Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/FA6E449673E611F1867DB2D08DA30FBC.roa
File:                     FA6E449673E611F1867DB2D08DA30FBC.roa (raw, json)
Hash identifier:          +tW7tHejIYKoYKqOq2smvtzDYp77mmrOMwvb3pDQW94=
Subject key identifier:   63:5D:AA:A0:B3:87:34:7B:3D:79:83:02:33:DF:90:94:B2:D8:BD:8E
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0D24
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/FA6E449673E611F1867DB2D08DA30FBC.roa
Signing time:             Sun 04 Oct 2026 20:38:58 +0000
ROA not before:           Sun 04 Oct 2026 20:38:58 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     147302
IP address blocks:        103.11.61.0/24 maxlen: 24
                          103.11.62.0/24 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.143.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3364 (0xd24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Oct  4 20:38:58 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac2b962-795d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:d7:16:a6:a8:8c:91:d5:8d:ac:8d:88:cf:
                    83:b3:84:af:f7:89:91:46:30:4a:af:b3:da:d5:1d:
                    d6:f0:3e:9d:74:ca:b5:54:d4:e3:65:4c:04:3c:9f:
                    21:16:a0:3e:41:4b:94:e4:d1:2f:e4:7e:72:ba:aa:
                    86:fb:ae:c1:ea:66:1a:ea:28:ce:d7:97:0c:11:2d:
                    e9:ea:99:dd:10:e7:81:91:8f:38:67:c4:f8:fa:35:
                    4a:e1:0b:33:59:e3:29:fa:67:11:2f:d0:a0:e1:58:
                    99:de:ae:88:59:fe:9b:39:6e:d7:fb:39:8f:af:d4:
                    ee:70:29:d2:0d:c8:4c:7b:4f:93:5c:96:27:9c:3b:
                    89:3a:3b:f7:a2:70:e3:56:6f:05:f8:91:4e:2b:c7:
                    35:78:2e:3d:56:95:55:dd:0e:7c:24:41:66:8b:88:
                    1e:4c:f8:82:ef:d3:b2:a2:e0:80:e0:40:10:ef:0f:
                    8f:c6:9f:3c:16:7d:b8:95:c6:d7:44:f9:5e:c3:25:
                    08:46:91:0a:3e:87:53:2b:f8:54:a9:dc:4d:68:03:
                    06:02:eb:2a:a1:c4:84:1f:93:3e:c0:16:4e:56:a8:
                    68:e4:ef:5a:61:5c:8b:45:ca:9c:03:90:99:3c:c4:
                    48:54:ff:6c:c8:b5:7b:3c:02:5b:50:20:32:b4:26:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5D:AA:A0:B3:87:34:7B:3D:79:83:02:33:DF:90:94:B2:D8:BD:8E
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/FA6E449673E611F1867DB2D08DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.61.0-103.11.63.255
                  180.178.142.0/23
                  180.178.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:af:2b:8d:97:47:45:40:b6:2d:e1:dc:5b:01:7f:96:e8:16:
         b8:d6:b1:fa:16:e1:3f:28:93:c7:43:9d:e5:86:64:76:f1:66:
         08:75:67:39:11:22:86:f6:b7:b9:96:9c:c3:bb:7a:28:66:bd:
         54:82:0c:ee:ee:b3:29:c9:5f:04:14:66:2a:d3:20:fc:e8:0c:
         2a:09:4b:14:f9:6d:f2:e2:51:79:18:8a:d2:d5:32:a0:c1:a5:
         5b:d4:95:62:88:2b:f5:c0:43:b1:20:c0:74:61:b2:bd:b4:a7:
         29:9f:27:55:81:30:c7:23:80:bd:3b:4e:a9:55:9c:99:ed:68:
         d0:b0:4f:e7:d6:77:23:01:27:24:d0:f6:64:7f:bc:0f:12:b3:
         61:a6:42:18:3f:49:18:ea:51:75:e3:4b:c2:96:e7:a6:51:6c:
         15:97:b1:6a:8e:6e:c5:1f:71:d4:1c:00:c6:82:dc:74:df:7d:
         56:94:01:47:65:46:7a:c3:01:1d:93:99:a5:80:03:5f:85:8e:
         c4:04:55:d0:25:5c:5b:41:0a:dc:48:29:1f:51:9d:43:ee:74:
         82:57:ff:07:a5:a5:5f:42:46:4d:85:0d:de:21:1d:e2:49:9b:
         64:99:a3:16:4f:f9:25:db:d5:45:0c:80:b7:46:18:bd:71:b2:
         c3:d8:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:19:44 2026 by rpki-client