Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/46D0A6A8BDDA11F086EB9613C4F9AE02.roa
File:                     46D0A6A8BDDA11F086EB9613C4F9AE02.roa (raw, json)
Hash identifier:          huORanbeeLTQyC8vfHVhR2qi15Mp9g0ge9RJFONvZrM=
Subject key identifier:   62:B4:45:B2:76:CA:1F:30:36:6A:E9:0B:67:DD:5D:57:AE:6B:CC:B6
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0BE6
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/46D0A6A8BDDA11F086EB9613C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:22:24 +0000
ROA not before:           Mon 10 Nov 2025 02:09:24 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     400342
IP address blocks:        103.245.234.0/24 maxlen: 24
                          103.245.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3046 (0xbe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov 10 02:09:24 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a483e0-a7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:7f:6e:e8:7e:e7:87:81:6a:39:32:64:5f:
                    e4:e0:7b:5b:02:93:fb:67:1e:5a:8f:26:12:82:62:
                    f1:39:07:39:28:a9:cf:6f:42:f8:f0:11:7a:cb:f2:
                    16:58:ae:54:62:82:d1:ca:82:3b:05:95:9a:17:b6:
                    44:4f:ff:6b:10:fa:0e:8b:a7:a1:68:f8:6c:ee:3a:
                    01:01:fc:d8:43:c9:00:56:11:c9:44:f2:a6:ce:56:
                    4e:7d:92:09:21:30:29:e4:3c:70:bd:5d:b6:db:d1:
                    e3:99:80:31:87:69:72:25:b8:ae:e0:7d:d3:7c:e1:
                    07:83:c2:01:fb:c2:db:61:f1:b3:42:06:91:3c:80:
                    c6:74:b0:6b:44:c6:6b:69:b0:81:62:35:22:3e:3f:
                    ff:73:78:47:a2:93:64:31:2c:55:c1:b9:c9:0d:41:
                    29:de:0f:1b:d2:57:2d:31:64:11:99:be:0f:b4:5e:
                    6b:fd:a8:d3:9a:db:44:95:e7:5f:6c:09:47:6c:3b:
                    a8:73:e3:41:e1:f2:64:28:06:5a:48:4c:ad:8c:cc:
                    d6:32:a1:74:eb:d3:41:82:e1:10:86:79:c4:bd:cb:
                    07:c3:0a:4c:0e:b7:e3:55:fc:15:39:2d:50:3c:01:
                    7b:ce:46:5d:70:3b:5a:4a:e8:06:96:ed:c2:76:65:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B4:45:B2:76:CA:1F:30:36:6A:E9:0B:67:DD:5D:57:AE:6B:CC:B6
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/46D0A6A8BDDA11F086EB9613C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:b1:06:ad:99:17:12:e3:11:29:db:6a:f4:f0:eb:ff:0b:
         2d:fc:b6:03:10:6b:c7:73:35:a0:6e:f2:74:5d:62:07:97:e3:
         64:90:18:e3:df:62:6c:a1:82:06:94:06:d4:76:46:b9:26:4c:
         b4:11:15:eb:31:75:c3:2d:8b:ea:0d:3d:26:c6:63:82:d7:a7:
         f8:91:7f:db:01:c6:f4:15:b8:91:60:8a:12:54:f1:e9:60:05:
         2b:65:94:67:5d:c4:23:0f:67:2d:ad:77:10:8d:56:bc:5a:a1:
         99:44:0a:57:d2:02:46:a4:bc:ed:32:df:d6:c2:22:ad:44:4e:
         39:a1:cb:29:7d:93:cf:27:79:2d:dd:bb:f0:ae:66:79:2c:02:
         bd:03:32:32:1a:d3:fa:cb:67:c1:42:3e:5e:65:48:1b:31:67:
         95:68:fa:36:ee:f0:43:7b:d0:74:f2:26:bc:dd:29:60:0c:02:
         ca:40:5a:df:de:34:ad:0d:bd:67:1a:94:1d:ef:84:5f:37:cb:
         65:e3:61:a5:43:23:54:e3:1d:15:97:30:98:9d:eb:01:5d:3e:
         ec:41:30:8a:ad:63:1a:e2:22:de:b7:ab:41:5c:a6:81:bd:0b:
         19:5b:c2:d9:34:40:d8:f2:fd:01:2b:97:bf:4f:a2:56:82:f2:
         64:76:00:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:05 2026 by rpki-client