Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/E46DBE449E8811F0A343880AC4F9AE02.roa
File:                     E46DBE449E8811F0A343880AC4F9AE02.roa (raw, json)
Hash identifier:          z7YrKVgCWycEYMHa7lXz+45oMrI/HtHuNAYNjecnk68=
Subject key identifier:   54:1E:F9:90:66:0C:A3:9A:8E:AF:22:2C:8A:C2:3A:8E:F6:38:8E:9C
Certificate issuer:       /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial:       0174
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/E46DBE449E8811F0A343880AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:53:51 +0000
ROA not before:           Wed 01 Oct 2025 05:38:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150180
IP address blocks:        103.6.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
                          rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
        Validity
            Not Before: Oct  1 05:38:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46f1f-0bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:00:84:0d:c0:ea:c6:8a:f3:dd:bf:94:90:
                    23:79:f6:37:9a:c1:61:0d:05:65:92:1b:6c:75:fa:
                    16:f8:13:43:ba:71:b4:29:c0:2c:ea:b6:ec:3a:7a:
                    36:00:25:4e:87:27:08:67:8f:6f:6f:a3:13:c0:b9:
                    19:79:3f:eb:28:8b:af:37:35:9e:d9:b3:b7:1a:d5:
                    8f:c7:93:c2:52:f9:05:32:4d:3e:98:e0:19:50:c4:
                    1a:70:55:d6:93:49:03:c1:75:ad:d9:81:bc:d9:ea:
                    88:90:0c:dc:ed:14:ae:4e:0a:cd:f9:4c:9f:f4:6b:
                    38:7c:13:0d:90:16:12:a7:09:b5:0b:17:b6:e0:e3:
                    a9:33:1f:e7:91:2e:2e:27:1d:ef:04:41:cf:73:f5:
                    60:8d:4b:a9:76:1a:5b:90:1a:b3:3b:b8:53:8a:64:
                    2d:99:20:bf:c0:c3:f7:95:d5:a6:cc:78:40:dc:7d:
                    fd:92:2e:d0:d7:46:7e:c9:a2:d1:23:98:20:e2:7e:
                    01:bb:14:e7:72:25:5d:c8:58:c8:53:06:f6:d0:eb:
                    b5:3d:e3:94:58:fb:3d:b0:ab:b0:97:36:9f:9f:4d:
                    68:ad:12:a3:f9:30:bb:66:d1:11:fb:dc:c3:45:ac:
                    e3:bc:93:d0:d3:47:79:cc:cc:27:22:7d:96:3b:77:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:F9:90:66:0C:A3:9A:8E:AF:22:2C:8A:C2:3A:8E:F6:38:8E:9C
            X509v3 Authority Key Identifier:
                keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/E46DBE449E8811F0A343880AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:9b:06:b6:30:ea:f6:d6:98:04:99:41:69:60:95:47:8a:
         de:7e:a5:b5:8d:04:78:15:30:87:1a:02:1e:18:d9:62:19:fd:
         33:21:b9:11:59:37:94:df:19:3b:05:9d:d4:10:37:f0:eb:4c:
         b1:34:29:59:9c:c4:c4:50:78:c8:f4:0c:b4:32:76:b5:e8:2a:
         17:ce:6d:dc:79:06:0f:96:fb:13:07:85:a4:78:19:75:df:f8:
         11:0e:b1:9f:6b:36:01:41:3e:8d:d0:66:2b:95:56:99:10:85:
         5f:2d:87:4f:0a:30:31:a2:95:5c:d5:50:e2:aa:84:cc:01:bd:
         53:34:1c:68:83:9f:06:8c:4b:24:0b:99:71:c6:5f:af:1c:8a:
         b9:d8:0c:02:8d:8a:16:f0:e4:e5:be:6b:4a:89:e7:02:e9:d5:
         fb:d0:d6:01:ec:0d:ba:c7:12:67:96:3d:b8:d6:03:4a:9c:15:
         91:c4:77:59:73:32:bb:f6:76:70:d0:44:8f:0e:6a:8e:88:3f:
         a1:0d:f6:14:5c:4f:e7:83:14:33:ff:27:07:7f:d6:f7:1d:b2:
         c6:dc:c7:0a:5d:ba:a3:78:c4:84:7d:c3:63:d0:c0:e7:d0:06:
         28:31:f4:9a:9d:6e:db:58:85:26:be:4f:08:20:29:67:4c:2f:
         bf:57:8b:24
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx
MjFCMjREMTAwHhcNMjUxMDAxMDUzODQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmYxZi0wYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7acAhA3A6saK892/lJAjefY3msFhDQVlkhtsdfoW+BNDunG0KcAs6rbsOno2
ACVOhycIZ49vb6MTwLkZeT/rKIuvNzWe2bO3GtWPx5PCUvkFMk0+mOAZUMQacFXW
k0kDwXWt2YG82eqIkAzc7RSuTgrN+Uyf9Gs4fBMNkBYSpwm1Cxe24OOpMx/nkS4u
Jx3vBEHPc/VgjUupdhpbkBqzO7hTimQtmSC/wMP3ldWmzHhA3H39ki7Q10Z+yaLR
I5gg4n4BuxTnciVdyFjIUwb20Ou1PeOUWPs9sKuwlzafn01orRKj+TC7ZtER+9zD
RazjvJPQ00d5zMwnIn2WO3dQoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFQe+ZBm
DKOajq8iLIrCOo72OI6cMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3
RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU
UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTgyMkYvNTg0MkQzMDRGN0YwMTFFRTk4QzhDOTJCQzRGOUFFMDIvRTQ2REJFNDQ5
RTg4MTFGMEEzNDM4ODBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZwahMA0GCSqGSIb3DQEBCwUAA4IBAQCSzJsGtjDq9taYBJlBaWCV
R4refqW1jQR4FTCHGgIeGNliGf0zIbkRWTeU3xk7BZ3UEDfw60yxNClZnMTEUHjI
9Ay0Mna16CoXzm3ceQYPlvsTB4WkeBl13/gRDrGfazYBQT6N0GYrlVaZEIVfLYdP
CjAxopVc1VDiqoTMAb1TNBxog58GjEskC5lxxl+vHIq52AwCjYoW8OTlvmtKiecC
6dX70NYB7A26xxJnlj241gNKnBWRxHdZczK79nZw0ESPDmqOiD+hDfYUXE/ngxQz
/ycHf9b3HbLG3McKXbqjeMSEfcNj0MDn0AYoMfSanW7bWIUmvk8IIClnTC+/V4sk
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:44 2026 by rpki-client