Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa
File:                     FE4992F25C3411EBA2B9004DC4F9AE02.roa (raw, json)
Hash identifier:          EN8q993u/I+OFHTpXAFxQCqKl4EeURZvhGRKrkcDFt8=
Subject key identifier:   F2:99:42:EB:7C:EE:A8:F2:D4:21:E7:E7:95:7A:DF:8C:52:A5:AE:D3
Certificate issuer:       /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Certificate serial:       07D4
Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 22:41:41 +0000
ROA not before:           Wed 30 Sep 2026 22:41:41 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     131292
IP address blocks:        103.68.208.0/22 maxlen: 24
                          2405:e680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
                          rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
        Validity
            Not Before: Sep 30 22:41:41 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abd9025-b107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:16:40:12:7e:3c:7d:a8:34:15:da:30:40:
                    04:43:2c:96:b1:d6:a9:04:76:d7:88:b4:2a:49:ce:
                    8f:99:3c:a0:4f:c4:7d:d2:5a:a2:f2:26:4f:27:58:
                    a5:5d:2a:09:12:3f:18:de:c9:50:6f:79:f0:09:be:
                    e4:0b:6a:67:59:0d:b2:37:52:18:29:62:b1:9e:bf:
                    f8:6d:92:69:be:62:9c:f7:34:93:f4:e8:40:73:c8:
                    0d:19:ea:6d:a7:76:d7:83:d0:55:59:c5:89:35:84:
                    92:5e:e6:a0:ca:41:8c:36:e3:58:89:28:25:6f:3b:
                    be:6b:0e:33:45:8f:b3:b8:7e:07:0c:e2:ac:fa:be:
                    55:98:26:93:f4:e1:bc:48:cf:ac:b7:0c:ef:db:b4:
                    07:1b:94:b5:a4:ed:3e:d5:5b:4d:96:52:90:c2:26:
                    03:95:d7:fa:8e:35:18:33:fa:16:aa:d6:15:23:29:
                    13:2d:19:99:44:96:e2:57:53:37:1d:a5:6b:b1:48:
                    c9:a6:0b:96:30:4c:df:8d:3f:f8:5c:5b:04:25:aa:
                    bf:cb:40:82:81:90:b1:98:70:5b:15:fd:fa:ef:4b:
                    4f:0b:88:aa:bb:58:29:59:88:1f:11:fc:f2:a0:9a:
                    1f:3c:3f:84:ce:5c:50:20:16:79:82:14:7e:56:d2:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:99:42:EB:7C:EE:A8:F2:D4:21:E7:E7:95:7A:DF:8C:52:A5:AE:D3
            X509v3 Authority Key Identifier:
                keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/FE4992F25C3411EBA2B9004DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.208.0/22
                IPv6:
                  2405:e680::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:2f:3f:f3:1b:7f:b3:aa:2e:ec:e9:e8:b1:1a:d2:4d:99:
         4d:b5:b5:f6:c8:24:fb:34:ae:da:03:ea:04:ab:6a:b8:eb:07:
         be:4a:b9:8c:74:4c:0e:08:4d:49:de:76:36:d8:b6:cb:75:ea:
         5b:f5:ef:f7:e2:8c:fc:1e:3f:94:42:2d:86:8e:d2:46:a1:45:
         18:6a:ed:c4:4d:be:8e:e6:d4:fc:d5:5f:ad:52:e5:01:8e:be:
         1e:04:03:bf:cb:6d:6f:51:16:0f:32:b0:d1:f6:0b:f8:18:b4:
         28:2c:1f:57:1e:54:a8:e7:c4:a7:5a:e8:eb:88:cf:e2:89:ec:
         1d:11:f4:45:70:1f:ab:1b:7a:26:4f:1b:d0:28:eb:b2:60:c7:
         19:49:31:6a:23:ad:30:7d:33:7d:69:70:32:8e:f6:01:d4:e1:
         5b:06:e6:5d:6f:ce:18:b8:97:68:43:d9:aa:55:48:16:35:62:
         63:e8:48:61:cd:4a:01:f4:59:a0:ab:29:a4:d0:61:96:e5:34:
         1c:c8:4d:f9:1c:15:4c:47:24:97:35:34:ca:14:5c:73:8f:f2:
         57:53:d5:66:b8:2c:5b:58:e7:b0:53:ea:81:b9:4c:63:04:e6:
         39:b8:ce:a4:b1:2a:56:d1:70:38:be:8f:22:52:4f:21:d3:c0:
         b1:96:04:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:49:43 2026 by rpki-client