Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F6DBFB92B3F311F0929DA35BC4F9AE02.roa
File:                     F6DBFB92B3F311F0929DA35BC4F9AE02.roa (raw, json)
Hash identifier:          bGSs+GuQ8roH3KjNYjFOeAuN1jZZUS7buyDDBU1Jy+0=
Subject key identifier:   B0:7A:97:01:85:3A:61:AB:51:CB:CE:54:EA:6B:F5:DF:8D:39:EA:C8
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0607
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F6DBFB92B3F311F0929DA35BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:27:36 +0000
ROA not before:           Fri 02 Jan 2026 23:18:49 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     206264
IP address blocks:        103.46.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Jan  2 23:18:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a48518-fd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:d4:d9:bd:59:5c:60:2a:b5:83:40:f6:aa:
                    b3:86:3b:66:3a:93:55:48:63:24:43:a3:56:03:e7:
                    55:f0:ea:90:5f:e0:65:3a:da:47:d3:10:f5:69:c9:
                    3a:cb:68:21:f3:eb:4d:d0:15:4b:1b:a7:ae:09:21:
                    75:fb:20:ce:c8:65:2c:79:4b:dd:1a:04:bf:36:a3:
                    97:66:56:b7:a9:40:f0:09:fe:7c:99:5b:65:15:d1:
                    ad:62:67:94:27:03:f1:f5:03:b6:65:b1:f7:71:64:
                    8c:75:91:7b:71:74:da:f5:17:73:7f:04:d0:f1:20:
                    cc:e2:46:40:03:2f:17:99:ab:2a:f0:00:c4:60:70:
                    a9:65:cb:53:68:e1:e2:2a:84:5e:d0:12:cf:52:5f:
                    58:00:43:9c:a2:fc:ff:6f:26:3d:cf:7f:e4:4a:32:
                    16:2d:af:63:83:6f:52:34:42:e6:d5:10:4b:b5:1f:
                    f2:80:68:2d:18:35:45:f3:b2:8b:02:a1:63:0a:50:
                    e5:b4:26:16:7c:ed:5b:8c:6b:3e:1b:4f:bc:c2:c7:
                    db:6a:40:a6:45:b4:21:4d:55:e4:28:ce:27:3c:1b:
                    dd:08:6b:16:69:09:37:71:a1:c1:0b:53:56:75:28:
                    3c:3f:3e:9d:96:62:e0:19:bb:cf:90:4b:9b:d6:53:
                    ef:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7A:97:01:85:3A:61:AB:51:CB:CE:54:EA:6B:F5:DF:8D:39:EA:C8
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F6DBFB92B3F311F0929DA35BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:5a:7d:ca:a9:0c:8a:18:f0:5f:2e:c5:29:c4:f1:6a:49:
         35:25:79:29:46:86:ff:c3:37:a9:6e:82:3f:b9:e4:d7:6f:f6:
         4b:65:aa:90:29:db:2e:9e:e0:af:34:d3:8a:0a:98:53:8c:78:
         ac:7c:a8:5e:99:59:5d:ca:ea:6d:5a:af:d4:3f:ee:b0:14:b6:
         e2:66:2b:91:0d:8c:1a:85:3b:60:05:33:d7:e4:61:db:a2:ad:
         42:82:20:db:23:4b:4e:cb:f6:51:ad:1c:a9:9e:f3:0e:f1:ee:
         3d:59:d0:c6:94:83:89:2b:0f:4b:bd:04:12:2c:67:1e:2e:c1:
         51:1a:93:cd:f1:8f:75:be:ac:91:c8:20:24:61:60:1e:a7:50:
         12:a9:1f:a4:ae:25:3e:01:aa:4a:b1:87:07:75:70:ff:14:bf:
         02:a6:07:c4:df:47:6d:00:29:a2:f1:0b:4d:99:52:0b:1c:a8:
         b2:4c:08:96:61:30:91:8c:c2:46:54:fe:4d:a0:4b:cb:a7:a1:
         7d:f9:c0:a4:05:6d:6c:5f:ce:44:57:34:4b:ef:d9:ad:b4:60:
         6e:9d:fc:d6:de:ff:f2:ab:b1:8a:52:59:be:c3:3b:73:bc:0c:
         4a:01:81:a1:71:6a:f0:8b:ad:a3:19:5c:9d:ec:ab:91:b5:05:
         5d:40:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:02 2026 by rpki-client