Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/A46B24207D3811EF8EE86E6BC4F9AE02.roa
File:                     A46B24207D3811EF8EE86E6BC4F9AE02.roa (raw, json)
Hash identifier:          MI3L0US3GfHKJApZfCx7/fEFQXf7ufrwtoVQdt1P4qk=
Subject key identifier:   04:D9:F5:E6:27:39:09:EC:5C:0F:96:05:BC:DB:D3:BC:18:2E:A4:BE
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       0244
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/A46B24207D3811EF8EE86E6BC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 02:22:09 +0000
ROA not before:           Tue 03 Feb 2026 02:22:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135345
IP address blocks:        103.179.144.0/24 maxlen: 24
                          103.179.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Feb  3 02:22:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69815bd1-1caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:a3:d6:4c:45:68:8c:d6:1d:ab:e4:41:08:
                    cb:fe:7d:71:9f:f0:c6:06:e9:3a:f7:21:0d:4b:5c:
                    18:e8:35:60:b2:0d:5f:72:53:6e:c4:2e:db:66:3b:
                    5d:8c:bd:b0:e1:40:6a:d1:62:8e:04:b8:b6:29:3c:
                    c2:2a:47:aa:27:a2:ba:e1:4c:bf:5b:1e:00:f2:0e:
                    38:25:53:38:42:dd:a3:07:43:6c:e9:f4:da:32:f1:
                    7a:bb:22:b8:6b:5d:b5:42:90:c3:88:34:6b:38:69:
                    06:36:02:d2:66:62:53:a1:7c:ca:b4:21:37:f1:68:
                    2b:2a:a6:f6:24:1d:20:ba:e9:8d:e9:68:ef:49:ba:
                    62:08:09:6d:f7:42:83:29:3b:df:64:16:74:b9:0c:
                    82:69:64:62:58:3b:92:7b:e2:6a:0f:b0:c6:b2:24:
                    39:ef:ff:1f:a8:cc:d4:5b:3f:38:d0:d2:f9:01:26:
                    10:bd:4a:6f:ef:51:98:af:85:77:13:a8:f0:c0:ed:
                    4e:0e:8c:c2:b8:df:99:2a:3c:ac:80:23:26:5e:7b:
                    cf:78:a8:ac:69:31:e3:c9:8c:4e:07:79:b5:70:68:
                    7e:5f:c4:b7:9a:63:ff:3a:6a:fa:61:40:0a:22:d5:
                    94:fe:b6:4e:2a:68:5c:87:6e:ec:c5:fd:27:44:af:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D9:F5:E6:27:39:09:EC:5C:0F:96:05:BC:DB:D3:BC:18:2E:A4:BE
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/A46B24207D3811EF8EE86E6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:21:30:d6:06:b4:12:6f:62:ff:97:da:7a:2d:95:70:a5:2e:
         c3:9e:bf:27:25:b9:b7:e8:c0:7b:08:0d:45:01:3a:a1:88:c8:
         0d:30:47:ca:10:46:d1:c7:5b:c6:5a:9f:54:7c:af:30:e4:de:
         ab:f6:b6:7d:73:c6:cd:49:65:c3:d5:f0:b6:65:f7:c5:77:31:
         bb:30:27:cc:6f:98:8a:e5:e4:04:d0:eb:37:a3:b6:b6:e7:2f:
         94:de:ac:f4:e4:49:6e:65:5a:17:55:50:19:7d:84:d0:02:44:
         8c:ad:a7:ac:ff:6e:a4:80:d8:63:91:9e:b5:18:64:4e:61:ad:
         81:dc:6d:1d:fe:cf:97:ee:55:79:e5:60:4a:7a:7a:c5:db:f7:
         9f:53:de:6b:18:b5:10:af:83:c2:3a:15:7d:15:c3:30:e8:2b:
         15:29:a5:f4:a4:a7:e0:5f:a8:a0:22:aa:4c:42:79:ef:a2:81:
         66:f4:fc:1b:ba:fb:76:03:1d:aa:10:1f:6e:f8:15:72:3f:c9:
         cf:7d:c7:8a:29:f3:36:ab:36:ce:ac:f0:f9:b7:d9:c1:3e:c1:
         63:61:13:e6:de:a3:1a:b1:b8:4f:b0:f4:7f:3e:c9:93:a4:11:
         0d:22:12:57:a8:b4:11:8b:9f:cf:4c:c3:c8:af:bc:bc:95:29:
         7c:da:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:27 2026 by rpki-client