Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa
File:                     46B27CC6B82A11E9843DEE0AC4F9AE02.roa (raw, json)
Hash identifier:          4N6uyRk5nJ01NdKd6SKeVxfMhzqmYtvkZXZd8f8mRwQ=
Subject key identifier:   1F:18:0C:1B:04:36:8F:3F:26:EF:59:F2:AB:05:FD:C9:21:AE:40:35
Certificate issuer:       /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
Certificate serial:       0E8C
Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:27:35 +0000
ROA not before:           Thu 28 Aug 2025 18:08:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136968
IP address blocks:        103.5.241.0/24 maxlen: 24
                          2401:c7c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989
        Validity
            Not Before: Aug 28 18:08:37 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a468f7-0b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:5a:b4:37:16:a0:ac:fa:82:8e:46:a3:6c:
                    80:00:f7:3b:c9:1c:d5:42:24:8f:f5:5d:79:52:91:
                    95:3f:cd:ea:34:bd:e9:8b:70:4f:df:6c:cb:bc:2e:
                    8b:d4:86:19:d7:64:27:ec:4e:38:6b:47:91:d6:8b:
                    69:be:ca:98:21:45:1a:07:71:b0:27:72:f4:21:d7:
                    ff:43:e0:e4:a1:47:2d:dc:5e:11:54:04:4e:4c:1e:
                    64:69:ef:26:a4:f7:ea:b9:6f:f6:2a:9f:f3:79:81:
                    88:91:fc:19:09:bd:2b:20:3a:cc:87:66:c4:b8:fe:
                    26:50:b2:1a:22:35:40:53:83:77:d8:49:d6:6e:e4:
                    b0:76:bf:dc:e0:17:98:5a:10:17:e2:e0:ad:d8:36:
                    e9:98:3c:2e:d6:d1:fa:46:6e:2f:e8:07:35:ae:e7:
                    bd:70:41:a8:79:52:cf:4a:c7:84:46:6c:b2:a4:63:
                    cb:f2:d4:24:e8:1a:33:b0:ec:c1:46:0c:5e:c6:60:
                    45:0a:0a:0b:a2:8b:90:2b:3f:e5:90:1a:04:55:cd:
                    77:bd:f9:8c:9c:8d:e0:19:f3:ca:a0:b0:b9:67:c5:
                    4a:2d:11:c4:07:43:3b:ba:93:cf:c4:d8:bc:8d:df:
                    d8:b5:a0:36:c1:1c:68:a9:00:d6:8f:f2:28:fb:e7:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:18:0C:1B:04:36:8F:3F:26:EF:59:F2:AB:05:FD:C9:21:AE:40:35
            X509v3 Authority Key Identifier:
                keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.241.0/24
                IPv6:
                  2401:c7c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:d6:c3:b8:5d:31:35:f8:25:7e:25:74:83:f4:71:9e:40:
         2c:05:10:62:a3:ff:6f:6f:74:98:78:f3:47:e3:07:77:88:e8:
         ab:7b:1f:18:73:53:fc:8a:3f:69:69:78:5b:85:3a:a5:ac:b3:
         7e:7f:4d:26:75:02:a4:c4:8a:a3:60:42:21:d3:5f:2e:15:fa:
         b6:8b:e1:b3:fc:8c:0f:bc:c0:99:69:3b:4e:0d:31:3c:19:7a:
         2c:82:8a:a3:7b:f5:c3:a8:52:42:f6:10:ea:c6:84:81:57:2a:
         4d:0b:68:ca:11:36:e6:68:e3:b1:f6:45:38:c8:f0:cc:73:d1:
         b8:a3:00:67:b5:3a:d8:1d:f3:b4:bb:75:f5:d2:85:25:e9:5d:
         67:e6:91:6f:f3:48:51:56:60:09:36:18:9c:01:0c:a7:ce:16:
         20:ee:8e:1e:9c:29:49:56:88:45:8e:a4:27:be:cb:ca:f2:70:
         ac:c7:02:59:45:72:a5:47:5a:5e:7a:1a:6a:31:c9:76:21:1f:
         fb:99:bf:8d:61:b0:2e:22:96:fa:24:cb:c7:21:d4:70:ad:b8:
         3a:f9:47:12:2f:37:dd:f9:a1:de:0e:d3:de:7b:2c:35:75:ca:
         03:09:e8:73:0a:03:b3:07:2b:a3:7d:37:99:91:cc:45:0b:bf:
         34:ba:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:53 2026 by rpki-client