Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FBB1514E370111F1AC489D14BF833773.roa
File:                     FBB1514E370111F1AC489D14BF833773.roa (raw, json)
Hash identifier:          ZkDSUGhIzcmjSgjRJZ9cZlXr5/YHk19HP0IIMCiijuA=
Subject key identifier:   75:E0:0E:4B:6E:B6:13:7C:B0:0F:32:AF:BF:5D:0F:0D:B1:44:61:DE
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       054B
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FBB1514E370111F1AC489D14BF833773.roa
Signing time:             Mon 13 Apr 2026 06:28:29 +0000
ROA not before:           Mon 13 Apr 2026 06:28:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.73.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Apr 13 06:28:29 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69dc8d0d-d810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ff:19:1f:8b:74:67:bb:cb:22:ab:c4:6f:d0:
                    06:e8:28:83:78:f4:dc:68:a0:4f:e2:32:94:43:b9:
                    30:1a:eb:04:12:e6:2b:95:d0:b0:a9:99:b8:02:62:
                    29:c9:05:3c:01:05:37:37:02:cb:a4:38:d9:3e:93:
                    81:bf:b3:55:88:e7:f2:e9:24:95:14:e8:bd:66:e5:
                    68:29:b8:56:72:16:0e:bd:95:c5:1b:a8:34:02:91:
                    0c:56:f6:ac:f5:18:ac:cf:38:3d:68:c6:c0:72:b2:
                    31:8a:ea:e1:c2:e3:62:61:0e:29:82:06:77:70:5e:
                    3e:cc:dd:f2:ab:f0:ca:17:a3:aa:c0:1a:d0:ef:40:
                    ed:74:12:c3:f6:12:a6:43:84:f5:6b:79:b1:9a:d9:
                    1f:0a:8d:a9:a0:0a:a0:b0:1c:45:5f:e5:7d:a7:ca:
                    fa:99:74:a5:39:71:0d:28:f0:b2:67:16:c5:eb:43:
                    dc:c3:5e:eb:bc:dd:f1:85:1a:59:8b:1b:07:db:39:
                    75:dc:d7:08:b0:c9:12:7e:68:8b:b1:8d:f1:3c:2e:
                    0a:0f:51:08:20:fc:e7:cb:42:73:9a:e9:2a:9a:56:
                    e2:c5:ea:7d:e3:d3:9f:db:03:3f:52:0e:30:1b:27:
                    9a:5c:6d:a8:97:83:6e:77:5d:bc:6d:0d:9d:e2:b9:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E0:0E:4B:6E:B6:13:7C:B0:0F:32:AF:BF:5D:0F:0D:B1:44:61:DE
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/FBB1514E370111F1AC489D14BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:67:ec:d7:5f:e8:5b:ce:a3:d1:3e:18:09:49:3d:61:68:b1:
         11:57:55:9a:8e:f4:b6:65:aa:3e:d9:9b:fe:bd:d4:3f:c3:a0:
         c4:bf:27:01:69:68:fa:20:d4:1f:34:6d:5c:2f:ac:49:0c:41:
         4a:80:e8:57:8f:c2:94:0d:be:6f:04:7b:fa:b7:20:13:a3:90:
         3e:6a:56:30:0c:4d:af:79:91:af:ac:3c:d0:9c:c2:5f:65:30:
         6f:51:38:88:5f:e2:95:b0:ec:37:3e:52:82:3e:91:61:35:34:
         47:b1:7a:d5:ad:78:fd:5f:3b:6a:67:84:32:e7:77:4a:a4:d1:
         5d:19:0c:7a:1e:3d:5c:d1:4f:b8:15:ec:b8:76:23:96:0e:d0:
         3b:ce:52:e6:a6:73:71:ba:12:bf:0a:a1:f6:dd:7c:95:55:9c:
         08:2e:69:f3:b8:e5:f8:6d:24:dc:69:e7:fc:92:3e:f0:05:1f:
         e5:2b:f8:51:64:a5:fb:5a:7b:ad:28:60:f5:c6:99:64:d7:54:
         2d:4f:30:2a:d8:f8:04:57:c0:ba:bd:ef:78:a2:5d:5c:8b:1d:
         99:dd:8f:a1:52:07:7f:5a:02:e3:eb:3d:e6:2f:1d:2a:1f:08:
         03:86:f3:b1:6e:a1:4e:ce:e3:d0:d5:9c:c5:27:69:91:46:23:
         09:e0:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:06 2026 by rpki-client