Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa
File:                     FDC103263F0711ED9328213FC4F9AE02.roa (raw, json)
Hash identifier:          5bBaU9rAnKNuT8iuZ4HpQ+GiF7GA9Gyo+3R1mzGos+c=
Subject key identifier:   F6:CB:D1:D4:6D:27:41:D1:91:04:1D:C9:A1:54:D7:87:D3:F1:60:4B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D6F0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:09 +0000
ROA not before:           Thu 08 May 2025 16:23:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149564
IP address blocks:        103.187.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55024 (0xd6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:23:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1ec-540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:d5:bb:17:9d:6c:7e:51:34:56:a5:db:e9:
                    c2:13:02:68:f4:88:27:5d:65:10:f9:9e:a0:77:df:
                    53:e8:7f:90:74:f4:38:df:13:29:ac:05:8a:53:66:
                    47:4e:97:73:c6:71:b8:04:ac:49:79:97:1b:76:9d:
                    4b:a6:63:f2:51:4b:cf:bf:b0:38:7a:47:ee:05:cf:
                    5e:9a:c7:3f:ca:6d:5a:a0:d8:66:cb:49:28:d4:b9:
                    f1:ba:02:aa:80:67:90:44:f5:41:43:a4:9d:06:07:
                    ad:3f:51:b8:de:70:02:10:8f:c1:b1:43:c6:49:db:
                    69:c8:2e:7f:39:4e:90:3c:5f:44:78:3b:35:2b:2e:
                    81:0b:b6:49:c2:b6:df:1d:2f:96:85:c9:f3:5b:2b:
                    84:29:8e:55:53:32:3b:b2:5a:ac:4d:4f:2c:6a:bc:
                    ab:57:dd:8b:f9:f1:08:8b:62:51:8b:88:58:37:80:
                    a0:32:84:43:79:35:99:25:83:22:72:29:40:a5:e7:
                    ec:ae:0c:5d:64:76:dd:d7:df:27:0e:49:52:df:f7:
                    2b:37:7d:e2:db:61:f7:08:79:10:55:94:7e:16:fa:
                    57:6e:b6:a2:18:8c:e3:bf:6a:8d:ab:92:cc:43:0c:
                    10:6b:cb:14:b2:93:11:78:f9:6a:5a:7b:7d:27:02:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:D1:D4:6D:27:41:D1:91:04:1D:C9:A1:54:D7:87:D3:F1:60:4B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDC103263F0711ED9328213FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:04:64:cf:37:43:1d:43:4e:3e:1d:81:dd:4b:d6:54:ae:
         c1:38:37:8e:90:ad:ac:3d:d3:2a:c3:51:9b:6e:f0:a0:a7:47:
         c4:fc:4d:19:37:d3:7a:5d:21:a1:01:7f:0a:f4:82:4e:45:8e:
         0d:69:13:43:4f:ac:97:61:f7:5f:91:d8:92:4a:f0:e6:77:f0:
         93:fd:1f:07:55:17:fc:02:e1:d8:5d:35:d6:3c:aa:90:a4:c7:
         0b:a3:8b:99:a2:1e:80:0a:d7:6b:3a:c8:8c:31:c9:06:09:0d:
         24:23:9a:bc:2e:ba:09:ee:1b:ca:e2:84:f3:65:29:b0:2e:59:
         1b:cb:36:34:eb:be:6a:a3:f5:eb:21:d1:57:76:06:78:d1:32:
         cb:58:80:f8:c1:fa:6f:79:a3:a5:cf:74:7c:e1:90:c5:17:4f:
         b8:44:0d:5c:71:b8:55:38:ef:b8:37:e1:57:a8:42:d9:39:d4:
         8c:63:ca:7b:79:c6:38:49:5a:f9:82:49:8d:95:e4:39:d3:1a:
         f1:74:95:6a:ed:83:85:18:2b:10:fb:58:ec:91:6c:3d:5f:87:
         5c:ad:86:bb:51:de:d3:49:a7:7c:11:f9:b8:01:f1:0d:15:32:
         61:18:58:18:db:f0:a9:59:69:8f:db:a8:7f:a2:5c:24:1f:36:
         05:d2:31:68
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDANbwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MjMwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMxZWMtNTQwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI4l1bsXnWx+UTRWpdvpwhMCaPSIJ11lEPmeoHffU+h/kHT0ON8TKawFilNm
R06Xc8ZxuASsSXmXG3adS6Zj8lFLz7+wOHpH7gXPXprHP8ptWqDYZstJKNS58boC
qoBnkET1QUOknQYHrT9RuN5wAhCPwbFDxknbacgufzlOkDxfRHg7NSsugQu2ScK2
3x0vloXJ81srhCmOVVMyO7JarE1PLGq8q1fdi/nxCItiUYuIWDeAoDKEQ3k1mSWD
InIpQKXn7K4MXWR23dffJw5JUt/3Kzd94tth9wh5EFWUfhb6V262ohiM479qjauS
zEMMEGvLFLKTEXj5alp7fScCb6cCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT2y9HU
bSdB0ZEEHcmhVNeH0/FgSzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZEQzEwMzI2
M0YwNzExRUQ5MzI4MjEzRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWe7FDANBgkqhkiG9w0BAQsFAAOCAQEABvgEZM83Qx1DTj4dgd1L
1lSuwTg3jpCtrD3TKsNRm27woKdHxPxNGTfTel0hoQF/CvSCTkWODWkTQ0+sl2H3
X5HYkkrw5nfwk/0fB1UX/ALh2F011jyqkKTHC6OLmaIegArXazrIjDHJBgkNJCOa
vC66Ce4byuKE82UpsC5ZG8s2NOu+aqP16yHRV3YGeNEyy1iA+MH6b3mjpc90fOGQ
xRdPuEQNXHG4VTjvuDfhV6hC2TnUjGPKe3nGOEla+YJJjZXkOdMa8XSVau2DhRgr
EPtY7JFsPV+HXK2Gu1He00mnfBH5uAHxDRUyYRhYGNvwqVlpj9uof6JcJB82BdIx
aA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:49 2026 by rpki-client