Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/E92E6ACA025411F1B5CF90C0233D8C67.roa
File:                     E92E6ACA025411F1B5CF90C0233D8C67.roa (raw, json)
Hash identifier:          ROrgH6dvkdfTvaiUN57VKXg+gHRpE1PP9zD6RWjQqas=
Subject key identifier:   18:B7:8F:10:4F:28:FC:5E:27:AF:E6:E3:67:57:17:67:32:F6:B0:DE
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       3554
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/E92E6ACA025411F1B5CF90C0233D8C67.roa
Signing time:             Thu 05 Feb 2026 05:38:34 +0000
ROA not before:           Thu 05 Feb 2026 05:38:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     63961
IP address blocks:        103.28.120.0/22 maxlen: 24
                          163.47.36.0/22 maxlen: 24
                          203.96.188.0/22 maxlen: 24
                          2402:f500::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13652 (0x3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Feb  5 05:38:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69842cda-5d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:39:bb:bc:a5:e3:fc:70:63:1d:e7:72:e2:
                    52:fe:2a:94:c9:1e:ab:48:95:3f:1b:7b:6f:ae:a7:
                    73:c2:26:7a:28:52:ed:83:3f:5f:97:d1:cc:53:0e:
                    7d:02:5a:f1:a1:b4:b6:df:f3:dc:4a:84:61:c2:af:
                    ba:28:3b:f7:80:0e:07:5d:f2:85:60:e0:da:55:40:
                    25:ec:ac:ad:b5:c1:9d:f5:a1:97:9b:0a:47:6d:5c:
                    ce:71:9f:71:63:5f:34:6b:df:d3:8a:e9:1c:d4:86:
                    07:ce:32:a5:bb:4f:1f:6b:c2:c5:ea:1c:19:c6:93:
                    60:35:7b:04:eb:01:51:f8:6f:c4:53:0b:d9:a2:77:
                    f2:a6:ab:50:86:e6:13:02:2d:34:40:0a:c5:14:dd:
                    2e:02:ce:0b:44:03:10:ba:03:cd:03:95:83:fc:d2:
                    2c:ab:8a:ed:f3:1a:42:82:4d:66:f1:40:57:77:0b:
                    8a:c8:8c:57:64:8a:83:32:bf:a0:03:a1:75:ee:be:
                    52:e8:ae:a4:b6:51:56:81:f1:3b:ed:29:a7:af:6e:
                    a5:28:b8:95:fd:8d:be:f7:c9:36:72:3a:5a:d2:3f:
                    10:3b:b5:47:c1:c4:f2:83:a4:a5:6e:f6:1a:4c:2f:
                    0c:db:25:a9:17:67:d9:d5:cd:f5:0a:ef:9d:7b:84:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B7:8F:10:4F:28:FC:5E:27:AF:E6:E3:67:57:17:67:32:F6:B0:DE
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/E92E6ACA025411F1B5CF90C0233D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.120.0/22
                  163.47.36.0/22
                  203.96.188.0/22
                IPv6:
                  2402:f500::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:a9:d6:9b:31:fb:89:1e:bb:a4:1f:9d:0a:97:90:d3:65:f6:
         ab:74:8d:60:4a:c8:b8:85:50:6a:94:a2:06:cf:84:52:03:6f:
         8d:db:a3:33:9f:85:79:f5:68:f6:a7:f8:08:1c:30:c4:00:63:
         7d:76:09:85:5e:24:42:54:ab:c9:25:94:60:e2:f3:fc:cc:4f:
         2c:f1:a7:84:db:4d:23:8c:5f:4d:4f:d7:50:a4:33:29:40:ef:
         58:25:0e:b1:05:e6:c7:9f:a6:73:61:50:f3:ef:67:10:76:0b:
         19:92:0d:64:fd:73:3d:dc:af:48:bf:8f:bc:12:b8:00:a5:b6:
         e1:0c:f0:97:b7:6a:ca:3c:cc:6c:9f:7c:69:72:0e:38:98:2b:
         54:ce:28:bb:0d:b8:a0:2d:b6:61:1a:46:b5:c3:97:fd:4e:13:
         9f:0d:f5:41:75:ba:44:4d:37:d7:5c:f2:83:1b:a1:5e:61:69:
         96:d7:bf:73:a9:11:5c:15:60:6f:62:79:8d:9e:78:84:69:e0:
         0b:6a:50:1c:c6:6f:16:eb:ed:8d:65:59:60:39:96:41:01:97:
         f4:58:f7:e7:91:36:3c:8e:aa:4b:5f:bc:27:09:39:0c:22:c6:
         42:76:fd:06:0c:a2:01:ab:7c:1d:30:e4:21:d3:e7:c0:89:5c:
         00:3f:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:40 2026 by rpki-client