Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/6A46CFE0126211F188E006892E3D8C67.roa
File:                     6A46CFE0126211F188E006892E3D8C67.roa (raw, json)
Hash identifier:          vOJvFxKytvrdrqNxXwkJJTDEUHFcjzsiu2peSkriAqw=
Subject key identifier:   96:D7:70:17:0F:A0:77:08:1E:24:9B:6D:48:FC:E8:A3:A9:B8:61:FB
Certificate issuer:       /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial:       027B
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/6A46CFE0126211F188E006892E3D8C67.roa
Signing time:             Wed 25 Feb 2026 15:55:33 +0000
ROA not before:           Wed 25 Feb 2026 15:55:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139009
IP address blocks:        103.29.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
        Validity
            Not Before: Feb 25 15:55:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=699f1b74-f29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:c9:89:22:13:ff:4d:98:7e:f9:c3:3d:cc:
                    ae:f5:7c:39:d6:34:9c:10:3b:d2:ff:dd:d0:ff:51:
                    5b:fb:7c:6b:ea:58:08:30:4b:aa:23:77:fa:53:1c:
                    22:d7:1b:9b:f2:04:76:e0:c8:28:36:22:45:a4:75:
                    66:16:ff:67:cb:87:39:ab:49:cc:07:e3:78:50:c5:
                    9a:d7:d8:54:c1:0b:1b:0f:af:9f:99:88:a1:1b:00:
                    ce:42:af:6f:97:ba:a3:3d:93:cb:f9:26:8e:da:1d:
                    54:26:02:39:d6:af:f0:5f:3b:46:f9:1b:55:32:96:
                    4a:99:2e:20:d2:e9:30:05:82:1c:c8:b4:33:dc:e1:
                    e2:8f:fc:46:77:4f:a0:b1:7b:e8:58:cf:8b:63:c2:
                    b4:a1:20:07:a4:c6:f5:f0:8d:eb:c1:98:25:31:b0:
                    c5:71:ee:0c:ae:11:3b:c2:e5:14:67:ee:c4:7f:2d:
                    4e:55:b8:1d:34:57:81:70:5c:0b:e4:7c:c4:c6:af:
                    c3:0b:ed:65:f9:84:72:3a:e0:38:64:a1:9b:28:02:
                    56:27:db:55:ac:77:28:4a:2d:9f:a2:85:97:14:97:
                    24:20:68:ed:c9:75:f9:78:52:70:26:e6:2c:17:b1:
                    67:fe:7f:48:68:df:84:46:4e:3a:a1:72:ff:43:c8:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:70:17:0F:A0:77:08:1E:24:9B:6D:48:FC:E8:A3:A9:B8:61:FB
            X509v3 Authority Key Identifier:
                keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/6A46CFE0126211F188E006892E3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:0c:c9:64:9f:07:59:b0:2a:29:79:60:4c:39:0b:f6:dc:1a:
         0b:f7:be:a9:d7:c9:66:ce:ea:14:e2:21:29:f8:e7:08:1f:2c:
         30:68:91:10:61:45:1b:d3:87:c5:93:4b:df:6b:b3:e5:dd:86:
         6f:bd:09:13:8d:37:13:f4:71:3e:9a:3b:b3:eb:f8:41:30:d3:
         af:d4:42:49:33:bf:d4:f3:7a:09:71:f3:1d:e4:33:42:57:08:
         54:8f:9a:f1:14:39:e0:46:29:99:0a:03:20:d2:87:76:b9:4b:
         7f:76:15:17:67:c8:45:e9:f9:69:ea:5e:76:be:a1:df:fd:6f:
         21:08:2d:d6:cd:ec:57:9a:0b:fc:4d:97:e7:48:d4:00:2b:60:
         12:e9:fc:2f:cd:67:cc:0b:95:08:e3:85:31:c3:13:f1:e2:97:
         a4:f5:18:d6:90:a3:e2:1d:cc:ec:85:36:ce:c5:a9:45:50:35:
         60:89:4a:3b:b3:8e:4c:fc:78:cb:f4:0b:14:ed:ec:a1:85:b4:
         2e:7c:a0:49:9b:fb:0b:05:be:4a:df:d5:75:c6:0a:1f:3e:39:
         87:21:97:14:a1:27:97:de:e1:0a:1d:d5:77:30:5f:e0:28:a1:
         42:1c:34:7a:f0:d7:c7:c1:b2:4a:f1:0e:4c:00:67:62:f7:ad:
         fd:af:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:13 2026 by rpki-client