Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/F46C6AE2001311F1811932CE406F56BC.roa
File:                     F46C6AE2001311F1811932CE406F56BC.roa (raw, json)
Hash identifier:          MxFfnouduq0AyvPx5Uzbe5lXPlmcgFB0L/5+2A+Av3g=
Subject key identifier:   1B:20:55:AD:CE:7B:8A:AE:FE:0C:01:1C:FF:62:9F:37:DC:61:29:12
Certificate issuer:       /CN=A91EC978/serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
Certificate serial:       15
Authority key identifier: EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/F46C6AE2001311F1811932CE406F56BC.roa
Signing time:             Mon 02 Mar 2026 11:29:20 +0000
ROA not before:           Mon 02 Feb 2026 08:48:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4686
IP address blocks:        103.95.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl
                          rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC978, serialNumber=EF8B12E299F3C84D14BF35725F02DDC503B12E01
        Validity
            Not Before: Feb  2 08:48:33 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5748f-524d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:77:a5:9f:84:6a:06:54:c0:ad:60:ad:81:
                    01:c4:8c:d3:fb:20:67:3c:7a:51:2c:82:ef:03:2f:
                    ac:1f:6b:6f:fe:18:90:81:77:05:c9:8e:7c:58:88:
                    6d:a8:df:6b:a0:42:05:82:5c:83:e6:38:75:3e:3d:
                    d0:27:d9:29:2f:07:92:0a:d5:29:8d:2e:58:ec:7d:
                    4d:b6:98:42:4e:4e:91:a0:b3:3b:25:e2:3e:cc:45:
                    a6:64:c5:20:b4:0f:7d:2e:cf:a2:2f:b9:01:9e:f7:
                    3e:1a:50:ca:93:45:fa:cb:24:a9:45:7c:d2:55:d1:
                    7b:d3:0c:10:a3:86:11:8a:eb:95:29:c2:65:86:3e:
                    57:15:94:a8:0c:89:48:80:02:3f:20:f0:4d:c9:60:
                    0c:8b:41:a0:c1:bb:dc:57:07:a4:53:69:25:e5:42:
                    ee:bb:aa:3c:31:12:37:b2:a4:3f:f4:91:db:85:48:
                    cc:28:39:ac:bf:a5:ce:71:9e:10:e1:e8:8c:ea:c2:
                    15:b0:80:dc:99:94:98:ad:a8:6c:ae:54:b2:93:a2:
                    d3:52:9a:66:72:02:de:10:b1:e2:f1:f7:59:d4:8f:
                    a4:2b:35:28:b7:bd:a7:f6:56:e8:35:60:15:20:0a:
                    07:b5:72:35:c7:5c:30:d6:f9:27:a0:db:f6:25:dd:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:55:AD:CE:7B:8A:AE:FE:0C:01:1C:FF:62:9F:37:DC:61:29:12
            X509v3 Authority Key Identifier:
                keyid:EF:8B:12:E2:99:F3:C8:4D:14:BF:35:72:5F:02:DD:C5:03:B1:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/74sS4pnzyE0UvzVyXwLdxQOxLgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/74sS4pnzyE0UvzVyXwLdxQOxLgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC978/C526E60E001311F1BC38ABCC406F56BC/F46C6AE2001311F1811932CE406F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:e4:6b:cb:df:bf:f4:cb:4e:47:9f:a1:6a:1f:c4:46:a4:
         0b:e4:d2:80:f0:a1:f8:00:a6:44:15:0b:9c:06:07:93:f3:ab:
         6c:23:51:75:67:d3:d5:99:84:36:22:d7:28:2c:0b:e3:d7:26:
         ce:71:42:ac:a7:9c:ed:cc:96:a1:79:51:30:a7:84:d5:95:df:
         49:df:ac:e6:fe:15:af:a5:af:09:a2:4e:52:91:4e:b4:10:66:
         49:c1:1c:ad:22:45:01:1a:01:78:f1:fe:c8:91:62:4f:a9:ca:
         37:fd:3a:d8:14:da:00:59:15:22:03:db:b9:6e:81:52:0f:13:
         bf:04:73:85:a5:2a:52:b2:68:e9:d4:9b:c1:0d:15:41:c9:b9:
         39:70:38:6e:7e:38:b6:69:bc:95:b6:a1:d1:e9:75:b5:a7:21:
         ec:ab:88:3c:e0:41:75:14:5d:f4:45:b7:55:71:19:30:af:4b:
         94:1d:78:b7:6e:5b:ed:e7:5b:6d:35:83:b3:a7:53:2b:e8:df:
         e2:dc:9f:70:61:e6:06:fb:c1:23:7e:3d:4f:93:8f:56:b3:1a:
         6e:c0:22:96:75:48:a9:51:4c:d9:e1:ae:48:d2:8e:14:a2:8d:
         99:17:bf:83:ff:76:46:3d:cd:3d:1a:66:5f:e6:d9:73:71:62:
         97:b5:38:83
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
Qzk3ODExMC8GA1UEBRMoRUY4QjEyRTI5OUYzQzg0RDE0QkYzNTcyNUYwMkREQzUw
M0IxMkUwMTAeFw0yNjAyMDIwODQ4MzNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU3NDhmLTUyNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuHHeln4RqBlTArWCtgQHEjNP7IGc8elEsgu8DL6wfa2/+GJCBdwXJjnxYiG2o
32ugQgWCXIPmOHU+PdAn2SkvB5IK1SmNLljsfU22mEJOTpGgszsl4j7MRaZkxSC0
D30uz6IvuQGe9z4aUMqTRfrLJKlFfNJV0XvTDBCjhhGK65UpwmWGPlcVlKgMiUiA
Aj8g8E3JYAyLQaDBu9xXB6RTaSXlQu67qjwxEjeypD/0kduFSMwoOay/pc5xnhDh
6IzqwhWwgNyZlJitqGyuVLKTotNSmmZyAt4QseLx91nUj6QrNSi3vaf2Vug1YBUg
Cge1cjXHXDDW+Seg2/Yl3eSTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUGyBVrc57
iq7+DAEc/2KfN9xhKRIwHwYDVR0jBBgwFoAU74sS4pnzyE0UvzVyXwLdxQOxLgEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOTc4L0M1MjZFNjBFMDAx
MzExRjFCQzM4QUJDQzQwNkY1NkJDLzc0c1M0cG56eUUwVXZ6VnlYd0xkeFFPeExn
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNzRzUzRwbnp5RTBVdnpWeVh3TGR4UU94TGdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Qzk3OC9DNTI2RTYwRTAwMTMxMUYxQkMzOEFCQ0M0MDZGNTZCQy9GNDZDNkFFMjAw
MTMxMUYxODExOTMyQ0U0MDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnX7QwDQYJKoZIhvcNAQELBQADggEBAGGz5GvL37/0y05Hn6FqH8RG
pAvk0oDwofgApkQVC5wGB5Pzq2wjUXVn09WZhDYi1ygsC+PXJs5xQqynnO3MlqF5
UTCnhNWV30nfrOb+Fa+lrwmiTlKRTrQQZknBHK0iRQEaAXjx/siRYk+pyjf9OtgU
2gBZFSID27lugVIPE78Ec4WlKlKyaOnUm8ENFUHJuTlwOG5+OLZpvJW2odHpdbWn
IeyriDzgQXUUXfRFt1VxGTCvS5QdeLduW+3nW201g7OnUyvo3+Lcn3Bh5gb7wSN+
PU+Tj1azGm7AIpZ1SKlRTNnhrkjSjhSijZkXv4P/dkY9zT0aZl/m2XNxYpe1OIM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:26 2026 by rpki-client