Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/46BCC40E4F7E11F190CC27DCCD833773.roa
File:                     46BCC40E4F7E11F190CC27DCCD833773.roa (raw, json)
Hash identifier:          NrcbhAN9vhspenj+63KwCURkbfgQlmMQRjoTCvF/mlo=
Subject key identifier:   8F:CB:26:A5:ED:E9:DC:45:8E:A2:2A:48:7C:D5:06:E7:1F:12:EA:41
Certificate issuer:       /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial:       62
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/46BCC40E4F7E11F190CC27DCCD833773.roa
Signing time:             Thu 14 May 2026 10:18:40 +0000
ROA not before:           Thu 14 May 2026 10:18:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131460
IP address blocks:        103.4.156.0/24 maxlen: 24
                          103.4.157.0/24 maxlen: 24
                          103.4.158.0/24 maxlen: 24
                          103.4.159.0/24 maxlen: 24
                          123.242.200.0/24 maxlen: 24
                          123.242.201.0/24 maxlen: 24
                          123.242.202.0/24 maxlen: 24
                          123.242.203.0/24 maxlen: 24
                          123.242.204.0/24 maxlen: 24
                          123.242.205.0/24 maxlen: 24
                          123.242.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
                          rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
        Validity
            Not Before: May 14 10:18:40 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a05a180-10b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:cc:8e:d2:75:ce:29:b0:6e:8a:4c:60:12:
                    4a:d1:d8:4d:88:81:bc:32:9f:81:90:f2:cc:d5:5c:
                    ec:1a:bc:54:12:4c:ab:ee:fe:e5:0d:25:25:85:9e:
                    25:f3:f3:48:a7:d6:76:c7:9a:e3:18:cd:4c:d4:df:
                    51:eb:6f:9f:8d:ef:b1:c4:89:94:01:eb:e2:a5:5a:
                    52:4e:b3:59:99:d3:90:de:d1:28:bd:c8:66:b8:49:
                    47:e2:ca:4b:cb:65:00:a9:c5:69:16:7c:fe:be:6d:
                    ea:b8:47:93:1f:2a:c6:05:da:10:d0:5d:65:18:6c:
                    65:cc:6e:12:f0:0b:4b:89:dc:24:dd:24:2a:24:14:
                    29:0d:08:98:d0:e6:aa:f2:eb:24:01:e5:e5:f3:fa:
                    a1:1e:e2:7b:2f:6b:60:aa:39:fb:50:69:73:51:e9:
                    a3:7d:27:2f:99:41:9a:bf:cd:3a:9e:3a:69:9b:3b:
                    36:1e:64:ea:5f:8e:39:74:25:31:0c:30:b0:c9:42:
                    2c:2d:19:60:70:b2:95:d7:04:bc:3b:35:87:2a:23:
                    66:94:c7:c0:68:5e:f7:d5:29:88:a6:05:ff:1d:82:
                    ea:28:a9:f2:00:e5:01:2c:24:13:90:dc:98:79:22:
                    8f:34:20:29:ad:a5:d1:eb:c3:74:0c:b2:3f:be:2c:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CB:26:A5:ED:E9:DC:45:8E:A2:2A:48:7C:D5:06:E7:1F:12:EA:41
            X509v3 Authority Key Identifier:
                keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/46BCC40E4F7E11F190CC27DCCD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.156.0/22
                  123.242.200.0-123.242.206.255

    Signature Algorithm: sha256WithRSAEncryption
         32:88:27:c0:9d:a4:d7:08:ec:7d:d7:40:57:0a:8a:d6:4f:11:
         ca:a6:7c:31:5e:fd:fa:6c:0c:3b:f9:e5:59:72:36:58:24:41:
         f1:1a:a7:f6:b2:ed:2b:2d:fb:87:a9:2c:43:94:79:67:24:9c:
         98:ea:0f:72:37:6c:c3:79:0f:cf:38:74:bf:41:42:f7:8d:06:
         ea:e8:05:43:62:58:04:17:6c:87:f1:07:5a:a4:c3:0f:ec:35:
         b3:dd:08:5c:2d:b4:88:63:e5:88:8e:58:8f:d8:d8:00:63:16:
         81:38:b1:1f:86:db:a1:b8:86:5f:f6:c1:33:94:ed:93:ad:f1:
         f1:af:4f:e7:8f:b8:7c:3a:76:c2:d0:9a:8a:20:14:67:52:37:
         26:e9:77:02:19:c2:86:3b:7a:4b:e6:ed:3a:07:70:58:95:e0:
         77:58:e6:dc:a0:37:4f:01:53:ad:42:fd:59:25:c0:89:5d:10:
         60:77:87:4e:99:03:f2:8b:7c:8e:2e:d2:c6:f5:59:fe:f6:e1:
         f9:54:be:89:c7:56:14:80:02:fb:01:7c:3a:12:e6:10:a1:1a:
         5e:cd:ac:08:74:e4:a4:7c:01:d6:ac:18:fd:51:cd:11:a5:58:
         57:c7:2a:e0:c8:8a:f4:89:0b:59:aa:2f:ac:45:83:30:a8:23:
         2f:81:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:12:07 2026 by rpki-client