Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/46BF7E7CFA0611ED802A1C29C4F9AE02.roa
File:                     46BF7E7CFA0611ED802A1C29C4F9AE02.roa (raw, json)
Hash identifier:          UyrWlJ/K5ewEnl3nB2amv545KdOMLbjx4FV1Gagszyg=
Subject key identifier:   5D:A8:E9:48:7D:8E:8F:30:51:FD:3A:76:DC:E6:B3:A9:18:66:F0:3C
Certificate issuer:       /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial:       0233
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/46BF7E7CFA0611ED802A1C29C4F9AE02.roa
Signing time:             Fri 15 May 2026 03:33:50 +0000
ROA not before:           Fri 15 May 2026 03:33:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151045
IP address blocks:        103.119.174.0/23 maxlen: 23
                          103.119.174.0/24 maxlen: 24
                          103.119.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
                          rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
        Validity
            Not Before: May 15 03:33:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a06941e-c0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:47:f1:38:b8:6a:30:83:45:8d:e7:c7:14:8a:
                    33:28:34:ce:ec:b1:1f:fd:9e:f8:06:be:08:61:4f:
                    3d:ff:d6:56:e6:dc:19:70:36:45:11:77:be:dd:36:
                    55:aa:86:5f:2f:dd:de:68:d9:22:67:f3:65:25:25:
                    8d:aa:ed:01:54:84:8d:70:9d:b9:42:e2:2d:8a:60:
                    ae:16:fc:cc:2d:f7:95:5c:a4:91:38:33:13:8f:20:
                    e9:d1:9f:3e:c5:3b:cd:30:6e:0a:f9:0b:1c:da:e6:
                    b4:7f:d7:e4:22:4f:30:52:2a:be:c6:69:7f:23:c2:
                    ec:e0:c5:42:56:1a:3b:03:6e:5d:f3:42:be:89:d4:
                    57:74:bd:54:ae:dc:13:68:bc:86:13:5c:0f:d5:7f:
                    45:2b:51:36:7e:35:4b:3b:ee:a9:54:b5:04:b9:fa:
                    9b:76:f2:ce:dd:93:03:7c:e7:b6:01:b3:80:5f:ae:
                    0f:72:44:75:01:9a:95:fb:d6:57:33:f1:2b:7c:a2:
                    84:04:b4:f1:7a:41:f8:a3:ac:7d:c8:3b:4d:93:92:
                    f3:3c:99:3b:ec:1d:a3:c9:98:fe:02:af:e5:4f:9c:
                    c4:30:31:95:af:c0:a9:65:f1:a9:f9:ff:bd:33:64:
                    f2:f4:f5:f9:21:55:4d:c7:25:7f:df:61:fe:2f:35:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:E9:48:7D:8E:8F:30:51:FD:3A:76:DC:E6:B3:A9:18:66:F0:3C
            X509v3 Authority Key Identifier:
                keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/46BF7E7CFA0611ED802A1C29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:ff:d2:cf:4e:e7:78:4f:99:07:58:76:b3:26:e1:bd:45:
         db:14:f8:8c:d0:85:78:27:e2:8f:46:db:16:f5:b9:aa:fe:02:
         54:30:69:0f:fc:a0:27:f2:ef:0e:9c:77:16:60:a3:4a:d9:9e:
         3a:22:cf:1b:c1:15:9b:12:f6:54:b0:4d:60:3e:4d:24:aa:ad:
         21:52:48:56:04:6c:33:e5:27:7b:2c:52:d9:b9:47:af:f9:fc:
         56:d0:83:eb:58:4c:e7:14:f2:21:c2:bf:07:68:6a:06:ed:7c:
         dd:6d:8c:07:53:22:d8:59:e4:49:0f:64:37:83:fb:fc:72:b4:
         93:df:49:d1:12:3d:71:fa:69:a9:bd:c9:2e:10:21:20:da:5d:
         fc:99:8e:d9:7f:d6:5a:b6:de:4e:19:08:28:f8:04:5d:5c:56:
         fe:57:d4:67:82:72:76:5f:ee:d2:92:a6:51:09:95:25:41:84:
         89:d4:d8:d3:c6:45:a1:89:93:d3:e7:92:28:0d:c7:a8:1b:c7:
         1e:3d:1d:d2:03:92:33:90:97:54:bb:a1:55:98:1d:0f:29:0c:
         1f:e0:b0:7e:e4:fd:ad:56:4d:b5:77:cb:b4:2f:37:55:81:03:
         c5:79:73:2f:10:34:ae:0a:2c:f1:d8:2d:00:b3:68:1f:8d:64:
         7d:5d:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:36:39 2026 by rpki-client