Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/46F5C9A0C91011ECAAEE7659C4F9AE02.roa
File:                     46F5C9A0C91011ECAAEE7659C4F9AE02.roa (raw, json)
Hash identifier:          VVDoqGSALoPJ5Gu2w4NZp91IHOo/XO79QTbLTZhRJd4=
Subject key identifier:   8A:15:DB:7B:AB:6C:07:14:93:26:7B:2E:F3:FF:B6:17:8A:7C:5F:13
Certificate issuer:       /CN=A919AA66/serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
Certificate serial:       03BB
Authority key identifier: 18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/46F5C9A0C91011ECAAEE7659C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:58:05 +0000
ROA not before:           Wed 03 Sep 2025 01:46:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17463
IP address blocks:        203.12.248.0/24 maxlen: 24
                          203.56.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.crl
                          rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AA66, serialNumber=18279E188A2EBA5FF2A3A410AD3A1DE4D51F0FE5
        Validity
            Not Before: Sep  3 01:46:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3ff9c-6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:87:0b:e8:3d:e8:a8:9f:1d:a7:35:01:50:
                    35:e7:66:5f:fc:56:99:f1:70:f3:44:a0:bc:a2:d3:
                    c6:74:95:8c:44:92:70:f8:0b:ee:4a:0f:33:b5:4b:
                    6f:dd:d4:34:f3:ea:f6:7c:05:41:ea:f5:78:d2:98:
                    b6:bc:2b:9e:aa:1d:18:09:2f:84:7d:f1:af:a8:52:
                    e2:0d:c3:b8:78:d3:cb:de:84:b0:38:94:f9:c5:12:
                    d3:e2:31:f2:05:e9:41:a7:23:b9:49:4d:41:9b:af:
                    78:3b:02:e9:57:df:82:52:65:2d:a8:af:e2:c7:50:
                    8d:3c:94:93:d9:91:35:73:22:09:58:ea:45:bd:0f:
                    2c:a1:f0:6f:c7:15:65:5f:70:29:49:df:03:f8:22:
                    ad:d8:51:9a:38:9b:0b:60:7c:71:73:ff:7d:2f:35:
                    71:49:f3:89:1e:46:e4:be:a8:af:6b:a1:a2:94:6b:
                    98:fa:ae:5c:f4:a9:a2:10:41:4c:8e:2e:c0:86:df:
                    2d:49:87:93:8e:c4:a4:a3:b5:b4:74:f3:64:6a:86:
                    8f:74:b6:4c:83:fe:8c:c6:10:91:b1:1d:eb:0a:cf:
                    5a:31:f6:68:0d:b5:70:aa:a6:dd:80:37:f1:3c:ea:
                    ad:90:8a:fc:f0:73:04:ec:6e:d8:63:c0:54:b4:9c:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:DB:7B:AB:6C:07:14:93:26:7B:2E:F3:FF:B6:17:8A:7C:5F:13
            X509v3 Authority Key Identifier:
                keyid:18:27:9E:18:8A:2E:BA:5F:F2:A3:A4:10:AD:3A:1D:E4:D5:1F:0F:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/GCeeGIouul_yo6QQrTod5NUfD-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GCeeGIouul_yo6QQrTod5NUfD-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AA66/53257002C90D11EC86B03A56C4F9AE02/46F5C9A0C91011ECAAEE7659C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.248.0/24
                  203.56.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:28:bc:f4:7e:c2:86:26:1c:32:9e:38:e6:29:c0:41:ba:
         27:ae:ab:27:98:22:fa:fa:6e:89:c1:a8:e3:3c:05:58:22:9a:
         35:d4:33:26:01:b4:d4:93:a5:5f:d5:72:5e:7e:f0:1f:e1:e1:
         f5:48:e9:ce:69:88:a4:e4:8c:5e:70:07:5b:3c:0d:5b:5c:08:
         34:bb:6b:83:9e:1d:2d:7f:1e:88:08:26:e8:b2:c2:4b:e8:5f:
         57:13:f5:06:6f:a8:48:d6:d4:6d:4d:50:65:0d:92:a0:41:b5:
         0d:7e:71:a0:67:9e:c0:6c:7d:49:13:ab:5b:3d:08:1b:89:de:
         f4:dc:b5:94:a9:61:d6:34:be:85:95:3a:58:5b:64:5c:85:a9:
         ea:36:75:04:27:2c:e0:17:c4:c6:24:10:72:ba:9b:c1:65:d3:
         cf:8b:ad:7c:a8:1b:4e:66:9a:ba:38:4c:94:76:50:55:84:ea:
         3c:7e:a1:47:ec:47:33:73:24:c4:38:8b:f9:bb:b0:12:c9:36:
         68:fa:a5:82:30:4a:3e:96:bd:9d:b3:09:d8:ea:95:8f:06:34:
         5b:b7:f6:21:6e:07:b7:82:3a:fe:47:cd:d4:28:0c:28:25:ae:
         a9:9e:bf:b7:ee:f7:7c:c9:9f:c8:33:a5:7a:fe:43:81:e6:55:
         19:15:fc:16
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFBNjYxMTAvBgNVBAUTKDE4Mjc5RTE4OEEyRUJBNUZGMkEzQTQxMEFEM0ExREU0
RDUxRjBGRTUwHhcNMjUwOTAzMDE0NjUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmY5Yy02MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqreHC+g96KifHac1AVA152Zf/FaZ8XDzRKC8otPGdJWMRJJw+AvuSg8ztUtv
3dQ08+r2fAVB6vV40pi2vCueqh0YCS+EffGvqFLiDcO4eNPL3oSwOJT5xRLT4jHy
BelBpyO5SU1Bm694OwLpV9+CUmUtqK/ix1CNPJST2ZE1cyIJWOpFvQ8sofBvxxVl
X3ApSd8D+CKt2FGaOJsLYHxxc/99LzVxSfOJHkbkvqiva6GilGuY+q5c9KmiEEFM
ji7Aht8tSYeTjsSko7W0dPNkaoaPdLZMg/6MxhCRsR3rCs9aMfZoDbVwqqbdgDfx
POqtkIr88HME7G7YY8BUtJw5RQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIoV23ur
bAcUkyZ7LvP/theKfF8TMB8GA1UdIwQYMBaAFBgnnhiKLrpf8qOkEK06HeTVHw/l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUE2Ni81MzI1NzAwMkM5
MEQxMUVDODZCMDNBNTZDNEY5QUUwMi9HQ2VlR0lvdXVsX3lvNlFRclRvZDVOVWZE
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dDZWVHSW91dWxfeW82UVFyVG9kNU5VZkQtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUFBNjYvNTMyNTcwMDJDOTBEMTFFQzg2QjAzQTU2QzRGOUFFMDIvNDZGNUM5QTBD
OTEwMTFFQ0FBRUU3NjU5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAywz4AwQAyzhcMA0GCSqGSIb3DQEBCwUAA4IBAQCydii89H7ChiYc
Mp445inAQbonrqsnmCL6+m6JwajjPAVYIpo11DMmAbTUk6Vf1XJefvAf4eH1SOnO
aYik5IxecAdbPA1bXAg0u2uDnh0tfx6ICCbossJL6F9XE/UGb6hI1tRtTVBlDZKg
QbUNfnGgZ57AbH1JE6tbPQgbid703LWUqWHWNL6FlTpYW2RchanqNnUEJyzgF8TG
JBByupvBZdPPi618qBtOZpq6OEyUdlBVhOo8fqFH7EczcyTEOIv5u7ASyTZo+qWC
MEo+lr2dswnY6pWPBjRbt/Yhbge3gjr+R83UKAwoJa6pnr+37vd8yZ/IM6V6/kOB
5lUZFfwW
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:35 2026 by rpki-client