Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/46C1646C781611ECADCDAB0EC4F9AE02.roa
File:                     46C1646C781611ECADCDAB0EC4F9AE02.roa (raw, json)
Hash identifier:          IMfYsXwyiLDcmEkXswuGvVi8IIoBnzysnNL2P3tEWyM=
Subject key identifier:   BD:9B:D0:37:00:EB:BE:A2:5B:A6:56:8A:07:3E:CD:78:90:CD:F4:0C
Certificate issuer:       /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
Certificate serial:       047C
Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/46C1646C781611ECADCDAB0EC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 00:20:02 +0000
ROA not before:           Tue 03 Feb 2026 00:20:02 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149310
IP address blocks:        103.178.118.0/23 maxlen: 23
                          103.178.118.0/24 maxlen: 24
                          103.178.119.0/24 maxlen: 24
                          2400:4660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
        Validity
            Not Before: Feb  3 00:20:02 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69813f32-9a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:65:9c:2c:ea:dc:8f:3b:68:66:dd:93:ce:
                    55:ee:2e:c1:d9:f9:df:77:0e:cb:56:5f:82:47:4e:
                    59:78:20:7c:2d:48:26:3e:30:80:aa:fc:02:cc:3b:
                    b6:73:94:c8:77:65:97:66:97:f0:13:58:5d:a7:ee:
                    7c:8f:9f:26:70:a7:2e:3e:e5:e9:24:7b:67:21:68:
                    75:49:eb:01:c4:52:4e:cd:d4:48:6e:ff:f9:ca:e8:
                    ca:d7:38:b4:0a:20:c3:8d:68:47:7f:b6:56:c7:b8:
                    20:e9:cd:55:4b:ee:d0:3e:25:e2:28:90:03:30:7b:
                    11:2d:b8:73:e6:82:10:dd:bb:f6:83:c9:85:f7:ad:
                    e3:c8:a0:48:10:b5:53:2b:d3:28:5e:e9:47:31:97:
                    5d:50:e8:12:10:7b:c1:3d:b9:19:88:f5:4c:8b:45:
                    08:8d:0b:65:77:f7:57:43:df:92:69:d3:fa:7b:ba:
                    8c:a1:1e:85:4e:89:1c:c5:c7:bd:fb:0c:0d:94:d4:
                    3b:40:30:88:8b:d5:df:a1:7b:9e:28:72:9f:7a:4e:
                    a0:25:24:13:5e:9f:c7:88:e9:7e:5a:fd:40:4a:ee:
                    c8:54:ef:8e:2f:62:c6:a2:37:8c:60:47:91:d2:1b:
                    79:c6:a5:35:d8:f6:86:9f:d5:89:2b:fa:92:fb:7e:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9B:D0:37:00:EB:BE:A2:5B:A6:56:8A:07:3E:CD:78:90:CD:F4:0C
            X509v3 Authority Key Identifier:
                keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/46C1646C781611ECADCDAB0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.118.0/23
                IPv6:
                  2400:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:a1:a9:c3:26:62:c5:22:c7:85:65:dd:2d:cd:ab:33:ef:
         a7:f0:f4:e8:27:34:3f:89:29:b9:b9:2a:29:93:d1:79:fa:93:
         2e:67:20:1a:77:dc:5b:be:54:30:1b:4a:06:61:2d:57:09:b7:
         77:37:c3:25:fb:35:f4:51:c2:1d:da:0b:da:86:9d:35:1d:a7:
         7a:ce:80:52:2d:3f:78:4c:71:6c:ba:4f:d7:82:a5:d3:14:4a:
         c9:7b:0a:cf:e2:71:c6:84:57:b2:23:fe:8f:ae:17:b6:5f:92:
         74:ad:a0:ca:2c:97:97:81:cc:4d:75:c1:d0:f9:b5:5e:70:00:
         63:a5:e5:b2:53:51:79:5f:36:02:d1:61:2d:32:b3:6c:6c:3c:
         36:47:35:5e:c2:73:0a:00:33:3f:8b:8d:9d:74:81:8b:90:65:
         2e:fe:d4:cf:ae:9d:44:b6:98:84:ad:85:b4:95:86:52:47:a0:
         da:f1:a4:20:7c:01:5c:2f:3d:2c:79:e0:7e:a0:d8:84:be:f1:
         05:d4:fe:e1:a7:25:f5:e0:1c:82:dc:94:a5:a6:70:e1:a4:d9:
         06:d4:1e:6e:8a:e5:04:8f:97:54:8e:b9:7a:60:8c:a9:f7:d8:
         8a:bc:26:4a:51:94:2c:55:08:1f:f3:dc:12:57:73:e8:ad:70:
         d9:bc:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:29:58 2026 by rpki-client