Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/46F093E6DFFD11F1BBF900CE0766CEF9.roa
File:                     46F093E6DFFD11F1BBF900CE0766CEF9.roa (raw, json)
Hash identifier:          j6q+7Cp1J6VgPPEgLSq59I2FMpQhlJNoKhGwKIyOmBk=
Subject key identifier:   C7:7C:14:85:EF:BF:2D:B0:EC:45:57:8A:6A:8E:5B:1D:C4:D8:B8:69
Certificate issuer:       /CN=A914878C/serialNumber=1166DD55C15A7C78DCC7DF896660D91E0C4DF3E2
Certificate serial:       06
Authority key identifier: 11:66:DD:55:C1:5A:7C:78:DC:C7:DF:89:66:60:D9:1E:0C:4D:F3:E2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/46F093E6DFFD11F1BBF900CE0766CEF9.roa
Signing time:             Sat 14 Nov 2026 07:30:33 +0000
ROA not before:           Sat 14 Nov 2026 07:30:33 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     59117
IP address blocks:        141.229.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.crl
                          rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 07:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914878C, serialNumber=1166DD55C15A7C78DCC7DF896660D91E0C4DF3E2
        Validity
            Not Before: Nov 14 07:30:33 2026 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=6af80e19-fe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7b:a1:ac:55:2b:7c:2e:39:54:f8:53:c0:b4:
                    57:73:ff:8c:5a:89:44:dd:66:53:a7:da:f0:50:22:
                    ef:8e:93:0c:28:e6:08:fb:6f:e3:35:93:8c:d9:e6:
                    e9:94:b2:51:aa:a8:70:38:90:f3:49:13:e9:86:c4:
                    ea:fa:a2:97:c8:6c:49:a2:10:b0:1d:30:74:1b:94:
                    cb:fe:0f:32:96:d5:09:5d:20:8f:be:4d:a3:c6:63:
                    c6:b8:08:50:b3:4e:b2:42:32:a1:d2:e4:37:88:dc:
                    62:a5:c9:fd:e2:67:2b:62:18:7f:bf:7c:35:3a:f7:
                    35:c3:99:42:3e:f3:59:1a:d7:d9:1d:57:a7:44:ca:
                    d0:06:a2:d4:c6:4c:67:f1:ec:bc:28:ed:4e:38:78:
                    f4:85:cc:73:f8:b2:c0:20:6d:cf:13:82:43:30:aa:
                    7a:4f:58:66:97:ca:d2:81:d3:24:ab:95:4f:1d:79:
                    33:21:33:0d:44:e0:d4:82:ae:73:13:16:0b:ec:c1:
                    60:f4:10:7f:c3:31:e9:1a:f2:09:85:8f:85:22:9a:
                    53:9e:46:ef:93:bc:62:19:df:28:72:4e:5b:f8:29:
                    86:24:b0:02:2f:6a:e3:f7:62:1f:f5:d6:d8:ff:91:
                    e0:9d:8d:bd:fd:c0:6c:6a:a2:71:35:97:66:ff:7f:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:14:85:EF:BF:2D:B0:EC:45:57:8A:6A:8E:5B:1D:C4:D8:B8:69
            X509v3 Authority Key Identifier:
                keyid:11:66:DD:55:C1:5A:7C:78:DC:C7:DF:89:66:60:D9:1E:0C:4D:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/46F093E6DFFD11F1BBF900CE0766CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.229.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:68:7f:e4:7b:40:66:a3:75:71:ad:8c:3b:62:e2:e1:95:79:
         01:21:ae:ca:e8:fd:c1:28:6f:d9:c8:63:8b:ec:4e:7a:1b:b2:
         c0:98:35:ab:46:01:90:9e:e5:c1:c0:c6:c2:b7:f5:14:73:4c:
         1a:7e:69:b5:6a:bc:00:47:6b:46:f5:ff:00:7a:49:e0:09:33:
         14:39:6e:18:b3:1d:40:55:75:b3:37:bc:3b:b9:ab:e9:5b:f9:
         69:67:68:b2:80:11:f9:0c:4d:30:a3:15:d8:b0:d2:21:e0:5a:
         d1:cc:c4:d5:be:df:d0:0f:e8:ca:7e:75:e5:31:35:49:5d:5e:
         f0:4f:8d:c6:48:60:10:1c:f0:5f:3a:4b:87:fb:98:7f:ff:72:
         bf:49:21:f6:ae:b2:c9:b2:ba:eb:f5:9f:ad:1a:df:01:bf:6b:
         a0:f3:f3:3e:69:c8:9b:23:58:75:2f:37:b6:55:0b:38:b8:57:
         d7:21:5d:92:b4:58:20:ab:02:d1:21:29:d5:4f:34:09:ff:57:
         77:e4:eb:d8:f4:fa:1f:48:65:2e:61:5c:18:53:cc:66:8b:37:
         b5:cb:cc:2e:48:fa:d9:2b:10:c4:da:ef:e7:aa:20:9a:e2:86:
         9f:7b:d1:0b:96:24:59:3b:c3:04:b5:a2:03:5a:05:6e:78:8e:
         cc:fe:06:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:36 2026 by rpki-client