Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/FCC951D6FB1211EDBFADE86AC4F9AE02.roa
File:                     FCC951D6FB1211EDBFADE86AC4F9AE02.roa (raw, json)
Hash identifier:          8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=
Subject key identifier:   93:47:CF:B3:1B:B1:49:BE:36:92:23:BC:41:82:41:3A:C8:61:13:B1
Certificate issuer:       /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
Certificate serial:       0A41
Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/FCC951D6FB1211EDBFADE86AC4F9AE02.roa
Signing time:             Fri 10 Jul 2026 20:21:35 +0000
ROA not before:           Fri 10 Jul 2026 20:21:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134204
IP address blocks:        103.138.122.0/24 maxlen: 24
                          103.138.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl
                          rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 19:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2
        Validity
            Not Before: Jul 10 20:21:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a51544e-28d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:34:a6:59:23:a8:bb:12:f8:43:f8:46:0b:
                    ce:15:73:c5:f8:ee:3d:3a:6d:6b:3f:0f:89:d7:00:
                    1f:68:cf:20:9e:52:c0:7d:d2:2d:2f:bc:47:82:34:
                    56:07:33:58:73:59:81:81:a2:dd:69:57:39:82:0c:
                    8f:35:8f:d3:50:53:0d:93:a2:fd:95:54:d2:21:fc:
                    d3:3a:ba:77:52:82:c4:34:d6:3e:fa:2a:cf:49:f8:
                    8c:d2:82:5f:7a:03:ea:5f:ec:e2:5c:51:e6:08:ca:
                    b4:9d:ff:1f:bb:17:26:ef:05:a0:bd:d5:f1:d0:d5:
                    55:b8:52:b3:c2:1b:fe:08:47:c1:02:f4:92:aa:c8:
                    f2:36:45:c7:83:c8:c1:14:32:03:22:9e:49:09:17:
                    62:ce:88:b9:3f:cd:c4:d6:ad:14:32:c4:4e:63:62:
                    bb:a6:9f:6b:56:7d:2a:cd:33:7b:d2:d8:dd:f2:cf:
                    5f:2f:3a:ad:7c:47:2f:31:6e:48:b4:e3:44:a9:5b:
                    45:39:eb:07:e2:1e:a4:10:3b:ba:8c:94:8f:c3:84:
                    18:db:67:69:c6:83:31:63:93:02:36:34:f1:45:71:
                    42:36:9c:9f:e1:96:fe:ce:6c:f5:40:c7:b6:96:81:
                    22:eb:aa:76:27:31:27:ff:a4:a8:e3:f0:79:5f:88:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:CF:B3:1B:B1:49:BE:36:92:23:BC:41:82:41:3A:C8:61:13:B1
            X509v3 Authority Key Identifier:
                keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/FCC951D6FB1211EDBFADE86AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:31:f4:92:24:ad:ca:cb:71:77:15:cb:24:98:45:b0:aa:bf:
         ce:97:42:0a:89:d1:82:60:bd:96:59:8e:6a:03:14:a4:70:5e:
         e0:19:12:42:ad:e4:c3:f3:7e:e6:89:42:bc:68:a4:ae:67:d5:
         07:ef:0f:6e:9e:71:6c:54:47:ad:48:31:e4:eb:f7:a0:d7:33:
         c5:00:14:ce:d2:e8:ac:1f:d7:b3:c8:12:bc:d8:bb:d5:4f:44:
         f7:a2:de:06:6e:f6:4b:c2:63:1a:44:f7:b1:11:ba:e3:42:1a:
         b4:37:10:cd:05:6d:fa:60:bb:6a:c5:44:1b:0f:e2:93:25:ca:
         79:3c:c0:1c:8f:80:a9:e3:9f:1e:82:68:ce:7c:09:24:85:f1:
         fb:18:3e:39:55:c6:3c:2e:20:14:25:a5:09:8a:e8:c2:99:d7:
         72:2e:3d:b0:9b:1b:70:58:56:cc:3a:ca:b0:4b:6e:db:25:8e:
         f7:a4:48:4c:01:64:d9:a1:3f:34:1c:f3:de:da:18:b1:00:4d:
         ed:a8:dd:a8:d7:ad:ed:70:0f:03:9b:32:f0:3f:ed:a4:92:1c:
         04:10:18:8f:de:c6:08:69:e4:69:97:71:2a:da:9c:0e:e9:d3:
         53:f9:5b:a2:b6:53:6c:42:d6:0a:cf:68:92:ca:0f:23:11:67:
         d0:00:dd:06
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2
NEUzNDA2RDIwHhcNMjYwNzEwMjAyMTM1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTUxNTQ0ZS0yOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApug0plkjqLsS+EP4RgvOFXPF+O49Om1rPw+J1wAfaM8gnlLAfdItL7xHgjRW
BzNYc1mBgaLdaVc5ggyPNY/TUFMNk6L9lVTSIfzTOrp3UoLENNY++irPSfiM0oJf
egPqX+ziXFHmCMq0nf8fuxcm7wWgvdXx0NVVuFKzwhv+CEfBAvSSqsjyNkXHg8jB
FDIDIp5JCRdizoi5P83E1q0UMsROY2K7pp9rVn0qzTN70tjd8s9fLzqtfEcvMW5I
tONEqVtFOesH4h6kEDu6jJSPw4QY22dpxoMxY5MCNjTxRXFCNpyf4Zb+zmz1QMe2
loEi66p2JzEn/6So4/B5X4ja3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJNHz7Mb
sUm+NpIjvEGCQTrIYROxMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5
RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvRkNDOTUxRDZG
QjEyMTFFREJGQURFODZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4p6MA0GCSqGSIb3DQEBCwUAA4IBAQA4MfSSJK3Ky3F3FcskmEWw
qr/Ol0IKidGCYL2WWY5qAxSkcF7gGRJCreTD837miUK8aKSuZ9UH7w9unnFsVEet
SDHk6/eg1zPFABTO0uisH9ezyBK82LvVT0T3ot4GbvZLwmMaRPexEbrjQhq0NxDN
BW36YLtqxUQbD+KTJcp5PMAcj4Cp458egmjOfAkkhfH7GD45VcY8LiAUJaUJiujC
mddyLj2wmxtwWFbMOsqwS27bJY73pEhMAWTZoT80HPPe2hixAE3tqN2o163tcA8D
mzLwP+2kkhwEEBiP3sYIaeRpl3Eq2pwO6dNT+VuitlNsQtYKz2iSyg8jEWfQAN0G
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:12:51 2026 by rpki-client