Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/FBD6D2BE158711E9881C4D1FC4F9AE02.roa
File:                     FBD6D2BE158711E9881C4D1FC4F9AE02.roa (raw, json)
Hash identifier:          E1OSH7JCQBxemNHPqUv5orByc7cho1dIBYg/1C4flvQ=
Subject key identifier:   01:E8:FE:7B:0D:BF:D6:A1:24:10:90:81:16:A8:35:92:8C:E3:58:64
Certificate issuer:       /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial:       1202
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/FBD6D2BE158711E9881C4D1FC4F9AE02.roa
Signing time:             Fri 28 Aug 2026 17:34:15 +0000
ROA not before:           Fri 28 Aug 2026 17:34:15 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137994
IP address blocks:        103.97.87.0/24 maxlen: 24
                          103.119.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
                          rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4610 (0x1202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
        Validity
            Not Before: Aug 28 17:34:15 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a91c697-e931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:ed:b3:c1:75:1c:cb:7c:52:f6:73:0a:c6:
                    88:e0:3c:c0:f3:69:78:2e:d1:ff:2c:fe:5b:1c:1c:
                    e4:f6:2b:2f:09:81:01:82:ac:08:96:4f:d1:a6:93:
                    6a:c0:50:3f:43:89:50:e8:13:48:1d:db:52:41:3c:
                    c6:eb:35:09:d8:30:45:72:9a:ab:bf:ca:0a:12:8d:
                    d1:0d:fd:49:84:17:19:c0:4b:77:08:aa:fb:0b:57:
                    8a:fd:c2:9f:d9:4b:52:6d:ec:6a:c0:b8:9b:ec:43:
                    38:95:58:61:e4:af:44:4e:11:79:6f:11:ca:32:49:
                    55:ec:07:f9:3e:c3:92:8c:9d:5e:68:73:b5:8b:ba:
                    cb:54:0c:4b:d9:8c:6c:30:38:38:4a:c5:13:45:e1:
                    ac:7b:e3:e9:ae:28:0f:e9:80:49:a8:2b:f7:9b:48:
                    77:bd:39:9f:3d:48:7f:5b:95:cd:95:63:a3:b6:37:
                    a6:9a:11:ad:8b:02:31:2f:59:fd:1e:08:f1:2e:b0:
                    d3:d7:9f:c6:ee:2a:95:07:7e:da:67:c9:8d:29:71:
                    b9:5f:df:d7:d0:84:16:34:f7:a8:7e:d7:40:38:e1:
                    e3:d9:3a:6b:58:3b:0c:d7:a0:64:8c:05:a7:0c:c2:
                    f3:58:e6:fb:e9:95:5d:f0:67:3b:ac:8e:ff:72:01:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:FE:7B:0D:BF:D6:A1:24:10:90:81:16:A8:35:92:8C:E3:58:64
            X509v3 Authority Key Identifier:
                keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/FBD6D2BE158711E9881C4D1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.87.0/24
                  103.119.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:42:ac:14:a1:a8:80:14:f5:17:e8:b1:55:47:15:90:67:2f:
         46:ee:49:c8:df:1a:63:0e:32:2d:d3:51:66:db:99:ad:77:04:
         15:d8:d9:80:e4:a3:d4:56:28:97:e0:d1:55:96:31:34:84:00:
         ee:ed:78:3d:05:05:ca:a8:3e:74:be:1f:4a:17:ee:ce:6b:cc:
         24:1c:b4:31:07:34:96:42:39:d6:a5:ea:25:97:f1:1d:7f:6a:
         4e:ab:90:fd:c9:95:09:84:a7:12:fc:3f:95:65:16:56:03:b6:
         9e:72:c4:e3:53:a7:4e:14:54:b4:f4:a2:dc:0e:3d:2b:71:2e:
         f3:33:77:4e:d9:81:d3:73:5c:71:a3:5f:19:a7:31:19:15:03:
         03:bc:f5:ed:92:d3:2c:b1:3a:b2:1d:3e:f6:9a:74:34:f2:8c:
         65:f8:95:72:cc:de:81:7c:8a:12:80:96:45:62:4c:23:6a:91:
         0a:c5:3d:0c:9e:a2:45:cd:c6:16:32:aa:f1:e4:41:ca:dd:f7:
         c6:2b:a4:b2:98:e2:fa:6e:dc:ea:fe:80:1f:36:ad:43:ea:62:
         05:6b:eb:54:47:02:65:2c:18:4b:ec:c4:06:4e:8a:cd:80:10:
         f9:32:63:d5:d8:16:b8:42:e4:2a:a1:b7:e3:ce:6a:d4:82:d0:
         59:58:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:58:59 2026 by rpki-client