Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/FBA5FAE054CC11F1A93963017CEE528E.roa
File:                     FBA5FAE054CC11F1A93963017CEE528E.roa (raw, json)
Hash identifier:          LSB81+UFJQ6LJUHR/BZhgdozr5GGPC657iE3uAxRI3Y=
Subject key identifier:   97:03:2E:88:3F:9A:21:5E:F9:F4:FB:90:D5:EC:EA:DE:03:1F:ED:07
Certificate issuer:       /CN=A91FE179/serialNumber=3A7AF4AE1CD1D0A87C1181BCB0F02E148879B6BF
Certificate serial:       2C
Authority key identifier: 3A:7A:F4:AE:1C:D1:D0:A8:7C:11:81:BC:B0:F0:2E:14:88:79:B6:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/FBA5FAE054CC11F1A93963017CEE528E.roa
Signing time:             Thu 30 Jul 2026 20:39:33 +0000
ROA not before:           Thu 30 Jul 2026 20:39:33 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140094
IP address blocks:        103.148.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE179, serialNumber=3A7AF4AE1CD1D0A87C1181BCB0F02E148879B6BF
        Validity
            Not Before: Jul 30 20:39:33 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a6bb685-f3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:1d:69:59:49:24:ad:0c:f2:ed:1c:33:b5:
                    0e:29:9b:6e:ab:5b:24:41:f4:16:35:72:c9:24:3d:
                    67:e9:07:6c:3e:ef:f6:ef:f0:cf:dc:bd:a7:22:26:
                    60:40:88:cd:78:35:dd:bf:51:bc:44:3b:94:6a:cc:
                    e4:b7:1e:26:58:94:6a:05:f7:64:38:9c:d0:17:d6:
                    e5:5c:13:1b:06:2f:19:3c:67:04:d9:16:04:6c:2b:
                    02:44:e3:7f:ab:20:5e:d7:93:9b:c4:c3:3e:4a:d7:
                    cc:bb:93:49:3e:a8:2c:8d:72:13:0d:05:d1:6d:ea:
                    a8:6e:7b:86:0d:5f:9a:05:20:2d:57:b6:81:67:03:
                    d3:95:ce:70:b8:ec:4d:ac:33:63:11:21:f9:73:91:
                    26:3c:d8:ec:91:61:97:25:f8:35:27:c0:c6:15:e2:
                    bd:0e:ae:26:9e:ee:25:4e:54:2d:ca:29:7c:22:95:
                    73:ea:0e:2c:62:0e:7a:c4:7b:c2:9b:2f:4e:b3:6e:
                    f7:47:d1:1e:65:d2:7a:c9:c5:6a:d3:72:5c:45:f1:
                    b7:52:d6:1e:c1:8c:66:c7:bc:74:c8:39:53:5c:03:
                    3d:c7:ed:83:b5:9c:a0:55:5b:75:59:b1:9f:45:4c:
                    12:9b:30:0d:ca:0b:23:63:5a:69:b2:5b:d0:f9:a3:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:03:2E:88:3F:9A:21:5E:F9:F4:FB:90:D5:EC:EA:DE:03:1F:ED:07
            X509v3 Authority Key Identifier:
                keyid:3A:7A:F4:AE:1C:D1:D0:A8:7C:11:81:BC:B0:F0:2E:14:88:79:B6:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Onr0rhzR0Kh8EYG8sPAuFIh5tr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE179/5C2004E09FDB11EA8462BD5DC4F9AE02/FBA5FAE054CC11F1A93963017CEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:8a:c6:ef:74:c7:0c:bb:43:ac:e9:3a:15:e1:d2:ab:f5:
         e6:c6:8c:4a:0f:1d:b3:76:5f:e2:80:fa:9d:e0:05:29:95:1f:
         36:aa:09:8b:43:89:2a:b1:2e:d6:94:be:50:be:79:60:d2:1a:
         91:fb:7e:34:69:d4:01:93:48:2f:7b:51:06:4d:db:67:29:ad:
         70:a9:c2:1c:5b:f2:4f:a4:c0:f4:44:d7:32:01:e9:0d:7c:84:
         df:b5:e2:b8:28:51:48:09:2c:ec:c3:40:13:8d:3c:a0:8d:a8:
         27:e1:e5:02:22:be:c3:cf:02:63:84:62:e1:fa:b8:e5:82:82:
         41:c6:82:c6:42:ca:d9:5a:f6:c0:fe:db:b0:b0:80:05:59:87:
         a1:ee:03:8e:76:aa:8e:61:be:dc:4e:de:7b:36:c3:98:70:b4:
         1f:0c:cd:6f:58:66:68:95:8a:92:ff:64:bf:77:fd:08:1f:f8:
         bf:4b:ec:c8:76:73:7e:4a:54:10:56:cc:52:78:ef:e8:76:26:
         48:50:03:2e:a3:8a:ce:4f:09:63:34:38:5f:71:a7:a0:3c:94:
         26:98:40:87:af:ad:f1:4f:07:c0:23:f8:59:cf:4f:92:9d:f7:
         eb:d0:2d:4d:91:67:64:0e:5c:f0:dc:1c:69:7e:a3:1a:a7:a2:
         f0:7d:98:dd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RTE3OTExMC8GA1UEBRMoM0E3QUY0QUUxQ0QxRDBBODdDMTE4MUJDQjBGMDJFMTQ4
ODc5QjZCRjAeFw0yNjA3MzAyMDM5MzNaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNmJiNjg1LWYzYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYcx1pWUkkrQzy7RwztQ4pm26rWyRB9BY1cskkPWfpB2w+7/bv8M/cvaciJmBA
iM14Nd2/UbxEO5RqzOS3HiZYlGoF92Q4nNAX1uVcExsGLxk8ZwTZFgRsKwJE43+r
IF7Xk5vEwz5K18y7k0k+qCyNchMNBdFt6qhue4YNX5oFIC1XtoFnA9OVznC47E2s
M2MRIflzkSY82OyRYZcl+DUnwMYV4r0Oriae7iVOVC3KKXwilXPqDixiDnrEe8Kb
L06zbvdH0R5l0nrJxWrTclxF8bdS1h7BjGbHvHTIOVNcAz3H7YO1nKBVW3VZsZ9F
TBKbMA3KCyNjWmmyW9D5o+L3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUlwMuiD+a
IV759PuQ1ezq3gMf7QcwHwYDVR0jBBgwFoAUOnr0rhzR0Kh8EYG8sPAuFIh5tr8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFMTc5LzVDMjAwNEUwOUZE
QjExRUE4NDYyQkQ1REM0RjlBRTAyL09ucjByaHpSMEtoOEVZRzhzUEF1RkloNXRy
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT25yMHJoelIwS2g4RVlHOHNQQXVGSWg1dHI4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTE3OS81QzIwMDRFMDlGREIxMUVBODQ2MkJENURDNEY5QUUwMi9GQkE1RkFFMDU0
Q0MxMUYxQTkzOTYzMDE3Q0VFNTI4RS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnlG0wDQYJKoZIhvcNAQELBQADggEBAC+fisbvdMcMu0Os6ToV4dKr
9ebGjEoPHbN2X+KA+p3gBSmVHzaqCYtDiSqxLtaUvlC+eWDSGpH7fjRp1AGTSC97
UQZN22cprXCpwhxb8k+kwPRE1zIB6Q18hN+14rgoUUgJLOzDQBONPKCNqCfh5QIi
vsPPAmOEYuH6uOWCgkHGgsZCytla9sD+27CwgAVZh6HuA452qo5hvtxO3ns2w5hw
tB8MzW9YZmiVipL/ZL93/Qgf+L9L7Mh2c35KVBBWzFJ47+h2JkhQAy6jis5PCWM0
OF9xp6A8lCaYQIevrfFPB8Aj+FnPT5Kd9+vQLU2RZ2QOXPDcHGl+oxqnovB9mN0=
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:29 2026 by rpki-client