Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/FD8683B6AB2F11F199111181AFEE528E.roa
File:                     FD8683B6AB2F11F199111181AFEE528E.roa (raw, json)
Hash identifier:          nj7zpHhdZPeAnSuqqiBAFC350E8Xly3tDniLk5HF2SE=
Subject key identifier:   25:E5:F7:05:E6:7C:C3:14:65:93:26:94:D1:56:7E:2B:04:59:CC:7E
Certificate issuer:       /CN=A918AA54/serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
Certificate serial:       04
Authority key identifier: 25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/FD8683B6AB2F11F199111181AFEE528E.roa
Signing time:             Tue 08 Sep 2026 14:29:47 +0000
ROA not before:           Tue 08 Sep 2026 14:29:47 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137526
IP address blocks:        103.186.238.0/23 maxlen: 24
                          2400:75e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=25FCC20B7833B1E20BBC1334510A93AE1D686CC0
        Validity
            Not Before: Sep  8 14:29:47 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aa01bdb-4b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:ec:55:0c:c7:45:cd:b8:d5:fc:d1:03:fd:
                    62:99:08:c8:25:3f:85:11:71:1b:84:4f:31:d7:47:
                    1d:68:d5:c7:5a:ab:ce:ff:32:1b:03:8e:ca:a1:fd:
                    03:4f:d6:65:cc:0c:d3:dc:a4:32:be:ec:1a:26:02:
                    7a:5c:b1:66:a8:99:cb:df:e5:11:4b:8c:bb:60:9d:
                    dc:5e:71:b8:8b:0b:ae:8f:6a:da:21:31:cd:60:72:
                    98:38:c4:67:2f:6a:f3:ee:c1:f6:92:4b:4d:0a:5a:
                    4c:6d:90:3e:c2:d3:8b:eb:68:d2:13:7f:2f:5a:bd:
                    7d:63:1a:47:f6:76:d1:15:57:34:57:5b:73:37:05:
                    48:7a:a6:70:36:ee:57:5f:69:ca:a6:4c:55:6e:56:
                    26:f6:53:c5:0a:8d:fa:5c:0a:44:fc:64:61:90:9b:
                    4a:bd:1a:a8:52:a3:cc:fc:fc:e5:46:ef:d3:aa:d1:
                    09:d9:37:90:63:b5:74:3d:d6:4c:1d:e7:82:c5:fd:
                    b2:4b:70:7d:f8:00:c2:b3:ff:19:be:10:fe:19:d2:
                    7e:fe:3d:c4:26:f0:6f:6d:ae:ef:82:2b:fb:63:55:
                    9f:6c:0d:b0:f2:33:27:29:7d:5a:bd:53:07:48:36:
                    0e:ca:53:c8:97:78:3a:e2:8f:76:ea:ed:53:86:a3:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E5:F7:05:E6:7C:C3:14:65:93:26:94:D1:56:7E:2B:04:59:CC:7E
            X509v3 Authority Key Identifier:
                keyid:25:FC:C2:0B:78:33:B1:E2:0B:BC:13:34:51:0A:93:AE:1D:68:6C:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/JfzCC3gzseILvBM0UQqTrh1obMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfzCC3gzseILvBM0UQqTrh1obMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/FD8683B6AB2F11F199111181AFEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.238.0/23
                IPv6:
                  2400:75e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:93:eb:cd:ab:c6:4f:73:8c:61:01:5e:10:fb:9b:f6:db:
         19:66:af:ad:ee:3c:75:3d:65:71:2f:64:85:57:4b:e0:4f:3e:
         ed:61:6c:12:ca:a2:29:5f:72:3d:a5:81:47:e6:b0:24:af:5c:
         e6:17:55:6b:b1:6b:0d:7d:76:a7:41:88:c2:dc:0c:02:d0:94:
         e1:8b:48:1d:b4:89:c2:6a:03:1c:19:09:69:aa:79:fd:ea:92:
         15:11:37:b1:e8:b8:14:53:40:aa:9d:50:33:ab:65:07:10:12:
         3a:09:8a:4a:1d:7b:9f:ae:c6:c2:9e:ad:20:80:0d:42:7b:3c:
         e5:1f:a6:e9:fb:1a:59:f1:b0:73:53:24:b6:1d:b8:11:b4:0b:
         31:20:ff:1b:b4:cf:96:5b:c8:7d:3c:d7:8d:9b:cb:8a:78:99:
         5d:a0:a1:9b:dd:55:7a:9a:7c:59:6a:17:12:83:82:50:60:65:
         26:ab:90:e6:fe:69:99:d3:e0:5b:93:e6:59:d4:3d:e4:c2:ef:
         62:57:3f:87:99:eb:28:65:44:1b:89:2a:a4:80:39:48:35:1f:
         ae:63:5f:e0:b4:e1:10:78:6b:65:8c:c5:14:3e:81:6a:25:09:
         bc:b8:fb:c1:34:28:33:c1:6c:dd:d0:fc:ff:91:c7:a3:a2:e5:
         3c:2e:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:55 2026 by rpki-client