Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/C8899170FB7211F08F8762E74F6F56BC.roa
File:                     C8899170FB7211F08F8762E74F6F56BC.roa (raw, json)
Hash identifier:          rl2P6fyUHsyRFZ4SvKAjVTUWdbaaxw8Zyd3cE7wYT9Q=
Subject key identifier:   F9:93:47:9B:4F:7B:1D:F8:7A:7E:1B:38:66:3E:ED:4E:22:1F:7E:BF
Certificate issuer:       /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial:       0427
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/C8899170FB7211F08F8762E74F6F56BC.roa
Signing time:             Tue 03 Feb 2026 00:20:24 +0000
ROA not before:           Tue 03 Feb 2026 00:20:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        103.178.6.0/23 maxlen: 23
                          103.178.6.0/24 maxlen: 24
                          103.178.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
                          rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
        Validity
            Not Before: Feb  3 00:20:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69813f48-4d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:ce:69:2f:52:05:7b:97:ef:db:2f:71:68:
                    46:9a:25:ae:91:fa:eb:63:e9:cb:3d:ec:ec:40:72:
                    0c:81:35:8a:d5:85:c9:54:b5:71:20:ec:0b:92:65:
                    5e:e0:f5:fa:ce:4a:fd:80:9d:a3:d5:48:88:cf:bb:
                    18:6a:04:09:16:5d:35:cb:52:ab:8b:bb:88:bc:3d:
                    e9:b1:9a:0a:f3:a5:e8:6d:1e:0e:cf:7a:6d:5f:a1:
                    b7:a6:69:c0:07:47:64:c7:b4:4b:28:08:ac:43:42:
                    97:19:72:35:be:d7:c9:41:50:fe:7b:86:e4:fd:97:
                    56:eb:17:af:18:70:27:29:be:1e:4e:98:a9:4c:a8:
                    53:a1:8b:f1:72:1a:e8:ae:65:d1:44:09:80:c9:04:
                    de:98:68:76:af:17:82:75:32:48:28:89:c7:6b:38:
                    21:28:e1:66:51:4c:83:73:bb:fb:8d:b3:19:f4:ec:
                    c4:f2:f1:dd:87:d1:21:bf:72:be:45:b8:56:e7:c1:
                    0c:de:19:a0:a1:3a:58:3d:e9:4f:c5:2e:8d:47:fd:
                    b5:86:e8:bd:7a:46:8e:65:8c:a6:31:f8:f7:21:7a:
                    4b:fe:3b:b4:88:6e:fa:e0:24:30:bd:17:f8:11:65:
                    fd:30:50:78:af:c1:41:d9:e3:49:6a:43:f4:e0:46:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:93:47:9B:4F:7B:1D:F8:7A:7E:1B:38:66:3E:ED:4E:22:1F:7E:BF
            X509v3 Authority Key Identifier:
                keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/C8899170FB7211F08F8762E74F6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:f1:0f:bd:a0:4b:b7:4b:fa:4f:67:df:8c:64:c9:09:63:
         a3:e8:57:79:26:54:11:5f:45:f2:5f:88:d5:b8:b2:7f:79:ec:
         c7:7b:08:f5:b6:80:2b:62:41:df:19:28:7b:1f:e9:e0:16:98:
         a6:87:88:36:a3:2f:cb:70:89:17:05:4c:c5:b9:14:0e:d0:b4:
         34:51:05:95:f7:5b:9e:e0:bb:7e:28:4e:d1:06:de:d8:f6:14:
         6e:16:f0:19:f0:e4:bf:6a:de:00:6b:a5:49:cf:13:1b:1e:3d:
         40:0d:10:8c:10:b1:4f:f8:7e:ae:88:ed:c8:e5:80:2c:82:a9:
         c1:f9:cf:5f:f2:7b:11:24:55:ad:74:b4:62:a7:96:fd:64:28:
         65:72:a8:d9:67:30:20:b7:8c:7b:df:a8:44:17:20:be:27:cc:
         62:ae:f4:37:27:37:93:6f:69:fb:17:fa:84:9d:20:89:8a:a2:
         c6:a6:03:6f:bf:54:9a:10:c6:dd:2a:7d:1c:6e:a9:47:c0:b0:
         8d:ee:5c:3a:ac:66:72:45:44:e6:e6:59:55:46:4a:38:b9:a8:
         41:b6:87:8f:8d:a1:81:24:7b:f4:99:56:d1:2c:32:b4:d3:c9:
         53:d3:61:a3:a5:e0:09:66:e0:f2:25:4f:e4:00:6a:b8:f5:22:
         35:32:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:24:42 2026 by rpki-client