Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/FD765464FCFC11F0AF0D3BB7376F56BC.roa
File:                     FD765464FCFC11F0AF0D3BB7376F56BC.roa (raw, json)
Hash identifier:          eJofnUMCGktsGrjmk9qmZtR4EvsLnOuTHY31f/qnkIQ=
Subject key identifier:   88:E8:37:AA:38:62:55:E7:4D:62:D6:EC:64:1E:84:D4:C1:29:06:84
Certificate issuer:       /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Certificate serial:       0C56
Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/FD765464FCFC11F0AF0D3BB7376F56BC.roa
Signing time:             Mon 02 Mar 2026 14:43:54 +0000
ROA not before:           Wed 18 Feb 2026 19:16:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134995
IP address blocks:        103.146.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3158 (0xc56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
        Validity
            Not Before: Feb 18 19:16:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5a22a-9fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:0d:25:80:c7:2c:2e:39:33:2f:0a:32:b3:
                    a8:3c:5d:5d:61:dc:c8:9f:db:96:3e:0c:33:35:6a:
                    14:cd:49:12:ed:ec:55:25:57:de:92:b0:61:62:7a:
                    99:ea:8f:7f:5a:3e:1a:95:f9:e7:5b:29:4c:e1:19:
                    35:c7:fe:65:da:87:1b:d5:c8:17:de:f0:88:41:7a:
                    a1:4e:88:17:a7:a6:95:73:58:35:a6:07:2d:bf:14:
                    48:ea:df:d4:4a:87:85:f2:8d:91:9a:d5:f9:12:e9:
                    27:b9:e9:ba:fe:e2:17:f8:2c:37:a1:3d:d8:f5:0d:
                    1a:89:b4:c8:e7:8f:67:d4:f9:cf:71:08:7f:73:34:
                    9f:85:e6:12:95:8b:69:64:63:05:11:79:2a:77:ba:
                    ed:74:5f:b1:5b:f4:e1:23:97:25:c4:f2:b6:d4:95:
                    8a:8c:9e:73:54:e0:67:e0:d0:0c:95:38:a9:c6:df:
                    50:9d:1c:c1:52:84:af:46:a7:79:2f:0b:bc:a4:b7:
                    b7:73:ef:9b:61:2b:05:a9:a3:71:fd:76:d0:1f:59:
                    88:e8:22:48:d2:a1:c7:43:04:a3:eb:7d:58:03:1b:
                    a4:21:af:50:92:2e:c4:78:99:bc:a8:14:38:8f:c1:
                    ba:14:16:04:b1:70:b3:d9:dc:1d:0f:f3:15:6b:d0:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E8:37:AA:38:62:55:E7:4D:62:D6:EC:64:1E:84:D4:C1:29:06:84
            X509v3 Authority Key Identifier:
                keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/FD765464FCFC11F0AF0D3BB7376F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:19:47:81:e7:22:6f:41:e0:fc:d7:89:12:99:02:6f:bd:
         b2:62:61:8f:4e:1d:0a:17:88:2b:08:7e:ef:c4:49:23:e6:74:
         1b:3b:61:9d:cb:9b:18:92:ee:47:95:91:c2:c7:82:fd:7d:c5:
         46:a7:0a:76:1f:f2:09:15:68:cb:79:51:c6:5b:c6:d6:09:4b:
         c2:15:e8:25:4b:99:59:78:71:1d:b8:f2:c8:97:15:4c:8b:c2:
         40:f0:3d:a9:d2:34:e5:d3:bc:88:5a:58:e9:10:52:97:0b:6f:
         1b:19:eb:19:9f:e7:88:01:5a:9f:05:69:84:a7:57:19:e1:a5:
         81:7e:fc:c9:08:89:31:88:a7:80:94:24:a0:56:9b:73:64:80:
         7d:9a:dd:d7:fe:d0:6b:6a:d0:59:4e:4c:91:48:2c:52:e3:25:
         ff:36:d6:95:a8:79:13:f3:c0:87:6d:6d:31:ee:4b:ab:4d:c8:
         75:20:a9:3a:bc:66:a2:07:11:33:ff:74:cf:ad:fb:c2:15:91:
         ae:66:58:73:68:7f:3d:1c:c2:9e:bf:f8:b6:9a:55:ad:a6:15:
         de:16:47:ee:b0:71:cb:8e:ac:5b:2b:c5:43:95:83:de:26:9d:
         0b:92:18:ab:47:30:62:fa:b4:46:0c:6d:2f:53:6c:15:fb:6e:
         14:1d:a1:b2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD
NTkwOTY1RTEwHhcNMjYwMjE4MTkxNjEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTIyYS05ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJkNJYDHLC45My8KMrOoPF1dYdzIn9uWPgwzNWoUzUkS7exVJVfekrBhYnqZ
6o9/Wj4alfnnWylM4Rk1x/5l2ocb1cgX3vCIQXqhTogXp6aVc1g1pgctvxRI6t/U
SoeF8o2RmtX5Euknuem6/uIX+Cw3oT3Y9Q0aibTI549n1PnPcQh/czSfheYSlYtp
ZGMFEXkqd7rtdF+xW/ThI5clxPK21JWKjJ5zVOBn4NAMlTipxt9QnRzBUoSvRqd5
Lwu8pLe3c++bYSsFqaNx/XbQH1mI6CJI0qHHQwSj631YAxukIa9Qki7EeJm8qBQ4
j8G6FBYEsXCz2dwdD/MVa9B34QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIjoN6o4
YlXnTWLW7GQehNTBKQaEMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0
OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0JGQ0YvOTU2MzlCRjAyNDhEMTFFQUFEQTIwNTRFQzRGOUFFMDIvRkQ3NjU0NjRG
Q0ZDMTFGMEFGMEQzQkI3Mzc2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ5KVMA0GCSqGSIb3DQEBCwUAA4IBAQCecBlHgecib0Hg/NeJEpkC
b72yYmGPTh0KF4grCH7vxEkj5nQbO2Gdy5sYku5HlZHCx4L9fcVGpwp2H/IJFWjL
eVHGW8bWCUvCFeglS5lZeHEduPLIlxVMi8JA8D2p0jTl07yIWljpEFKXC28bGesZ
n+eIAVqfBWmEp1cZ4aWBfvzJCIkxiKeAlCSgVptzZIB9mt3X/tBratBZTkyRSCxS
4yX/NtaVqHkT88CHbW0x7kurTch1IKk6vGaiBxEz/3TPrfvCFZGuZlhzaH89HMKe
v/i2mlWtphXeFkfusHHLjqxbK8VDlYPeJp0LkhirRzBi+rRGDG0vU2wV+24UHaGy
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:32 2026 by rpki-client