Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/46DE5C7875DD11ED86945E46C4F9AE02.roa
File:                     46DE5C7875DD11ED86945E46C4F9AE02.roa (raw, json)
Hash identifier:          7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=
Subject key identifier:   06:7C:C2:63:36:D1:A7:FB:05:E8:2A:3D:3B:28:2D:BC:72:0A:91:1A
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       0262
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/46DE5C7875DD11ED86945E46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:58:22 +0000
ROA not before:           Fri 03 Oct 2025 02:28:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     38066
IP address blocks:        141.243.8.0/23 maxlen: 24
                          141.243.20.0/23 maxlen: 24
                          141.243.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 01:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Oct  3 02:28:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a41bce-57c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:0f:ec:5f:72:3e:b1:a6:de:a2:29:84:87:
                    5e:7c:68:fe:89:5a:bc:c0:2a:4e:22:44:4f:59:d9:
                    9f:89:64:f6:4a:b9:b0:59:26:4c:1d:a6:0a:c9:00:
                    35:0d:5c:68:d0:5b:56:e6:d6:35:77:54:ed:b7:d5:
                    97:79:11:e7:47:90:e3:a8:57:28:7c:8e:1c:11:a7:
                    8f:91:8b:07:dc:15:42:fa:14:2e:ac:69:82:9b:43:
                    12:66:84:ea:67:58:e3:30:f8:ea:c0:02:e8:9d:19:
                    7e:45:a9:df:f4:8b:0a:4d:cb:70:4c:d2:ae:61:da:
                    3f:85:da:06:9c:44:3c:f9:a9:82:c5:e1:e3:cd:b4:
                    00:c8:44:e3:1e:a7:13:c9:95:ea:ca:1e:fc:e4:0c:
                    47:a3:8c:48:57:5d:f0:20:1c:17:86:85:d6:e8:98:
                    c8:bc:83:28:4d:be:7b:60:cc:7f:73:7e:12:c5:70:
                    ac:07:38:cb:de:b0:d7:ad:2c:b3:de:d3:f0:6b:f8:
                    91:51:f0:55:db:71:7e:dc:fd:0c:96:b1:ab:13:4f:
                    61:c4:f0:4b:da:e6:63:57:0c:6f:c2:1a:16:e8:1c:
                    3e:0d:0f:e6:92:50:0e:b0:01:36:5d:e4:d9:da:cf:
                    6c:c5:07:b3:a4:ca:9f:48:2c:08:6f:27:80:a9:71:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:C2:63:36:D1:A7:FB:05:E8:2A:3D:3B:28:2D:BC:72:0A:91:1A
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/46DE5C7875DD11ED86945E46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.243.8.0/23
                  141.243.20.0/23
                  141.243.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:6d:0d:b2:5f:da:99:18:ad:74:d6:ff:dd:65:26:71:a3:
         c3:a6:c2:85:f0:44:a4:11:a9:f4:a1:57:ef:e8:51:03:63:fb:
         8d:e5:9d:ed:56:62:73:1d:00:e0:f9:71:fa:f5:87:0c:0b:2e:
         0e:7e:19:82:67:c0:78:20:83:f1:b4:d2:a2:a3:83:9c:b0:95:
         33:84:a5:53:c8:b7:9c:29:44:89:06:b5:68:ef:e4:0a:1a:84:
         8c:38:16:f5:7a:2a:ed:c3:60:91:b2:69:d7:b2:6b:5a:2c:52:
         1f:e2:ab:bb:5e:01:3c:52:0a:aa:b0:e3:9e:d4:ff:08:65:90:
         34:19:d8:ab:b5:5b:1c:44:b7:e5:1b:31:d6:00:85:eb:1a:6d:
         5b:ab:ff:e3:27:1c:3e:50:4b:05:14:2c:4d:f8:3d:c0:3b:af:
         6b:56:fe:79:88:27:80:64:e1:fa:68:ae:a4:5d:a1:a6:70:55:
         b2:83:a6:75:df:ac:15:3f:2f:85:24:ba:eb:94:f5:b0:bd:ba:
         33:0d:14:7b:73:98:bb:6b:db:3b:8e:8f:8d:ea:8a:e9:c5:7f:
         eb:1c:36:ef:ae:95:f8:e7:1a:ef:85:5d:8c:1c:ac:6c:0a:4a:
         74:02:87:26:3a:9f:05:49:a2:1b:0a:e5:fe:e3:3d:7a:f4:96:
         b4:e6:bb:11
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2
QkI5QTRFQTYwHhcNMjUxMDAzMDIyODI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWJjZS01N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqB4P7F9yPrGm3qIphIdefGj+iVq8wCpOIkRPWdmfiWT2SrmwWSZMHaYKyQA1
DVxo0FtW5tY1d1Ttt9WXeRHnR5DjqFcofI4cEaePkYsH3BVC+hQurGmCm0MSZoTq
Z1jjMPjqwALonRl+Ranf9IsKTctwTNKuYdo/hdoGnEQ8+amCxeHjzbQAyETjHqcT
yZXqyh785AxHo4xIV13wIBwXhoXW6JjIvIMoTb57YMx/c34SxXCsBzjL3rDXrSyz
3tPwa/iRUfBV23F+3P0MlrGrE09hxPBL2uZjVwxvwhoW6Bw+DQ/mklAOsAE2XeTZ
2s9sxQezpMqfSCwIbyeAqXHf0QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAZ8wmM2
0af7BegqPTsoLbxyCpEaMB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1
RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTFCMDAvMTNDQTUxOTI3NUQ5MTFFREFCNTlDNDQyQzRGOUFFMDIvNDZERTVDNzg3
NUREMTFFRDg2OTQ1RTQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQBjfMIAwQBjfMUAwQCjfMgMA0GCSqGSIb3DQEBCwUAA4IBAQCcJ20N
sl/amRitdNb/3WUmcaPDpsKF8ESkEan0oVfv6FEDY/uN5Z3tVmJzHQDg+XH69YcM
Cy4OfhmCZ8B4IIPxtNKio4OcsJUzhKVTyLecKUSJBrVo7+QKGoSMOBb1eirtw2CR
smnXsmtaLFIf4qu7XgE8UgqqsOOe1P8IZZA0GdirtVscRLflGzHWAIXrGm1bq//j
Jxw+UEsFFCxN+D3AO69rVv55iCeAZOH6aK6kXaGmcFWyg6Z136wVPy+FJLrrlPWw
vbozDRR7c5i7a9s7jo+N6orpxX/rHDbvrpX45xrvhV2MHKxsCkp0AocmOp8FSaIb
CuX+4z169Ja05rsR
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:13:33 2026 by rpki-client