Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa
File:                     FDC6A888AEB111EE9A78E132C4F9AE02.roa (raw, json)
Hash identifier:          WgHnF+HxD2J+KCfUlWfbyq/6s7oqiK0V3/6UPmCYXSU=
Subject key identifier:   E3:2A:D0:AC:AD:77:64:D9:A4:F8:6F:0E:9C:47:A5:4A:B6:1F:DF:DF
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       03D4
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:13:39 +0000
ROA not before:           Wed 03 Sep 2025 03:20:11 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     146943
IP address blocks:        103.101.58.0/24 maxlen: 24
                          103.101.59.0/24 maxlen: 24
                          103.205.142.0/24 maxlen: 24
                          103.205.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Sep  3 03:20:11 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a481d3-dd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:24:3b:bd:d7:92:4c:cc:ec:d2:00:76:cb:
                    91:06:de:bb:a2:bd:66:69:de:56:14:ba:b3:e9:4e:
                    5d:a5:a4:d1:aa:fd:8e:23:a3:5a:81:0b:74:b3:87:
                    a7:ad:77:af:5f:c4:0a:57:7a:cb:35:e5:92:25:0f:
                    ab:87:d7:5e:b7:1a:5c:8c:01:3e:97:c1:38:27:40:
                    cd:17:35:b7:a4:c8:4e:18:78:dc:40:4e:c1:57:9d:
                    f7:a8:1b:d6:ec:c0:2f:98:42:50:a1:f7:70:dc:cb:
                    ad:f0:a3:a3:ae:32:7c:f0:c9:87:c1:8a:b0:2b:15:
                    07:be:f2:f5:db:8a:5c:a7:bc:cb:1a:16:6c:46:83:
                    66:ae:39:ae:f6:3a:f3:f2:08:39:c8:ee:5b:76:b1:
                    99:94:2e:f6:18:18:28:05:75:8c:55:03:45:f1:14:
                    29:e6:e8:61:6d:47:3a:a4:8e:de:2b:99:9e:b9:0c:
                    f8:6b:af:0a:70:88:c0:27:78:70:40:65:e7:2a:2a:
                    e6:fc:23:9f:b5:b8:18:d2:26:ac:c1:40:e7:4a:6d:
                    19:76:04:49:97:ca:f1:82:ec:bf:65:10:40:de:20:
                    1a:d0:f2:4f:d9:c0:89:0e:65:aa:85:6a:f8:14:9a:
                    12:e9:c1:fc:64:bd:25:ea:91:7c:9f:eb:97:5d:b2:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:D0:AC:AD:77:64:D9:A4:F8:6F:0E:9C:47:A5:4A:B6:1F:DF:DF
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.58.0/23
                  103.205.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:07:ff:84:7c:94:63:33:c4:59:3d:b4:b6:34:19:92:b2:d9:
         b9:11:b7:15:be:20:ea:f8:da:a5:52:33:eb:b8:a6:1f:39:6b:
         3e:73:4e:aa:f7:c6:50:0e:c3:32:cb:02:ac:95:be:6a:f3:59:
         3f:29:41:08:29:e4:5e:51:b4:f3:7b:c5:5d:81:c9:fa:b5:4b:
         90:8a:62:4b:d5:8a:06:34:8a:fe:26:1f:56:ca:bb:c0:b7:ea:
         cf:1c:b1:84:b0:9c:91:45:11:b3:b9:93:9b:cc:a5:9b:f3:3b:
         2d:18:aa:d7:1e:ad:0f:10:c6:2d:bb:4e:da:c7:54:9b:75:1d:
         78:f6:9c:fb:61:85:0f:21:d6:32:58:66:a0:a5:6a:d7:f6:cb:
         85:93:cb:bb:30:38:62:c8:59:bc:15:30:66:af:11:04:07:0d:
         fd:a4:a5:2b:09:1f:2b:fc:5b:24:4e:95:03:99:9f:30:87:a0:
         b8:7d:ab:3f:d1:a0:a0:b2:5f:f2:4e:a9:70:12:38:63:64:e5:
         66:3b:3a:8b:a7:a6:e0:79:3c:d5:fd:d3:b3:b8:c4:6a:bf:34:
         54:6e:c5:5c:61:8b:6d:a1:69:06:cc:70:5e:42:5f:89:be:57:
         3d:b8:f0:60:9a:25:96:81:34:74:7a:54:d3:a0:fd:33:b1:d6:
         4c:41:d7:87
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5
Njk4RkU2MzgwHhcNMjUwOTAzMDMyMDExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODFkMy1kZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA688kO73XkkzM7NIAdsuRBt67or1mad5WFLqz6U5dpaTRqv2OI6NagQt0s4en
rXevX8QKV3rLNeWSJQ+rh9detxpcjAE+l8E4J0DNFzW3pMhOGHjcQE7BV533qBvW
7MAvmEJQofdw3Mut8KOjrjJ88MmHwYqwKxUHvvL124pcp7zLGhZsRoNmrjmu9jrz
8gg5yO5bdrGZlC72GBgoBXWMVQNF8RQp5uhhbUc6pI7eK5meuQz4a68KcIjAJ3hw
QGXnKirm/COftbgY0iaswUDnSm0ZdgRJl8rxguy/ZRBA3iAa0PJP2cCJDmWqhWr4
FJoS6cH8ZL0l6pF8n+uXXbIezwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOMq0Kyt
d2TZpPhvDpxHpUq2H9/fMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx
ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRkRDNkE4ODhB
RUIxMTFFRTlBNzhFMTMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ2U6AwQBZ82OMA0GCSqGSIb3DQEBCwUAA4IBAQB1B/+EfJRjM8RZ
PbS2NBmSstm5EbcVviDq+NqlUjPruKYfOWs+c06q98ZQDsMyywKslb5q81k/KUEI
KeReUbTze8Vdgcn6tUuQimJL1YoGNIr+Jh9WyrvAt+rPHLGEsJyRRRGzuZObzKWb
8zstGKrXHq0PEMYtu07ax1SbdR149pz7YYUPIdYyWGagpWrX9suFk8u7MDhiyFm8
FTBmrxEEBw39pKUrCR8r/FskTpUDmZ8wh6C4fas/0aCgsl/yTqlwEjhjZOVmOzqL
p6bgeTzV/dOzuMRqvzRUbsVcYYttoWkGzHBeQl+Jvlc9uPBgmiWWgTR0elTToP0z
sdZMQdeH
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:15 2026 by rpki-client