Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa
File:                     46779D40040411EC867E3B86C4F9AE02.roa (raw, json)
Hash identifier:          Fi4/23IfWZtzTHuAIXn9dj26KpLpKOigetBKdKNjLks=
Subject key identifier:   C1:88:9C:9B:AA:3D:46:B0:31:DB:C4:7D:C9:59:07:41:C1:9D:B2:AB
Certificate issuer:       /CN=A91D8D21/serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE
Certificate serial:       0623
Authority key identifier: 57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 23:43:26 +0000
ROA not before:           Wed 30 Sep 2026 23:43:26 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     135597
IP address blocks:        103.171.250.0/23 maxlen: 24
                          2001:df4:5340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8D21, serialNumber=57817D2BEC1FEFFFE412D9F334DF40428653BCAE
        Validity
            Not Before: Sep 30 23:43:26 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd9e9e-ff9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:35:9c:bc:5b:23:d9:95:a9:05:f4:07:8e:
                    de:f7:e6:03:99:7c:f0:4f:bd:c6:ff:29:57:86:19:
                    0d:bb:1f:bc:ee:83:f3:32:25:66:dd:9c:81:49:c3:
                    c9:a9:e4:ab:2d:0d:cb:26:39:1e:d7:93:22:2d:61:
                    93:0d:c8:8b:38:13:7c:5d:5a:5c:c4:ff:d9:cc:e7:
                    f0:dd:a9:b3:e3:d4:72:04:45:05:09:9e:c2:af:1d:
                    65:26:65:e7:e9:23:10:d5:cf:27:70:ed:b7:16:c5:
                    0b:c3:70:16:5e:97:18:a0:35:53:f3:fd:82:30:e5:
                    cb:42:58:f2:9e:c8:97:bd:89:c2:cf:83:1f:cd:29:
                    a5:fb:19:9b:df:3a:00:70:03:4c:85:27:21:9f:47:
                    3c:49:d0:ca:74:fa:c8:4b:2f:33:8a:b9:76:9b:1e:
                    7f:df:a1:be:8e:49:d8:96:0f:92:d9:ba:01:3c:fd:
                    98:2e:b9:17:a1:ad:2f:5c:08:6d:44:11:16:db:31:
                    2c:ad:49:1d:61:84:33:10:cb:90:b2:51:ac:02:b5:
                    82:aa:b7:ca:4b:cb:6d:09:8e:fd:b8:77:ea:a2:52:
                    39:7a:ba:a7:8a:06:85:b9:ea:5d:69:1b:39:ca:d8:
                    1c:00:8b:9a:ef:00:cf:60:13:65:9d:bb:e3:10:f5:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:88:9C:9B:AA:3D:46:B0:31:DB:C4:7D:C9:59:07:41:C1:9D:B2:AB
            X509v3 Authority Key Identifier:
                keyid:57:81:7D:2B:EC:1F:EF:FF:E4:12:D9:F3:34:DF:40:42:86:53:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/V4F9K-wf7__kEtnzNN9AQoZTvK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4F9K-wf7__kEtnzNN9AQoZTvK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8D21/450EC5BE03FA11EC8DDE0882C4F9AE02/46779D40040411EC867E3B86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.250.0/23
                IPv6:
                  2001:df4:5340::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:08:b7:4f:45:54:58:64:8a:37:c1:fa:a7:3e:b8:db:be:
         39:c2:76:7a:31:54:51:11:c6:31:48:d7:83:80:4e:f2:b2:df:
         d4:48:07:42:d4:07:c1:bb:0c:51:43:1d:e5:26:34:b3:84:0a:
         4f:f5:c8:97:bc:e1:81:68:7d:1b:7e:72:f3:6b:3c:94:d8:4e:
         ca:86:8c:77:df:9d:f3:7e:35:26:42:b9:8e:9d:74:dd:b2:01:
         b0:9e:91:e5:2c:ea:cc:3a:2b:4a:2a:ff:35:36:c2:06:ce:62:
         79:5f:38:67:3b:c7:0a:33:36:ca:3f:0e:3d:50:22:ab:cb:76:
         17:18:12:d2:db:35:a1:e5:bf:e4:b4:32:09:cc:41:f0:3f:cd:
         dc:43:52:24:2c:d1:11:0f:0b:ad:ba:2f:c2:ee:b2:f1:2f:f4:
         fd:1a:46:f9:e4:42:5d:e4:80:49:53:5d:20:26:ec:7e:98:63:
         2c:0f:a7:64:54:a6:38:9f:14:16:fe:67:50:99:04:83:5f:83:
         13:bf:b2:18:09:b0:83:71:ae:ff:66:2f:cf:e9:46:40:7e:4a:
         10:d8:b8:3f:43:1a:da:d7:f3:42:53:e3:0e:91:cf:f8:c6:70:
         5d:00:ec:26:d5:44:47:92:e7:49:77:9f:40:ba:0b:76:a6:e0:
         f9:f8:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:14:31 2026 by rpki-client