Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/459FAF10EF4811EF8F4B9284C4F9AE02.roa
File:                     459FAF10EF4811EF8F4B9284C4F9AE02.roa (raw, json)
Hash identifier:          wgm/K3czk438q8wY+F8Senpx6ebVl18VJSckLP4XIDo=
Subject key identifier:   41:38:48:21:A8:76:E0:71:7C:5C:00:2C:CA:F0:7D:6A:A9:67:D3:5D
Certificate issuer:       /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7
Certificate serial:       D0
Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/459FAF10EF4811EF8F4B9284C4F9AE02.roa
Signing time:             Tue 17 Mar 2026 05:43:52 +0000
ROA not before:           Tue 17 Mar 2026 05:43:52 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140211
IP address blocks:        203.28.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl
                          rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7
        Validity
            Not Before: Mar 17 05:43:52 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b8ea18-0743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:4f:2e:88:86:ba:69:62:71:34:a2:25:06:
                    59:1c:b2:f0:1b:27:50:d1:ca:88:f6:a1:c7:a2:af:
                    3d:3f:76:bf:db:ca:f6:5b:90:05:36:a7:f4:58:c7:
                    ba:74:64:d3:cb:03:fa:c8:a4:fb:d4:0e:9b:de:0d:
                    f5:7f:e2:4f:3b:81:7d:2d:86:74:6a:70:35:db:ed:
                    e0:8c:c2:be:24:32:5c:1a:94:10:c3:44:2f:4b:b3:
                    ce:48:b5:56:05:51:dc:1d:c9:64:05:bc:f4:87:06:
                    1a:fe:e0:9a:90:d7:3d:f1:1c:4a:15:fa:d4:08:b2:
                    04:8d:e4:19:a4:f2:f0:05:b4:1f:60:15:b2:b2:18:
                    26:ca:d0:a1:09:d9:8f:b5:eb:27:b7:00:b1:ca:18:
                    a0:d8:cd:19:2c:95:1c:b5:1b:e2:78:f8:6f:04:1c:
                    a2:dc:9f:b3:46:2d:88:9b:0d:e5:8e:3e:2f:e2:6d:
                    f2:d0:fc:cf:f4:c5:88:0e:02:ea:03:6d:65:c9:4c:
                    4c:a4:3d:a3:59:ba:01:ec:b3:26:0d:0d:2d:e6:ed:
                    89:92:38:6c:07:d2:9a:f1:b3:4a:f4:98:88:1c:e3:
                    df:9d:25:b4:1c:4f:d8:77:d9:ef:7b:f3:34:5b:7b:
                    1d:fb:9f:f6:00:31:c0:56:c6:62:46:1d:21:fd:30:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:38:48:21:A8:76:E0:71:7C:5C:00:2C:CA:F0:7D:6A:A9:67:D3:5D
            X509v3 Authority Key Identifier:
                keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/459FAF10EF4811EF8F4B9284C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:df:f4:e8:0c:5f:14:b3:10:b1:32:54:0e:fd:c2:ea:1a:5b:
         c8:77:29:2d:2e:e6:92:31:54:60:04:3e:65:28:cc:bc:30:d2:
         e4:6b:10:a1:5c:e0:56:8b:8c:09:77:49:63:ff:88:97:c8:96:
         53:b1:73:ba:9d:68:04:dc:79:11:b0:c8:ac:24:9f:9d:18:a5:
         fc:41:34:12:5d:18:45:29:de:19:cf:c4:3a:27:86:c9:1e:84:
         d4:aa:96:8e:90:6b:05:3f:75:b5:08:45:b6:60:a2:6e:ce:99:
         31:1c:ae:08:28:59:d4:54:67:bc:69:07:14:0c:01:22:e3:65:
         f8:d1:c6:5d:69:eb:94:07:76:ba:b6:b0:56:d9:90:3a:0d:83:
         ab:fd:1f:97:0f:ce:dd:14:2a:76:45:e5:bb:28:c6:8c:61:72:
         65:0a:bf:b1:2f:54:50:7c:69:6d:29:02:e7:bb:15:92:e4:98:
         ab:e2:cb:96:28:77:40:5e:92:06:82:3c:24:ab:e1:b1:35:6a:
         57:a7:53:bf:86:5a:91:52:4f:e8:ee:4d:f8:86:ef:6d:f7:10:
         7a:66:3b:4a:bb:0f:d8:ae:64:67:00:04:81:98:6c:20:ce:cb:
         bd:78:04:d5:5b:74:80:0a:07:07:c6:60:98:6a:f3:60:56:4e:
         3e:e0:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:21 2026 by rpki-client