Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FB03729A370111F1AC489D14BF833773.roa
File:                     FB03729A370111F1AC489D14BF833773.roa (raw, json)
Hash identifier:          qCyra6afbP8VZyk8tTQuTnWntq5Vf9XBEhtSR3+HSbs=
Subject key identifier:   80:F7:7D:BE:95:CC:72:6F:F8:F9:8D:6B:50:CE:E7:F9:E9:21:28:F1
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       05A2
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FB03729A370111F1AC489D14BF833773.roa
Signing time:             Thu 10 Sep 2026 23:45:47 +0000
ROA not before:           Thu 10 Sep 2026 23:45:47 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137409
IP address blocks:        103.73.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Sep 10 23:45:47 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa3412b-56ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:57:6b:fc:ee:c7:77:e4:f7:58:ff:8a:aa:
                    3b:c9:a5:6c:35:87:d1:95:90:c3:80:00:c5:b3:e5:
                    d9:b6:a1:bc:50:56:b6:fb:c8:e0:7a:de:42:a3:a3:
                    db:92:3b:ea:14:38:fb:17:03:22:31:56:57:27:f0:
                    43:05:b3:9f:50:dd:43:82:a9:cb:0b:67:ae:b5:44:
                    ef:51:8b:2f:e7:0a:49:4d:20:ce:45:4f:71:12:68:
                    70:23:f4:6c:62:d7:90:38:24:0e:eb:45:21:0a:94:
                    69:f9:81:fb:e4:65:43:48:54:62:f8:22:15:da:8e:
                    19:1b:2a:5b:40:d4:6f:c1:36:73:1b:88:a7:31:0d:
                    ab:1c:82:65:15:a1:20:7b:c0:dd:ed:0d:28:9d:44:
                    d1:c5:d1:ce:9d:69:f5:b6:0e:73:b3:1e:1a:55:62:
                    2f:a3:43:d8:eb:31:75:e9:0e:4e:86:82:b9:55:88:
                    27:c6:85:9c:b0:6e:e7:53:4e:51:1a:ef:13:1d:a5:
                    98:62:2e:ab:24:d2:c1:c9:7a:42:db:9e:f1:a8:47:
                    53:d5:5a:a6:80:91:6a:4e:cf:2e:94:fa:ea:74:6e:
                    46:50:92:e4:a1:4b:4e:fa:38:95:19:c3:63:61:15:
                    81:31:83:a4:86:cc:de:56:b3:0a:d2:21:30:4f:d1:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F7:7D:BE:95:CC:72:6F:F8:F9:8D:6B:50:CE:E7:F9:E9:21:28:F1
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FB03729A370111F1AC489D14BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:bd:b4:d7:09:58:c2:8b:20:ab:04:a0:5d:3e:09:85:73:
         d1:06:52:d2:48:45:75:43:c5:4f:8a:7b:22:a8:70:91:80:f0:
         b9:22:29:91:94:83:3d:12:6b:14:20:fd:c4:52:04:8b:fc:d7:
         a8:31:18:cd:39:c8:60:9c:71:a5:e1:d4:c9:df:19:77:0e:33:
         0a:23:f3:9b:55:87:06:ed:d1:e6:ca:6e:72:0b:0e:73:12:74:
         25:54:f6:6b:cd:f2:b5:fe:42:14:cf:57:09:b0:87:b6:1c:eb:
         e6:84:0b:83:55:c7:e8:37:f6:48:07:ef:f7:4f:92:98:27:a3:
         8b:d2:a7:e2:65:ed:69:0e:0e:7e:03:69:4d:4a:58:bc:07:8d:
         39:65:a7:a6:e9:35:32:ad:63:cb:df:34:ec:01:de:4b:c2:a1:
         89:9f:e4:06:6c:40:ae:27:96:46:15:18:d1:7a:7f:e7:22:36:
         55:8c:1a:7b:dc:45:53:41:6e:2b:81:6b:6f:19:99:67:a9:b5:
         9d:ff:d1:ab:bb:45:40:1f:91:40:79:1a:88:8e:99:41:cb:42:
         02:1e:1b:37:89:c2:05:93:60:21:db:07:09:d5:30:42:33:0f:
         a6:71:d8:4a:d4:2d:4c:e2:d9:52:fe:97:c5:03:8d:eb:e3:a8:
         41:1f:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:02:42 2026 by rpki-client