Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/46800A948DB811E98ACC9F7EC4F9AE02.roa
File:                     46800A948DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          YuxiT+o6NacPiPMOQ8zhMa/ehrSyMJnmfoAK7JucAN0=
Subject key identifier:   E4:71:74:C5:5E:E3:F4:E0:38:EE:CD:33:8F:47:BC:8D:E5:B6:36:C5
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       368A
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/46800A948DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:48:08 +0000
ROA not before:           Thu 24 Jul 2025 14:50:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45197
IP address blocks:        203.155.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13962 (0x368a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 24 14:50:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a489e8-d31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:c1:33:10:77:7b:75:6c:7f:57:4f:68:48:
                    8c:3e:9a:65:5d:fe:d7:ee:34:7c:eb:03:cc:f7:e0:
                    fb:80:0d:17:96:15:f9:78:80:f0:dd:6f:e9:9d:77:
                    b7:0d:3c:8b:fe:1a:db:38:52:07:db:76:bc:61:3e:
                    60:a5:c9:8a:b4:6a:3d:53:27:47:29:41:ce:75:f4:
                    94:94:c0:70:e7:7f:b8:a0:2d:14:59:9e:cd:73:08:
                    52:6e:eb:81:9b:2c:6d:47:9c:4a:18:07:5d:ee:6b:
                    3c:91:d2:40:e6:00:39:79:25:8c:b7:1e:54:33:30:
                    32:05:a1:fb:8c:01:95:57:3a:2a:35:66:36:cd:5e:
                    81:29:a5:f0:a4:bb:86:27:01:98:ca:7a:69:ce:2b:
                    7a:32:e6:7a:96:a8:0f:1a:5a:3f:ea:65:67:c7:78:
                    c7:e0:ba:b8:d9:04:74:88:2b:6b:ea:4f:0b:db:7d:
                    af:d5:10:05:f7:e0:49:2c:03:10:04:ff:29:8a:a4:
                    af:e3:9b:fe:19:e3:1e:87:1f:ca:1d:de:4f:63:15:
                    a5:c9:96:6d:53:81:72:d7:c3:dd:96:74:e2:18:00:
                    5e:77:d5:2a:41:c2:e4:fc:3c:73:61:51:11:06:b4:
                    af:63:9c:ae:22:75:ff:43:fa:fe:51:b9:bb:be:39:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:71:74:C5:5E:E3:F4:E0:38:EE:CD:33:8F:47:BC:8D:E5:B6:36:C5
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/46800A948DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:25:b5:23:c6:e4:b0:59:a5:a2:2a:f9:13:02:fe:de:14:f9:
         f7:0a:e1:3e:87:03:24:c6:fd:77:89:81:4d:84:ab:d3:42:27:
         d7:e2:bf:68:3a:4c:5d:50:d1:2e:99:dc:7b:22:ad:13:c0:80:
         db:f8:94:8f:2b:6f:8d:9c:f4:d8:47:d2:6f:97:43:88:eb:21:
         f5:04:72:2d:5a:fa:16:94:91:28:02:8b:d9:73:63:7d:68:2a:
         6c:a5:4d:3a:1a:cd:a2:62:81:c8:00:15:5f:f6:48:ab:1d:29:
         dc:00:e3:f1:98:8a:d6:74:68:8f:5b:7e:2e:2d:b0:8c:02:1e:
         c4:d4:39:58:d4:0c:ea:fc:21:a6:13:c5:b3:90:8c:50:b1:26:
         9a:4e:b8:c8:c5:33:be:cd:c6:a1:99:db:22:da:f0:7f:37:a3:
         96:e5:7b:51:0f:65:0d:34:d4:df:4f:f0:7d:b1:d0:c5:7e:a7:
         b9:a5:52:ab:60:84:12:43:f0:e5:f5:b8:14:a5:d6:e9:f6:45:
         69:fe:cb:55:12:31:c2:24:b8:16:1f:90:af:54:2f:0c:8e:78:
         93:36:0b:1c:53:c1:37:bb:25:ad:f0:47:3a:9d:5a:64:40:a6:
         a4:5a:f2:56:4e:f4:e1:71:b7:63:2a:33:30:34:41:97:f8:a8:
         c2:69:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:31 2026 by rpki-client