Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/FD8409A09C2611EC89DFBD46C4F9AE02.roa
File:                     FD8409A09C2611EC89DFBD46C4F9AE02.roa (raw, json)
Hash identifier:          JLSpD4WP21I45YnxCYPUZKiI0CXdyL9PtVi/LHX9mJA=
Subject key identifier:   F2:19:15:0D:1F:F7:A9:30:9E:AF:50:2D:AC:61:8B:98:CF:5E:9A:D7
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       048F
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/FD8409A09C2611EC89DFBD46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:48:49 +0000
ROA not before:           Thu 09 Oct 2025 00:25:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135525
IP address blocks:        103.155.50.0/24 maxlen: 24
                          103.155.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Oct  9 00:25:50 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a435b1-04f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:7d:b1:1f:50:a0:12:b2:7e:b8:4b:e4:78:
                    d5:c3:c2:58:2e:0f:74:9d:36:53:0e:ce:40:fb:ef:
                    bd:18:89:fa:2e:28:95:97:d9:6d:e6:b3:51:db:ac:
                    1c:d8:fb:51:bc:75:37:f9:9d:fc:cd:50:3d:0d:ce:
                    90:f7:1a:f6:6b:d0:1d:c6:3b:a3:8e:66:0c:13:27:
                    e7:7c:c9:09:0c:a9:5e:0e:c1:02:82:07:ab:e7:36:
                    15:4c:4d:84:a5:1d:86:7b:86:70:c7:dd:5f:fe:4b:
                    fe:16:2b:1c:75:44:50:9e:3f:3e:c8:c7:3f:29:c9:
                    ba:a9:72:89:a1:a5:31:50:3a:26:a4:fc:f5:7b:d7:
                    62:77:98:15:ec:e7:20:a3:ef:35:17:84:91:c3:1e:
                    d5:4d:ce:da:0c:3b:51:32:66:78:03:a4:a1:c8:68:
                    ea:52:b2:c2:c5:45:eb:fb:4b:78:e7:3c:3c:8a:4d:
                    59:ad:54:f1:9f:e3:ac:a8:fd:12:aa:0a:81:a9:e0:
                    31:bd:c3:84:23:bd:5e:d1:e5:46:e5:19:3d:ba:ee:
                    f2:07:f8:49:f3:15:f5:d5:e7:c3:19:b7:20:2d:8e:
                    15:14:f9:f0:08:6a:28:d6:be:97:20:89:cf:0c:00:
                    7d:d7:db:09:3d:c3:65:b6:09:2e:49:0e:a1:a5:60:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:19:15:0D:1F:F7:A9:30:9E:AF:50:2D:AC:61:8B:98:CF:5E:9A:D7
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/FD8409A09C2611EC89DFBD46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:69:e7:40:f5:a5:96:5a:25:b1:fa:f1:b0:cd:4c:27:b7:
         cd:70:91:43:ef:92:96:7d:4d:3b:f9:6c:2d:08:3f:1e:5d:70:
         c2:8d:9b:50:58:c1:66:0d:6c:ac:ce:56:de:34:fb:f1:bb:3e:
         79:99:4c:33:c3:6b:1d:fc:d7:95:75:df:90:9c:c4:2a:f3:31:
         37:30:2e:87:47:db:d9:66:0c:ba:c4:b1:9f:33:16:3f:c8:53:
         1d:ed:18:a8:82:db:4c:93:10:9e:84:bc:7a:6b:0e:57:ef:60:
         f9:5b:5c:a9:c6:1c:41:2c:cf:ed:0d:33:e9:75:2a:83:fa:e4:
         ab:59:f9:a1:71:de:bb:80:53:3b:d5:c3:b8:4b:c5:83:6f:ca:
         05:bb:77:2c:b1:0d:65:a7:44:4f:7c:6b:20:c3:8c:11:bd:70:
         be:d9:58:47:73:8c:1c:e8:b8:e8:74:f8:ae:1b:76:d5:ca:96:
         fa:11:19:2d:ee:5a:5b:b0:2b:74:f5:be:10:78:76:57:c7:8b:
         2e:6a:e8:1b:bf:f5:ec:b1:61:64:d6:be:84:ce:6d:50:91:f6:
         ca:1f:84:36:51:b9:00:d1:de:17:87:f1:91:d7:e8:a3:1d:84:
         5d:41:59:fc:36:19:75:23:a6:ec:f2:71:69:30:5c:ee:8e:d0:
         54:72:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:43 2026 by rpki-client