Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/FBD6D2BE158711E9881C4D1FC4F9AE02.roa
File:                     FBD6D2BE158711E9881C4D1FC4F9AE02.roa (raw, json)
Hash identifier:          STeyXyMTSYyvRcahtnut8o6/l8sNSI++3Wnn1BDQDwg=
Subject key identifier:   46:78:89:AC:66:23:3C:09:D2:0F:BB:B6:7E:8B:44:21:79:CF:97:DF
Certificate issuer:       /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial:       11A0
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/FBD6D2BE158711E9881C4D1FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:16:04 +0000
ROA not before:           Tue 26 Aug 2025 17:26:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137994
IP address blocks:        103.97.87.0/24 maxlen: 24
                          103.119.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
                          rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4512 (0x11a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
        Validity
            Not Before: Aug 26 17:26:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a42e04-6aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:9b:a8:45:37:56:2c:d4:2e:7d:27:b1:a5:
                    1f:1f:99:33:e4:71:a7:5a:6a:41:05:c3:5f:9a:e7:
                    2e:00:d1:40:45:ec:43:10:7f:d6:95:29:be:4b:b2:
                    cd:1d:57:1c:b4:6e:5f:b7:d6:02:ed:df:8d:10:7f:
                    a4:18:f0:b3:c0:39:67:8d:5d:34:00:26:08:e0:f6:
                    54:e9:12:b8:9f:9d:a2:f7:eb:ad:a2:65:31:2f:92:
                    a3:e9:f5:52:b4:96:64:7c:a7:98:ec:3e:03:e5:5b:
                    54:c2:64:a2:6c:6c:b9:92:2a:ef:ac:7e:5d:6a:44:
                    a1:a0:85:0a:2e:59:8a:18:ea:3c:85:dd:1d:da:8b:
                    55:2d:dd:ce:88:39:ab:de:ea:6f:16:af:a9:62:b7:
                    41:26:77:c8:b2:43:73:26:f3:73:45:53:98:aa:1c:
                    3c:77:5b:43:4a:55:9c:24:ef:da:61:e2:00:67:8c:
                    7a:3f:f1:80:3c:ee:48:f5:a0:c0:cb:19:54:38:40:
                    25:ca:d4:56:a9:cc:9c:bd:51:1a:bd:ff:5e:6b:90:
                    42:46:cc:bf:c2:f4:93:e2:1d:2d:7b:44:8c:6f:90:
                    0d:91:e7:ce:09:0a:06:6e:86:b5:7c:4e:65:a8:af:
                    7b:45:ff:47:cf:e5:e4:dc:d4:46:3f:d0:e5:a5:19:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:78:89:AC:66:23:3C:09:D2:0F:BB:B6:7E:8B:44:21:79:CF:97:DF
            X509v3 Authority Key Identifier:
                keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/FBD6D2BE158711E9881C4D1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.87.0/24
                  103.119.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:e9:5c:b1:3f:4b:1c:fe:e4:3e:2c:fd:f2:2b:6c:91:73:
         6a:0e:4a:68:3a:b4:d2:d1:52:c6:be:7f:17:a0:d3:e6:78:cc:
         82:5a:fd:3d:b1:4c:bb:8b:85:c4:82:a7:af:fc:3c:0e:e0:ef:
         ab:06:c3:b6:01:24:ac:e3:69:7c:2b:9c:ce:bb:ef:8c:5c:5c:
         fa:d7:6d:a0:26:b4:9e:05:02:77:c6:68:d8:57:1a:33:09:f9:
         53:a8:5b:38:34:9c:41:75:7a:f7:72:f5:2f:9c:5f:07:e3:c2:
         64:57:b5:1e:20:7f:b5:42:6f:8c:35:35:19:59:b8:43:41:73:
         4b:7c:bf:13:0d:f0:7d:aa:63:52:8d:19:1a:c7:bd:78:98:6a:
         b2:b3:18:02:75:b5:60:fe:be:17:bb:0d:52:a3:3f:8c:e2:33:
         d4:b9:21:a7:11:fd:50:9f:cb:38:02:51:00:ba:66:af:05:ac:
         2d:12:23:d6:ae:6e:c1:b9:e6:9b:30:f4:09:6c:2b:55:27:02:
         be:c8:12:bb:fb:2f:b5:85:0b:ba:84:ed:80:f9:b1:32:52:fa:
         62:60:df:a2:a2:fd:df:26:79:17:d1:45:15:ae:a1:8b:45:48:
         0a:0a:f6:90:fb:6d:12:67:9f:db:a4:5b:d0:21:6d:48:61:51:
         8a:f4:b3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:03:33 2026 by rpki-client