Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/46CE46B416BF11EBB31D5A6AC4F9AE02.roa
File:                     46CE46B416BF11EBB31D5A6AC4F9AE02.roa (raw, json)
Hash identifier:          uelfGUi7e/t05BHwWkhZVN++x9escF/UtiNhCjCcV0s=
Subject key identifier:   84:1D:7D:E8:D4:93:05:77:5C:3A:0C:27:F4:51:C1:5E:93:0A:5C:DB
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       141A
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/46CE46B416BF11EBB31D5A6AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:56:22 +0000
ROA not before:           Mon 02 Feb 2026 15:11:19 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     38231
IP address blocks:        167.179.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5146 (0x141a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Feb  2 15:11:19 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47dc6-6768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:47:11:03:e7:1d:2d:5f:02:33:b3:4a:a8:a5:
                    ae:8e:0b:f8:f9:f0:77:46:b5:08:b9:de:a4:cd:ee:
                    01:9f:94:a9:d4:55:b0:88:27:83:3a:35:9e:c7:41:
                    d2:c8:00:0c:af:5c:00:e8:82:85:97:b1:e1:97:7d:
                    21:e5:1c:33:74:23:fb:a6:88:b0:8d:4a:1b:76:87:
                    72:7a:29:b7:4d:f5:66:af:78:3a:55:ba:83:a2:c8:
                    e8:56:38:c6:f2:b0:75:bf:78:9c:6e:83:3f:a0:f3:
                    3c:fb:4f:24:9d:83:9a:cc:e3:99:73:a5:8f:1a:b7:
                    dd:41:fa:51:6e:6d:75:19:dd:09:d9:ab:da:f3:9c:
                    91:52:20:3c:f5:78:c0:4c:10:60:92:72:f1:75:59:
                    7b:27:d1:dd:21:47:4f:42:94:47:a7:72:bd:53:63:
                    32:04:66:6e:97:60:00:f7:aa:6b:89:48:bd:89:ca:
                    7f:70:fc:bf:f0:d1:40:3e:57:37:5b:52:1b:78:43:
                    ba:bc:8f:0a:80:bb:a5:ae:1b:ad:4e:72:38:92:01:
                    c1:e5:70:00:38:45:bc:e9:86:a3:30:dd:82:7c:b4:
                    45:4a:04:53:5d:fc:4c:c7:e0:d0:87:a1:e3:c0:6a:
                    ed:50:2c:bb:c1:a1:67:61:19:c1:cc:36:82:ba:86:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1D:7D:E8:D4:93:05:77:5C:3A:0C:27:F4:51:C1:5E:93:0A:5C:DB
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/46CE46B416BF11EBB31D5A6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:89:8d:a0:1e:d9:58:47:cc:01:a1:b9:44:c6:02:36:e5:
         91:6e:2a:73:35:d5:89:35:79:ea:71:c6:d6:89:39:56:94:8e:
         39:e4:78:c2:ea:48:a3:d0:9e:4a:20:c2:0b:12:e2:4d:0d:07:
         f7:3f:e3:91:b8:ea:8c:09:a8:72:8f:be:34:65:5e:f8:b8:47:
         af:69:28:4f:ea:7b:e6:2e:6c:9a:37:90:ed:2f:5d:4d:58:29:
         b2:0a:ab:96:72:3a:f5:a5:4c:cd:6e:47:a9:c4:c5:29:78:22:
         e8:65:8c:31:d8:6a:b6:b7:9a:b7:f8:7d:f2:cb:68:57:8c:45:
         a5:46:8c:d6:91:d5:ae:a6:21:2d:1d:be:29:cb:7e:ce:0e:26:
         4a:2d:c5:4e:8f:7b:1d:ce:c8:54:de:1e:a4:8e:02:7d:c4:90:
         c9:11:cd:b7:31:35:87:bb:bb:2a:dc:20:02:2c:a2:37:64:58:
         b0:fd:ea:c0:78:ff:01:07:32:fb:b5:ea:fa:29:d8:5b:8f:6d:
         37:1d:00:aa:e8:5d:73:3d:1b:37:a3:04:f4:7f:48:d6:42:90:
         94:47:06:94:d4:d8:6a:ce:13:c7:11:8a:47:8c:1c:0f:68:84:
         ed:c5:60:6e:6b:64:6b:99:c6:0c:94:53:52:9d:c6:33:3b:cb:
         7a:28:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:23 2026 by rpki-client