Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/F18DB130603911EF930C0567C4F9AE02.roa
File:                     F18DB130603911EF930C0567C4F9AE02.roa (raw, json)
Hash identifier:          fyJmP2+tjH5jmHypwbkY3sx8LmyTBoCFRhQ62M+DiAM=
Subject key identifier:   0A:6D:60:4D:66:FD:8B:DC:E7:E2:64:35:EC:58:A8:0F:E9:BF:36:FF
Certificate issuer:       /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial:       05D9
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/F18DB130603911EF930C0567C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:39:45 +0000
ROA not before:           Sun 07 Sep 2025 00:04:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142629
IP address blocks:        103.171.89.0/24 maxlen: 24
                          2001:df7:4280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
        Validity
            Not Before: Sep  7 00:04:48 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a43391-d01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:00:9a:53:c0:59:a5:d3:68:1b:7f:f7:fa:
                    cd:a2:d7:b7:20:b0:88:c5:85:1a:7b:30:63:b9:c3:
                    2b:c7:5c:5e:40:d6:46:b3:c9:3e:d5:76:77:6e:bf:
                    b6:9d:b9:40:76:d4:d5:ce:6b:ef:fa:76:45:2a:0b:
                    d0:47:2b:af:e4:77:6b:5c:5e:a1:1a:50:a3:69:f7:
                    85:80:49:64:c8:c8:07:25:ca:b4:f7:44:16:62:16:
                    d3:74:a8:be:80:de:62:6f:a1:90:bd:37:a7:b9:2e:
                    8b:e9:f9:fc:78:a6:5f:b7:56:97:9d:6f:98:b7:0f:
                    08:d3:67:b3:a2:89:5e:db:22:42:30:09:bf:e1:e7:
                    86:23:53:de:7c:85:63:79:76:1c:e5:e1:6c:97:0c:
                    86:2b:c0:6e:38:d3:26:81:73:7e:5c:b9:c7:6d:57:
                    3f:27:67:07:62:6a:8d:1d:f5:af:a8:f0:d1:33:45:
                    d1:2b:ea:15:16:b0:71:87:a3:cb:a7:9a:9f:d8:71:
                    d7:22:68:70:e3:39:13:bc:ec:17:3f:c9:79:bf:9b:
                    96:73:de:71:e1:b7:7e:59:2c:4b:5c:63:30:e9:1f:
                    c8:77:53:47:e5:1c:d6:30:75:27:f5:9b:e7:68:da:
                    fb:b6:ca:62:0b:fd:d7:a8:07:df:52:a2:a3:5c:b0:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:60:4D:66:FD:8B:DC:E7:E2:64:35:EC:58:A8:0F:E9:BF:36:FF
            X509v3 Authority Key Identifier:
                keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/F18DB130603911EF930C0567C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.89.0/24
                IPv6:
                  2001:df7:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:73:61:be:32:7b:4b:28:40:3f:75:6c:7e:d6:6f:29:9e:
         db:d6:86:20:93:08:dc:01:47:55:0c:00:50:7f:75:79:f4:64:
         91:f1:29:16:f2:af:32:2e:b9:ff:4b:60:5a:63:ec:15:11:2e:
         9d:d3:b2:50:22:c6:bc:4b:72:82:b3:09:e7:4f:04:54:c9:67:
         59:46:24:75:da:cf:ff:1f:1a:54:a2:bb:e3:ca:1e:e3:ff:e5:
         b0:cc:21:1f:5b:f1:43:1f:30:f3:6d:5d:b7:d6:14:33:3a:10:
         47:45:0c:d6:26:78:ee:35:6d:25:bd:90:1c:9d:5b:ad:00:f7:
         49:d4:8c:21:43:4f:15:91:bd:02:e6:33:ed:01:9b:30:2e:44:
         4c:80:64:f1:f7:c5:16:01:ba:21:31:39:82:53:9a:63:51:3b:
         81:0c:20:32:b4:1f:ce:ec:1c:c7:99:84:0b:dc:99:89:21:f2:
         bb:26:70:38:7d:4e:35:22:76:2b:14:1c:8a:96:ed:25:6a:36:
         76:3d:db:3b:d8:6d:46:85:ab:cd:ed:3e:91:86:b4:c8:ad:5e:
         57:f9:e7:10:6d:74:fe:6c:4f:eb:14:33:63:8d:6c:a7:0f:d9:
         34:5e:94:da:25:83:5e:7e:cd:f4:63:e0:92:31:2a:f6:86:6d:
         bb:5b:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:31 2026 by rpki-client