Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
File:                     FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (raw, json)
Hash identifier:          n9my7gYaCpWuzbXaXxWqsQDGyC1Mpa3OBEaOc5+xQk4=
Subject key identifier:   9F:5C:82:CE:E2:E3:9F:C5:A8:67:15:F4:DF:EB:D4:0D:B4:01:29:C3
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       35D5
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:40:51 +0000
ROA not before:           Fri 02 Oct 2026 15:40:51 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140955
IP address blocks:        103.136.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13781 (0x35d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: Oct  2 15:40:51 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abfd083-b3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:de:5c:71:e8:15:a6:b6:dc:8f:ff:dc:a7:
                    2c:e7:a4:3c:f4:38:c8:ba:20:52:ee:67:70:b2:db:
                    0f:60:cb:87:ee:0f:6a:ff:c9:ac:3e:a3:c1:26:b4:
                    55:e4:d1:7c:1b:11:12:21:fc:5e:b2:f2:f5:cf:1a:
                    57:d7:49:c8:fe:8a:a9:e0:27:16:0d:bc:8e:6f:22:
                    d6:c1:5b:87:12:1f:b6:a1:51:9e:40:11:ef:cf:99:
                    ea:dd:22:8b:d9:8a:8a:f7:af:37:90:37:00:f6:45:
                    39:f9:8a:8c:93:8e:11:8b:26:d3:4a:62:af:55:69:
                    17:25:57:06:c7:58:df:46:2a:a0:c2:8e:b3:03:70:
                    bb:af:97:d7:8c:3b:c2:69:cc:04:0a:13:48:da:4d:
                    a4:a4:87:a9:5c:d1:9e:73:e3:21:15:7f:88:3c:5e:
                    04:c1:e1:ea:5f:f1:04:28:aa:82:86:d9:69:32:63:
                    dd:86:22:31:36:bc:a9:99:f1:9c:95:60:a0:2c:44:
                    4f:a6:39:f3:16:e8:7b:2d:8d:76:4c:0f:7b:a2:d1:
                    33:46:f3:c6:db:b6:e7:d8:e1:36:5f:97:fa:69:25:
                    17:1e:66:36:6e:9d:70:ed:ad:b3:32:a4:e1:61:fc:
                    e7:88:ff:c5:38:f7:9a:59:a8:7e:78:e5:70:39:e6:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:82:CE:E2:E3:9F:C5:A8:67:15:F4:DF:EB:D4:0D:B4:01:29:C3
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:39:8e:71:90:2d:31:84:fa:1a:9a:e0:a9:a8:34:f9:e8:ff:
         9d:cf:9b:f4:84:3b:02:af:8f:bd:0c:18:8a:9b:f5:4d:4b:8e:
         c5:ab:70:93:fa:ae:41:3d:d6:60:0d:db:76:32:de:2d:a9:66:
         be:d7:c4:86:c5:ab:a0:b3:f9:2a:08:b1:d2:18:8e:91:19:4d:
         16:da:c5:5e:c0:05:f9:77:bb:8e:79:ca:f4:97:fa:b5:a0:c1:
         72:7f:61:f4:2c:7a:fd:9a:12:13:9c:3b:10:44:fe:3a:18:99:
         42:24:dc:60:a7:9b:2d:55:fa:e6:72:09:79:71:62:a5:0d:91:
         86:a8:e3:4d:62:04:99:49:8d:ba:6e:ee:92:b2:d7:32:d3:ef:
         a0:0c:3f:5a:e8:7f:03:29:51:b3:3d:3d:83:e7:36:79:e5:87:
         21:bb:0c:1b:fb:bf:59:21:59:cb:2e:6e:17:87:74:b9:cd:c4:
         b7:4c:e5:f3:2e:c4:c0:a5:03:ab:6c:71:28:75:03:94:53:c3:
         ed:f0:51:64:f0:5f:02:f6:06:18:04:2f:c9:69:f3:27:c6:17:
         bd:c8:8f:0e:9f:fe:fd:a6:74:1c:c7:ef:66:13:ad:72:8e:d9:
         ab:a7:c9:7a:a7:af:f6:06:23:5d:48:db:09:72:73:36:97:71:
         c2:06:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:55 2026 by rpki-client