Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/46A388603C8511F1B3F8BF429A833773.roa
File:                     46A388603C8511F1B3F8BF429A833773.roa (raw, json)
Hash identifier:          mZYjW4E7+ruZtjDqVL5dziuJ6/zQLVY75WoXDppvtjA=
Subject key identifier:   2F:DA:9D:3C:16:9C:7A:7A:F2:32:06:4E:DA:2B:E2:0A:12:C3:98:E7
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       054C
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/46A388603C8511F1B3F8BF429A833773.roa
Signing time:             Mon 20 Apr 2026 06:50:54 +0000
ROA not before:           Mon 20 Apr 2026 06:50:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136501
IP address blocks:        103.177.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
                          rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: Apr 20 06:50:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69e5ccce-7d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:77:ac:43:eb:21:b8:c0:3c:72:8f:e9:31:
                    a4:88:3d:99:cf:a9:20:7a:f6:16:48:85:0a:3e:e6:
                    ed:60:80:ac:98:f2:e8:19:eb:d7:3f:17:ee:0d:d5:
                    9e:7b:e5:e8:3f:18:44:fb:83:3a:c9:4f:f0:9a:6e:
                    11:03:17:33:37:2c:33:3f:9e:19:e5:0a:05:ca:e8:
                    1c:7e:ec:2d:ee:62:71:25:ed:7a:a7:95:9a:2a:3c:
                    78:34:b2:71:9e:a0:92:e9:32:39:b3:c9:52:69:9f:
                    e8:50:9a:59:a6:e8:17:2b:f2:38:ee:3c:b9:27:34:
                    b8:08:75:75:34:0e:8b:38:51:94:80:1b:bb:d7:21:
                    b6:75:9d:36:3b:88:8c:14:ec:56:a9:ac:6c:eb:79:
                    a3:bd:0a:e3:09:73:e0:a5:6c:bf:53:ba:53:08:ab:
                    da:8a:88:39:ef:dd:ee:b7:a0:28:6c:e4:ed:b7:87:
                    21:e4:67:95:10:88:25:c1:8a:54:7b:7b:4a:55:76:
                    b0:9b:70:2b:bf:29:19:7a:21:8f:5a:8d:b8:f0:f7:
                    19:ac:99:f8:a5:9f:ad:ee:51:e6:93:c0:71:5d:f2:
                    06:f0:b5:89:8a:f1:b8:07:78:45:0b:fa:fe:32:3a:
                    cf:c8:83:1d:48:23:ee:72:b6:81:8e:56:e4:9c:e0:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:9D:3C:16:9C:7A:7A:F2:32:06:4E:DA:2B:E2:0A:12:C3:98:E7
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/46A388603C8511F1B3F8BF429A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:00:b3:51:46:62:a4:5a:80:24:cc:62:75:4f:8f:00:2b:ec:
         42:2f:c9:ae:49:38:7e:5d:b6:6c:5c:02:76:44:26:ee:4d:07:
         62:26:f5:7f:5e:34:01:a6:42:b2:fb:f2:71:19:5d:20:6f:a7:
         e7:48:e1:d6:bd:40:b9:29:5c:e5:5a:cf:96:d9:54:b4:66:8d:
         5a:b8:3d:1e:c3:72:dc:ae:c0:b8:90:c2:dd:52:33:fa:c0:e6:
         2a:dc:54:8e:9f:67:ab:31:99:e8:55:c9:66:74:c2:2d:ac:ed:
         c5:0d:79:3c:31:93:ea:11:55:02:e9:b4:09:c3:d0:5e:75:7c:
         f0:20:93:73:2a:30:74:99:26:ac:e2:7d:dd:5f:ff:45:29:96:
         bd:ab:b3:9c:fd:6d:fb:a4:a3:d4:5f:3d:9b:08:18:97:40:9a:
         92:c6:bd:5d:cb:ea:f1:51:51:15:77:03:25:3a:13:c0:73:56:
         34:47:b1:c6:3f:60:c8:39:47:59:4c:86:3b:87:9e:93:2c:f4:
         cf:b9:dc:55:7d:3c:8c:2f:6c:8b:de:0b:d7:5a:78:42:c7:3a:
         70:a1:fd:97:53:4d:30:e4:f0:8f:ef:8a:71:32:f8:4e:3d:fa:
         55:57:0f:92:15:92:74:dd:38:9c:ed:1a:f6:94:26:69:fc:10:
         c3:e8:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:51 2026 by rpki-client