Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/FB54EFD2F31711EABD181553C4F9AE02.roa
File:                     FB54EFD2F31711EABD181553C4F9AE02.roa (raw, json)
Hash identifier:          8VYBtyb6KOD3LR/rXGuaWdHejumUio3sPtxmJ2sRl3w=
Subject key identifier:   AC:42:84:93:7C:CB:E2:21:DB:87:AC:5E:09:65:08:50:FA:A5:1D:96
Certificate issuer:       /CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
Certificate serial:       08D5
Authority key identifier: 48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/FB54EFD2F31711EABD181553C4F9AE02.roa
Signing time:             Tue 08 Sep 2026 20:41:47 +0000
ROA not before:           Tue 08 Sep 2026 20:41:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134232
IP address blocks:        103.60.24.0/22 maxlen: 22
                          2402:c780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl
                          rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916534C, serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
        Validity
            Not Before: Sep  8 20:41:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa0730b-56aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:7c:e3:21:6c:77:c4:2d:80:72:12:97:d3:
                    1d:82:c0:b3:eb:dd:b2:a3:eb:78:fd:dd:64:2f:76:
                    40:15:4e:c2:99:b8:96:34:d2:68:1d:fe:c7:a1:fd:
                    2e:28:ac:28:98:ba:9d:ac:3f:a9:be:44:26:45:e7:
                    7f:a4:21:12:c8:27:c4:91:c2:43:5d:48:25:bf:0c:
                    64:c5:48:d9:d0:32:c6:d2:ac:53:6f:0d:e8:08:4d:
                    ce:9c:5e:94:ba:c2:b3:32:d9:86:30:43:1d:40:3b:
                    a6:64:a1:03:6f:98:3f:0d:be:b3:1d:20:bb:69:ee:
                    d2:e7:9c:dc:32:88:e2:6e:08:a1:bf:d0:8e:20:e2:
                    ef:47:8d:2a:6a:89:71:f7:ea:e9:69:cb:22:f8:ea:
                    57:5f:ee:29:23:19:e9:15:e7:45:98:e1:34:ba:96:
                    a8:ff:00:41:dc:b0:ec:02:ef:61:d4:52:da:b1:4b:
                    9d:d0:16:ba:35:e1:f5:08:c3:1b:db:3a:dd:5e:52:
                    5f:09:8c:c5:89:8f:4d:a9:43:b0:3c:fc:76:dd:cf:
                    fc:77:d0:14:4e:e3:45:f0:82:2d:53:2a:fd:8d:f0:
                    04:36:0e:df:a2:0e:74:b0:06:45:d9:44:b6:cc:03:
                    9d:8c:2c:19:41:93:cc:06:28:7d:33:2f:e0:f5:34:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:84:93:7C:CB:E2:21:DB:87:AC:5E:09:65:08:50:FA:A5:1D:96
            X509v3 Authority Key Identifier:
                keyid:48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/FB54EFD2F31711EABD181553C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.24.0/22
                IPv6:
                  2402:c780::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:fa:0e:b2:f3:ac:dc:bc:32:e2:f6:85:4c:d9:a4:69:27:d7:
         26:2c:1a:54:88:7c:1c:7b:dd:ae:f9:c0:6b:8a:c5:bd:ba:20:
         7e:b5:4e:91:71:40:11:02:24:75:85:28:c9:1b:53:be:82:5a:
         f5:59:72:95:b9:24:d7:5b:14:ed:74:6c:4c:38:8a:e2:50:53:
         c9:bb:71:af:5c:3d:60:03:15:48:cd:c8:de:f3:8d:f1:23:c7:
         87:77:a7:e5:9b:13:a1:6d:b1:18:9a:a8:57:d9:e0:f4:cb:99:
         91:51:7c:e6:b0:d8:27:49:4b:18:10:2f:a2:4a:59:7b:4e:62:
         c2:a2:e8:24:50:a5:88:75:57:d7:7b:4c:e5:a1:a9:1a:97:a1:
         f3:e7:da:47:9d:08:98:2b:a2:46:4c:a1:64:b2:2b:b8:45:8e:
         11:51:4a:ee:f9:33:3f:96:31:e1:43:fb:a1:f6:b7:79:1e:c9:
         01:38:0c:84:43:d4:df:27:ec:17:9e:66:e1:62:ee:92:ca:b9:
         bf:5b:32:6c:26:ec:a9:bb:a3:bf:78:67:5d:88:8e:86:9f:12:
         05:3a:8a:3f:2a:ba:09:b0:a8:28:a7:70:6e:7a:9d:d6:48:7a:
         b5:16:11:54:a5:b4:67:7f:1d:f2:db:07:0b:bc:73:90:34:19:
         61:72:06:c5
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUzNEMxMTAvBgNVBAUTKDQ4QTNBRTkxOTNERDExQkIzNzM0QzcwNTQ3NkU5OEMz
RkY3OEI4NDEwHhcNMjYwOTA4MjA0MTQ3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwNzMwYi01NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxt84yFsd8QtgHISl9MdgsCz692yo+t4/d1kL3ZAFU7CmbiWNNJoHf7Hof0u
KKwomLqdrD+pvkQmRed/pCESyCfEkcJDXUglvwxkxUjZ0DLG0qxTbw3oCE3OnF6U
usKzMtmGMEMdQDumZKEDb5g/Db6zHSC7ae7S55zcMojibgihv9COIOLvR40qaolx
9+rpacsi+OpXX+4pIxnpFedFmOE0upao/wBB3LDsAu9h1FLasUud0Ba6NeH1CMMb
2zrdXlJfCYzFiY9NqUOwPPx23c/8d9AUTuNF8IItUyr9jfAENg7fog50sAZF2US2
zAOdjCwZQZPMBih9My/g9TR00QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKxChJN8
y+Ih24esXgllCFD6pR2WMB8GA1UdIwQYMBaAFEijrpGT3RG7NzTHBUdumMP/eLhB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM0Qy9FRkUyNUYwNEYz
MEQxMUVBODc1Nzc0MzVDNEY5QUUwMi9TS091a1pQZEViczNOTWNGUjI2WXdfOTR1
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NLT3VrWlBkRWJzM05NY0ZSMjZZd185NHVFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjUzNEMvRUZFMjVGMDRGMzBEMTFFQTg3NTc3NDM1QzRGOUFFMDIvRkI1NEVGRDJG
MzE3MTFFQUJEMTgxNTUzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZzwYMA0EAgACMAcDBQAkAseAMA0GCSqGSIb3DQEBCwUAA4IBAQBc
+g6y86zcvDLi9oVM2aRpJ9cmLBpUiHwce92u+cBrisW9uiB+tU6RcUARAiR1hSjJ
G1O+glr1WXKVuSTXWxTtdGxMOIriUFPJu3GvXD1gAxVIzcje843xI8eHd6flmxOh
bbEYmqhX2eD0y5mRUXzmsNgnSUsYEC+iSll7TmLCougkUKWIdVfXe0zloakal6Hz
59pHnQiYK6JGTKFksiu4RY4RUUru+TM/ljHhQ/uh9rd5HskBOAyEQ9TfJ+wXnmbh
Yu6Syrm/WzJsJuypu6O/eGddiI6GnxIFOoo/KroJsKgop3Buep3WSHq1FhFUpbRn
fx3y2wcLvHOQNBlhcgbF
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:14:35 2026 by rpki-client