Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa
File:                     FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa (raw, json)
Hash identifier:          vheM5uAeinqDGQFeaGFPdqZpD7OIlMbyVmkXjE8fDNc=
Subject key identifier:   60:23:B4:BE:24:35:EC:7D:AB:E8:86:50:82:DE:17:91:AA:4A:93:B3
Certificate issuer:       /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial:       01AC
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:58:50 +0000
ROA not before:           Sun 05 Oct 2025 01:57:28 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63473
IP address blocks:        103.69.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
                          rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
        Validity
            Not Before: Oct  5 01:57:28 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48c6a-c6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:ba:25:a6:c7:91:e6:b3:40:4a:54:32:95:
                    3e:f1:f0:6a:87:7a:b1:c2:9f:6f:76:ad:ef:84:cc:
                    1f:6a:f0:52:6c:ac:ec:ae:e1:ac:47:b5:76:43:a1:
                    e7:27:5c:52:07:14:d8:2d:8d:9f:45:66:f7:40:12:
                    c5:ea:dc:67:b0:35:96:32:25:07:2e:ae:0f:42:ee:
                    df:fc:d5:9b:42:a0:5f:38:b7:65:55:02:61:74:0a:
                    25:dc:40:9d:8e:23:00:1e:0c:99:8b:7e:38:59:6b:
                    ec:22:b6:32:b1:30:dc:7b:74:fc:80:7d:3d:4f:4f:
                    15:02:88:7b:a7:29:8f:c2:b3:c4:30:0b:b5:b3:e0:
                    e1:27:99:81:5d:e0:88:39:01:18:9b:11:7e:b7:f5:
                    df:fa:8e:d7:80:22:e7:c6:d1:53:af:a3:1b:1c:fd:
                    b0:48:a8:5e:10:af:9e:96:9e:4b:0d:e8:3d:e4:ef:
                    c7:dc:66:25:1c:52:f3:56:3f:fd:94:b9:f3:1f:3c:
                    e3:02:ac:df:04:3d:06:25:e4:fd:e5:ad:c3:6d:6e:
                    b0:42:8a:b9:65:f1:95:cb:af:fd:f1:78:51:a3:69:
                    9d:d1:d1:f4:43:47:2f:44:6e:a1:a4:9e:de:a2:09:
                    44:9f:8f:a2:a3:1e:9b:5b:00:bc:45:16:cd:dc:8a:
                    7d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:23:B4:BE:24:35:EC:7D:AB:E8:86:50:82:DE:17:91:AA:4A:93:B3
            X509v3 Authority Key Identifier:
                keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/FDB4B8B4E85211EE83F9ED4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:40:e6:8b:cd:37:6b:f1:3c:fc:c3:bd:90:3a:8f:50:61:
         4d:2b:06:f5:e3:92:40:05:11:e9:a3:af:23:52:53:75:74:38:
         81:d2:bb:70:9e:d2:61:f1:2f:40:42:62:11:9c:77:37:68:cb:
         40:24:ab:0b:ca:7f:f9:13:59:fb:8c:80:56:dc:a4:bd:46:24:
         31:8a:a1:10:15:db:13:26:19:8a:22:dd:ce:ed:2a:e1:4a:21:
         86:99:95:b6:2e:f9:5b:15:9f:d3:84:7d:0f:d4:7a:01:1c:ba:
         bd:c8:a1:19:e6:09:1d:9c:2c:5c:8d:47:a0:7a:21:6e:e4:38:
         3c:fa:57:a2:4d:4e:95:c0:b5:bb:0c:2d:fb:e6:e5:a9:f5:5e:
         98:b2:60:01:f7:8c:d2:32:39:a0:57:f4:8b:06:2a:28:2f:34:
         03:ec:81:81:7b:7a:52:0b:a9:76:c3:cb:64:f6:b6:1a:ce:45:
         45:c8:c4:30:5f:4c:7e:5b:d6:f0:86:f7:37:04:c0:22:fb:11:
         1d:80:1a:1d:60:05:55:61:1b:6d:b9:86:f7:a7:94:cb:ad:2b:
         1a:51:f5:a5:4d:f1:a3:c8:11:17:03:cd:90:20:22:ec:6c:87:
         4c:b7:3b:bc:24:89:8f:48:35:54:f4:a7:a7:e4:e5:1b:77:5a:
         b6:d4:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:50 2026 by rpki-client