Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/B46FE2D0C5CA11EBB86D320BC4F9AE02.roa
File:                     B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (raw, json)
Hash identifier:          S0c2o7KMzmsLJSq7WEijvJcgm48ilZbzQCrGUzU4mvY=
Subject key identifier:   60:91:EE:0E:81:60:F4:0E:AA:95:5B:CE:9A:C4:09:27:C9:02:0C:55
Certificate issuer:       /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691
Certificate serial:       064D
Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/B46FE2D0C5CA11EBB86D320BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:50:45 +0000
ROA not before:           Wed 16 Jul 2025 23:34:27 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132339
IP address blocks:        103.12.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl
                          rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691
        Validity
            Not Before: Jul 16 23:34:27 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a40bf5-63ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:94:29:fa:fa:a4:53:0e:73:48:dc:0b:2d:
                    5a:13:76:6d:f2:53:87:22:a6:65:75:e2:33:7e:02:
                    45:74:60:04:68:78:2a:07:01:37:25:ab:03:e6:4f:
                    9d:ed:13:e0:2d:61:91:bf:c8:b3:4f:5c:af:88:46:
                    d2:7e:2c:64:7d:69:3e:5b:f3:d1:85:ef:14:3c:bb:
                    da:fc:17:d2:cc:12:90:48:d6:76:ac:30:fd:32:9e:
                    fb:2a:1c:7f:16:d0:72:8d:37:f0:eb:d9:ab:10:0f:
                    78:3f:3a:67:87:05:98:f5:39:eb:14:84:6a:d6:e2:
                    c0:d9:cd:bd:dd:6f:04:a4:58:2c:82:1b:43:c2:d2:
                    45:ed:fb:f9:b6:0c:7c:99:77:60:91:bd:72:32:6e:
                    02:0d:37:a5:ba:df:fc:eb:11:ca:95:09:c6:d0:74:
                    ee:5a:4c:66:13:51:24:22:04:21:90:dd:8c:41:36:
                    c2:9e:04:d3:d8:95:0d:1c:5c:7d:e4:89:e4:66:74:
                    91:27:a6:a6:31:1a:e6:33:bc:68:c6:ce:1d:88:4d:
                    13:aa:2b:f1:f8:8b:8a:27:26:00:14:8b:fa:d2:3e:
                    85:e1:64:17:a1:ae:36:0f:5d:fe:0e:49:4f:98:5e:
                    86:a2:ae:21:9d:97:09:6b:a9:cd:5a:df:e8:07:96:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:EE:0E:81:60:F4:0E:AA:95:5B:CE:9A:C4:09:27:C9:02:0C:55
            X509v3 Authority Key Identifier:
                keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/B46FE2D0C5CA11EBB86D320BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4e:89:47:07:f2:21:2b:51:bf:ce:29:00:72:b1:35:45:ec:
         67:05:19:80:85:d4:df:bc:07:76:84:99:88:c3:fd:66:2b:52:
         5e:0c:26:98:60:6c:26:e4:cf:62:c0:34:e7:46:e6:f1:f7:a4:
         d5:59:15:ba:5e:43:52:a9:5b:84:ba:71:8c:e3:94:fa:f7:fd:
         80:fd:32:e4:92:82:e9:36:57:20:95:7e:8c:95:f4:1e:d5:1d:
         e5:55:5b:df:25:4e:6f:b2:5a:42:99:fd:53:49:cd:64:7a:28:
         71:ff:8d:5d:b6:c8:60:05:46:ce:45:84:40:ee:6f:f2:06:aa:
         10:bb:15:f3:90:86:ec:d7:d1:9d:0e:94:5b:90:ea:6e:4b:6d:
         5f:41:d3:d2:46:ad:b0:47:3a:fa:a9:93:49:3e:7b:8c:8d:ff:
         27:7b:88:d8:88:f6:31:a1:97:c4:71:0e:5b:32:90:9f:05:61:
         9b:8c:0a:2f:6c:a5:b2:0c:9d:78:da:f2:5e:79:39:e2:3f:25:
         cd:e7:53:35:fd:73:58:ef:a1:99:4f:10:21:33:d4:1a:b0:d2:
         97:d2:e1:23:7b:79:b5:ea:f7:94:83:52:a3:38:da:f3:7e:34:
         7d:52:c7:a4:29:24:16:48:3a:16:e5:50:c5:40:85:e9:ef:64:
         78:7b:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:25 2026 by rpki-client