Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
File:                     FE76F7D8EC4A11EFA7845862C4F9AE02.roa (raw, json)
Hash identifier:          TevSgkhqCwdQE/FjTv8GRJVYEDbVAlVuBeFY3nUPvYU=
Subject key identifier:   FC:F0:71:A7:8C:F0:2E:5C:82:69:0C:99:B6:EC:6C:33:A9:C2:75:F2
Certificate issuer:       /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial:       05E7
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa
Signing time:             Thu 15 Oct 2026 18:14:26 +0000
ROA not before:           Thu 15 Oct 2026 18:14:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147179
IP address blocks:        103.174.44.0/24 maxlen: 24
                          103.174.45.0/24 maxlen: 24
                          2407:fa40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 23:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
        Validity
            Not Before: Oct 15 18:14:26 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ad11802-a35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:3a:a4:f0:c7:2a:c2:0c:c5:a9:0c:92:cd:
                    41:ff:6a:97:dd:00:fe:61:b9:13:23:d3:a7:06:f7:
                    86:8f:b1:01:2b:8f:36:bb:14:3f:f0:54:f0:fa:e7:
                    6b:0d:43:4d:f3:b8:b3:cb:ba:d3:c0:49:d1:2a:5c:
                    1f:61:e0:10:b4:22:eb:1b:61:3e:a6:76:24:48:81:
                    cd:79:2e:eb:eb:dd:f9:9f:fb:a2:31:2c:cb:e8:d3:
                    49:d0:b4:9f:f0:61:d4:91:68:16:1d:6f:d3:98:71:
                    03:11:40:0c:41:a1:b7:c9:6f:be:f2:57:b5:fb:94:
                    53:b9:dc:6d:65:ea:0d:fe:62:54:cb:a0:58:2f:d2:
                    71:82:30:d9:2e:57:ad:a8:2d:f2:63:ba:22:aa:a5:
                    16:2b:7a:6d:fc:97:ad:d6:9f:bb:e9:ca:79:5a:b3:
                    22:0a:55:55:32:cf:b8:79:54:e8:96:b2:93:a2:37:
                    e5:7b:09:c5:c2:ba:14:ac:18:1e:fb:36:78:bd:85:
                    52:19:1c:1c:d0:11:50:43:9e:1c:e2:89:01:d8:70:
                    0b:60:2f:1f:b3:93:1d:d2:54:f2:8a:ec:2f:40:34:
                    5f:71:ff:49:ba:29:59:a8:f8:f3:37:11:15:34:af:
                    6d:eb:d9:69:4f:3a:4d:2a:cd:70:32:4a:4d:48:0a:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F0:71:A7:8C:F0:2E:5C:82:69:0C:99:B6:EC:6C:33:A9:C2:75:F2
            X509v3 Authority Key Identifier:
                keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/FE76F7D8EC4A11EFA7845862C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.44.0/23
                IPv6:
                  2407:fa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:61:88:d8:1d:b2:8b:c4:75:5f:d0:b8:de:23:9a:1e:0a:70:
         43:86:f9:a1:45:b4:66:15:9f:18:ae:ff:e4:90:0c:a8:d7:ad:
         24:c0:4a:1a:80:98:17:ff:a4:64:f6:c5:8b:3d:d6:7c:99:f4:
         e7:0b:75:d7:45:cc:bf:95:72:4e:e4:3c:67:a0:a1:ef:d6:07:
         3b:f5:cf:24:e4:76:82:81:3f:32:14:24:82:55:ee:8f:0e:7e:
         d9:08:ac:f8:bc:39:e1:3a:59:4b:bc:42:d0:98:15:8d:87:ad:
         bc:47:d7:4f:9d:21:a0:4e:27:ad:57:35:dc:d0:7b:4b:89:cb:
         4b:a8:5b:fd:f3:a4:07:00:c0:0d:85:9f:f4:73:60:4a:52:84:
         78:a0:04:49:61:53:13:dd:88:8a:e2:75:1d:fc:81:d2:b0:86:
         12:c9:f3:41:49:12:bd:d1:92:f2:0f:f9:6e:10:5d:6c:30:5b:
         69:16:e8:74:8f:9e:a4:c6:fb:13:3e:48:7b:11:7c:f7:16:1f:
         b6:02:a5:6b:63:bc:8b:51:b2:18:26:8e:38:0d:e4:cc:87:08:
         0a:78:03:74:35:20:23:1e:30:7a:d9:4e:f9:9a:0b:21:f5:9c:
         db:0b:2c:cb:ba:8a:56:6b:46:1d:ea:65:ea:16:24:1c:91:eb:
         bf:ba:ae:c9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw
MkI4MkY3NkQwHhcNMjYxMDE1MTgxNDI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQxMTgwMi1hMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvOk6pPDHKsIMxakMks1B/2qX3QD+YbkTI9OnBveGj7EBK482uxQ/8FTw+udr
DUNN87izy7rTwEnRKlwfYeAQtCLrG2E+pnYkSIHNeS7r6935n/uiMSzL6NNJ0LSf
8GHUkWgWHW/TmHEDEUAMQaG3yW++8le1+5RTudxtZeoN/mJUy6BYL9JxgjDZLlet
qC3yY7oiqqUWK3pt/Jet1p+76cp5WrMiClVVMs+4eVTolrKTojflewnFwroUrBge
+zZ4vYVSGRwc0BFQQ54c4okB2HALYC8fs5Md0lTyiuwvQDRfcf9JuilZqPjzNxEV
NK9t69lpTzpNKs1wMkpNSAo4MQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPzwcaeM
8C5cgmkMmbbsbDOpwnXyMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy
MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTVEMEMvODkxQjRFQ0EzMjM2MTFFQzg5ODM4NzU2QzRGOUFFMDIvRkU3NkY3RDhF
QzRBMTFFRkE3ODQ1ODYyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ64sMA0EAgACMAcDBQAkB/pAMA0GCSqGSIb3DQEBCwUAA4IBAQBx
YYjYHbKLxHVf0LjeI5oeCnBDhvmhRbRmFZ8Yrv/kkAyo160kwEoagJgX/6Rk9sWL
PdZ8mfTnC3XXRcy/lXJO5DxnoKHv1gc79c8k5HaCgT8yFCSCVe6PDn7ZCKz4vDnh
OllLvELQmBWNh628R9dPnSGgTietVzXc0HtLictLqFv986QHAMANhZ/0c2BKUoR4
oARJYVMT3YiK4nUd/IHSsIYSyfNBSRK90ZLyD/luEF1sMFtpFuh0j56kxvsTPkh7
EXz3Fh+2AqVrY7yLUbIYJo44DeTMhwgKeAN0NSAjHjB62U75mgsh9ZzbCyzLuopW
a0Yd6mXqFiQckeu/uq7J
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:21:49 2026 by rpki-client