Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/5040F876CA3D11F1957F2AC55611F970.roa
File:                     5040F876CA3D11F1957F2AC55611F970.roa (raw, json)
Hash identifier:          nqBzNzVUyJHUgVVQaGP5kgRZOOGhF7qxORcfqd20tbg=
Subject key identifier:   7F:81:22:E6:A7:3B:24:19:E5:8F:D5:3E:5B:90:07:92:E8:35:A0:4F
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B6E
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/5040F876CA3D11F1957F2AC55611F970.roa
Signing time:             Sat 17 Oct 2026 15:13:31 +0000
ROA not before:           Sat 17 Oct 2026 15:13:31 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140900
IP address blocks:        103.203.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2926 (0xb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Oct 17 15:13:31 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad3909b-5cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:2a:43:9e:78:47:0a:1e:5e:e1:60:5a:ef:
                    77:3c:93:fc:df:e1:57:d4:49:a0:d8:ea:ea:78:b5:
                    c9:91:07:ea:e3:f0:e3:4f:3f:d5:f8:1f:5e:c6:19:
                    66:3e:9b:df:c0:9d:11:01:24:e2:f5:74:af:a6:9e:
                    a0:b9:7a:27:f6:fe:92:d2:bc:c4:3b:67:81:e8:e6:
                    d6:08:f4:fb:15:a2:09:84:90:5d:7d:c2:74:3b:8f:
                    8e:dc:63:84:ce:11:41:7d:06:f3:d8:72:bd:b0:a2:
                    a3:50:3b:ef:81:04:c9:55:09:0d:b5:7b:44:47:44:
                    d3:b9:0b:61:c1:78:f9:d1:96:8c:6d:f7:e8:41:09:
                    71:05:b3:5c:fd:4f:73:40:36:42:98:82:57:cc:bc:
                    63:45:84:49:ea:c5:bf:22:e0:82:7a:c4:6e:10:44:
                    aa:e1:81:9e:e1:a2:79:95:2a:97:c4:4a:78:93:dd:
                    14:3b:d7:98:97:69:ea:4f:a9:8d:8a:ab:0e:07:4d:
                    ec:0f:ef:2f:68:b0:3f:d2:2b:e9:be:86:ca:c9:b7:
                    ab:77:b5:78:22:a3:4c:36:1e:eb:82:da:1f:42:62:
                    2a:c7:bb:39:b0:af:de:e0:85:97:27:b7:aa:17:62:
                    e4:3e:4c:26:7a:a3:05:d8:ed:10:0c:3e:86:c5:33:
                    bd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:81:22:E6:A7:3B:24:19:E5:8F:D5:3E:5B:90:07:92:E8:35:A0:4F
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/5040F876CA3D11F1957F2AC55611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:14:f4:13:b2:d3:f8:ce:4a:b8:04:37:ca:52:6a:5e:27:75:
         d8:9b:a1:52:54:34:a5:e8:00:f5:05:75:e6:d1:a8:3f:93:c0:
         b2:6a:b3:4c:4d:a6:a1:01:a9:fe:9f:0a:9b:2b:30:91:a8:fe:
         d3:1c:e0:c8:54:1e:e3:16:c4:15:cd:6c:fc:04:7a:03:9b:e8:
         ea:1e:52:1c:74:93:fb:b8:87:8e:41:9d:cc:12:54:57:c8:4a:
         af:81:8c:d9:2e:29:30:c8:bf:67:5b:9c:82:25:d8:1f:ab:ba:
         c2:35:83:d6:6c:f5:74:e1:c0:e5:7b:54:99:cf:14:f2:af:16:
         e8:ba:d8:f9:2b:72:bd:62:dd:e9:ba:98:9c:c3:b9:5c:73:7d:
         8a:e1:a6:80:87:88:fb:1e:12:9d:ea:e4:ba:2b:5e:2d:ef:c3:
         5b:08:43:e8:90:a3:74:f6:9e:7f:43:e2:03:26:f1:59:f8:e2:
         de:99:f0:25:79:90:a9:e7:ff:7f:6e:1b:8d:4c:f5:d4:fc:78:
         c0:93:03:5c:de:dc:68:86:72:d5:7e:95:34:88:b9:40:3b:1c:
         c9:a6:a1:ed:26:ec:4d:5e:3f:a4:08:e6:72:62:1e:71:6c:36:
         b4:88:cf:df:88:03:73:66:ca:0e:17:89:87:72:d0:16:b4:38:
         2a:77:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:55 2026 by rpki-client