI5RUZBOTVGQ0I4MzM3NzMucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS
BAIAATAMAwQBZ226AwQBZ3DSMBgEAgACMBIDBwAkAOjgAAADBwAkARDgAAAwDQYJ
KoZIhvcNAQELBQADggEBAFgOz4Kqj7ummRcfxutO0MjQFnNFhBiZ4pNyJVUcGCbd
5s0qgQuOwQboC9hFx/Xhbg4pOlxAlzlVdFc+0lRwz0/OQz/ksU+v2DAFEv9Qhamh
G19+NTRDw2bSZ1we5DwCPOd5l+Uwe9ptOHrZHodFTMshepFT3RSY0rQ9S52nUh+a
nzjLhW0ZkmriG9mFAsrQKbkjfb+MZ7TMuX6OT4gzPSQp8r2SK5SfX+M1CboO/f6Z
J1j3FHpMeGx0Ka7ohD89RbKsnjTRzNk34G94y9wNCUyJ11inzVFyJQQvRsgPhfYg
FjxOAH3sNSTIsr72ZyPL19MX/98O8NdMbs5gIgF1U5c=
-----END CERTIFICATE-----
Generated at Sun Oct 25 17:07:15 2026 by rpki-client