Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/46AF15AA9F6D11F09AF30234C4F9AE02.roa
File:                     46AF15AA9F6D11F09AF30234C4F9AE02.roa (raw, json)
Hash identifier:          IuD9Z2/ZzzbGta3CCC1+WVsV393Sp75NRm7p+Oi0EWc=
Subject key identifier:   D2:20:34:A1:2F:6A:5A:A5:56:82:6F:D7:84:84:25:97:75:05:B5:74
Certificate issuer:       /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
Certificate serial:       064E
Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/46AF15AA9F6D11F09AF30234C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 23:43:07 +0000
ROA not before:           Fri 02 Oct 2026 23:43:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     49304
IP address blocks:        103.170.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl
                          rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0
        Validity
            Not Before: Oct  2 23:43:07 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac0418a-e42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:b9:ba:f8:5c:4a:94:3a:97:e9:8f:5c:ab:
                    54:46:f4:f6:10:c6:83:51:a6:bb:0f:69:9b:0d:03:
                    8e:37:1e:7a:fa:73:a5:b6:bf:aa:7e:14:c9:0e:1d:
                    d1:a5:c1:7d:56:e2:ed:a5:c8:11:46:08:f2:fe:b1:
                    a7:ff:59:d9:8a:88:1c:43:1e:10:37:3b:10:c4:5b:
                    b6:96:31:e8:f3:9a:3e:4c:5c:d5:f8:85:3e:25:58:
                    27:87:ef:f9:2b:e0:32:16:38:70:af:02:eb:7d:86:
                    56:c4:27:56:9d:67:fa:9e:43:5c:f5:3f:87:38:05:
                    17:21:52:96:03:06:47:9c:d6:cc:4d:79:9a:1b:34:
                    d3:da:5f:32:6e:bb:cd:dd:c7:a7:dc:46:34:32:e5:
                    b4:f9:97:89:a8:c8:a6:a2:78:11:96:0e:a0:63:55:
                    6c:a4:c3:e6:68:11:09:6e:df:6b:10:a9:4f:34:d8:
                    2a:b5:c3:1a:8b:7b:e7:ea:19:89:2c:61:ba:14:ee:
                    ca:0e:b3:f5:25:14:7a:5f:5e:75:dd:b4:44:0f:c7:
                    44:00:1b:c3:fe:c2:ca:ab:42:b1:7e:57:ca:e9:0a:
                    4d:87:a4:59:92:3f:9f:76:dd:71:01:7e:f9:fb:93:
                    a7:0b:09:c6:32:9c:2a:36:67:b4:0a:6a:48:02:12:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:34:A1:2F:6A:5A:A5:56:82:6F:D7:84:84:25:97:75:05:B5:74
            X509v3 Authority Key Identifier:
                keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/46AF15AA9F6D11F09AF30234C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:83:06:50:41:47:f9:aa:0d:6f:16:fe:59:73:c0:75:c2:3e:
         5a:79:a5:31:80:ac:f8:ea:c9:a7:09:7b:64:f4:e7:f0:59:33:
         5a:40:20:87:24:65:5b:d5:37:f5:98:62:d5:af:10:7c:45:e9:
         1a:c9:ee:e8:aa:ce:8c:e2:d4:dc:71:db:4a:68:31:a5:ea:fe:
         4f:2b:78:54:63:d1:5c:0d:db:84:4d:05:0c:af:64:d0:62:8b:
         ec:b9:42:c5:13:90:80:f1:70:99:b4:07:5b:66:6f:21:d4:17:
         21:70:a3:5b:6f:21:77:c3:d8:88:87:74:74:cc:2a:86:b1:32:
         79:9b:be:9e:9d:6c:13:7b:89:ca:38:0f:b2:7f:85:21:25:cb:
         06:61:c6:c2:17:56:72:54:1f:3e:17:5e:ba:95:7a:2a:16:04:
         a9:8e:0d:c0:5e:2b:cb:b2:37:cf:cd:79:8f:2b:c5:8e:ac:c8:
         b7:ff:0f:fa:46:70:b1:11:5d:24:33:52:d5:0f:2f:b2:b4:1b:
         7a:49:e4:f8:9d:b5:56:99:a3:36:f0:d6:d9:8e:7d:bf:1c:75:
         a6:bc:29:84:ed:25:98:78:f0:db:71:f4:fa:f0:af:4d:74:d2:
         c2:23:4c:58:6f:3d:10:d5:33:40:54:54:93:d3:32:84:3d:21:
         7f:e0:85:d5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw
QjVBM0NERDAwHhcNMjYxMDAyMjM0MzA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwNDE4YS1lNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRe5uvhcSpQ6l+mPXKtURvT2EMaDUaa7D2mbDQOONx56+nOltr+qfhTJDh3R
pcF9VuLtpcgRRgjy/rGn/1nZiogcQx4QNzsQxFu2ljHo85o+TFzV+IU+JVgnh+/5
K+AyFjhwrwLrfYZWxCdWnWf6nkNc9T+HOAUXIVKWAwZHnNbMTXmaGzTT2l8ybrvN
3cen3EY0MuW0+ZeJqMimongRlg6gY1VspMPmaBEJbt9rEKlPNNgqtcMai3vn6hmJ
LGG6FO7KDrP1JRR6X1513bRED8dEABvD/sLKq0KxflfK6QpNh6RZkj+fdt1xAX75
+5OnCwnGMpwqNme0CmpIAhJLTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNIgNKEv
alqlVoJv14SEJZd1BbV0MB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0
N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJDMTQvMjJEQUVDQzhGNDdBMTFFQjkzQ0VGRjJGQzRGOUFFMDIvNDZBRjE1QUE5
RjZEMTFGMDlBRjMwMjM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6rSMA0GCSqGSIb3DQEBCwUAA4IBAQAtgwZQQUf5qg1vFv5Zc8B1
wj5aeaUxgKz46smnCXtk9OfwWTNaQCCHJGVb1Tf1mGLVrxB8Rekaye7oqs6M4tTc
cdtKaDGl6v5PK3hUY9FcDduETQUMr2TQYovsuULFE5CA8XCZtAdbZm8h1BchcKNb
byF3w9iIh3R0zCqGsTJ5m76enWwTe4nKOA+yf4UhJcsGYcbCF1ZyVB8+F166lXoq
FgSpjg3AXivLsjfPzXmPK8WOrMi3/w/6RnCxEV0kM1LVDy+ytBt6SeT4nbVWmaM2
8NbZjn2/HHWmvCmE7SWYePDbcfT68K9NdNLCI0xYbz0Q1TNAVFST0zKEPSF/4IXV
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:31:29 2026 by rpki-client