Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa
File:                     46602E62E99D11EFB8E6881DC4F9AE02.roa (raw, json)
Hash identifier:          xQa25kfRWK3crvNR1k4YEmeqeNmN93Y1G0UzCQfE2Yg=
Subject key identifier:   BC:34:E0:38:B7:25:2C:B6:15:7A:86:B3:37:3B:50:91:5E:CE:48:63
Certificate issuer:       /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial:       0114
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa
Signing time:             Wed 15 Apr 2026 06:40:39 +0000
ROA not before:           Wed 15 Apr 2026 06:40:39 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     135513
IP address blocks:        43.252.124.0/22 maxlen: 24
                          103.9.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
        Validity
            Not Before: Apr 15 06:40:39 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69df32e7-f23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:c5:f5:0c:6a:a3:54:81:c4:47:1a:8b:e1:
                    00:a6:7e:43:df:6d:0d:2e:25:2d:e5:af:8e:88:f1:
                    60:e3:4a:4a:93:e8:9f:37:78:94:ca:45:1e:b6:3a:
                    db:04:5f:66:b0:77:b2:6e:61:23:0c:d0:28:9c:0b:
                    68:4c:96:aa:15:6b:bb:f3:7e:ae:2c:6e:1d:02:28:
                    1b:83:e2:86:c3:6a:34:e3:bc:a3:bd:72:49:e7:d5:
                    04:bb:9c:a8:12:11:27:a9:d1:15:79:db:18:43:15:
                    a4:66:08:ce:39:d8:09:bb:26:53:11:c2:74:99:c6:
                    b4:94:00:b8:32:6b:20:67:e4:19:39:92:05:40:7d:
                    2a:f2:ce:4e:35:4f:a1:b1:b9:94:4c:59:c0:5f:13:
                    17:c5:74:49:ef:b5:38:85:68:c7:ad:45:19:2f:75:
                    07:c3:de:d5:2c:d8:0c:84:f3:9f:3a:9e:29:74:29:
                    e6:5e:39:b9:f6:c6:97:ef:1f:93:2b:d6:70:e9:f6:
                    d9:ac:60:7c:c0:21:05:af:52:fa:ec:58:dd:22:93:
                    b0:6d:40:b9:b7:b8:bf:da:e4:dd:48:49:5c:8b:6c:
                    1d:91:59:83:7b:a4:99:d5:49:08:01:4e:a6:9b:d5:
                    c2:ab:8a:c5:a2:91:a1:0a:df:27:d0:80:f4:71:1d:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:34:E0:38:B7:25:2C:B6:15:7A:86:B3:37:3B:50:91:5E:CE:48:63
            X509v3 Authority Key Identifier:
                keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.124.0/22
                  103.9.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:25:a5:b4:34:cd:d5:d5:ee:e9:6e:61:65:f2:22:40:1b:44:
         12:89:e7:0b:6b:4d:f1:07:54:da:8e:32:77:ff:45:cc:b3:5f:
         52:36:34:dd:f6:2c:01:5a:58:8f:5c:44:20:7b:c6:bd:58:34:
         cf:03:e2:fe:43:19:4d:96:f3:44:87:bc:ea:ff:d7:0b:e7:f7:
         4c:c0:44:82:e4:0c:f9:bb:0d:56:eb:cd:a4:93:9e:3a:9f:51:
         ea:b1:12:4c:99:ba:30:72:fb:46:69:4a:28:52:b8:71:d8:73:
         73:7c:11:ba:8c:12:8a:4a:9a:3b:54:46:6f:af:e8:b1:5f:92:
         0e:5b:84:1a:68:98:55:11:78:0d:5e:25:7d:b5:3c:b5:5f:3b:
         d6:d3:ba:2f:69:64:2c:78:b8:0c:15:c6:40:88:70:29:7f:f5:
         08:44:0d:7c:6b:8a:67:c2:d5:83:3f:92:01:af:a0:60:a5:bb:
         23:8d:c7:09:9e:b1:91:f7:79:d8:12:99:14:65:ef:17:b3:7f:
         29:8e:f0:1e:3f:cb:06:2d:79:39:19:3e:14:f9:2e:72:91:ab:
         27:b0:0a:ee:07:3d:c0:bb:5a:bc:32:01:c6:7a:e9:d4:94:aa:
         c0:26:af:1e:ab:a3:15:96:82:9d:35:97:e1:b5:87:1f:9f:90:
         28:2b:02:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:15 2026 by rpki-client