Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/EF575A8E05B411F1B5F4D87B093D8C67.roa
File:                     EF575A8E05B411F1B5F4D87B093D8C67.roa (raw, json)
Hash identifier:          6tFMvg9QjxuwK3XPdZL12ytHp1uhm+pTxL61EXDO940=
Subject key identifier:   2B:6B:6A:48:7C:EC:36:45:04:7C:46:A4:37:8E:58:84:A3:47:93:95
Certificate issuer:       /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial:       09E6
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/EF575A8E05B411F1B5F4D87B093D8C67.roa
Signing time:             Wed 11 Feb 2026 21:47:49 +0000
ROA not before:           Wed 11 Feb 2026 21:47:49 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     132041
IP address blocks:        103.96.24.0/24 maxlen: 24
                          103.96.25.0/24 maxlen: 24
                          103.96.27.0/24 maxlen: 24
                          123.253.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
                          rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534 (0x9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
        Validity
            Not Before: Feb 11 21:47:49 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=698cf905-1855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:37:4a:c2:29:19:2a:0c:27:ba:7a:6c:42:
                    7d:fb:98:76:9b:26:7d:ec:d2:4e:ee:ea:37:d8:e4:
                    68:d1:97:59:f1:47:90:95:c2:f9:27:da:27:6e:9d:
                    4f:5e:90:8a:28:29:95:99:6c:38:75:af:24:7d:69:
                    76:69:5d:43:81:f1:df:06:c3:d8:39:d3:8e:b9:4d:
                    15:4e:73:a3:0f:e3:6c:2e:ac:ea:30:63:79:86:b8:
                    9e:3e:c8:f5:94:1d:0e:32:50:77:3e:c9:4d:b2:d8:
                    43:81:c8:d9:b4:53:10:ff:ab:73:24:b8:85:6f:e6:
                    0d:fc:e6:bb:8c:c5:aa:d0:e7:80:59:73:b4:2a:10:
                    18:1d:6c:6b:17:55:9b:58:f1:64:7d:23:27:3e:70:
                    c8:2e:55:67:32:6c:1e:6c:61:24:35:4c:5e:27:b0:
                    84:90:c0:96:5f:3d:8e:a2:7c:09:c1:9b:f4:5a:f0:
                    88:15:bc:d2:e3:00:96:41:27:5e:03:53:45:28:86:
                    52:90:35:84:bf:70:80:80:57:71:cd:c0:43:f6:06:
                    a3:e4:1a:bb:99:2d:2b:5d:e9:b6:a0:87:aa:97:da:
                    de:ac:c3:17:80:7c:2f:97:85:b1:d6:9b:d5:1b:18:
                    85:d6:34:b6:0b:5d:23:d9:f5:78:2f:fc:25:04:b7:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:6A:48:7C:EC:36:45:04:7C:46:A4:37:8E:58:84:A3:47:93:95
            X509v3 Authority Key Identifier:
                keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/EF575A8E05B411F1B5F4D87B093D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.24.0/23
                  103.96.27.0/24
                  123.253.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:40:68:a8:d2:11:a2:bb:80:58:7e:ff:30:da:97:74:f0:
         68:0d:fa:9e:b8:41:0c:66:9e:72:d3:3e:33:d5:07:8d:f8:ae:
         ea:4a:8d:74:53:84:a6:53:f2:6c:57:f6:f4:ac:22:9c:41:55:
         fb:22:ae:6f:7d:f8:61:43:ee:f4:b0:db:a4:7e:55:4c:b3:c9:
         f3:51:7c:a5:ba:e7:46:9e:42:a3:02:1a:3d:84:26:0b:0d:74:
         1b:fc:6e:b1:b3:7a:08:09:d8:18:93:04:34:10:8e:ef:a0:b3:
         da:16:db:44:d8:30:2b:cf:c8:98:1a:a0:b3:6d:4d:00:65:04:
         92:5b:9d:90:fc:e0:ba:fb:91:6b:c2:8c:4b:61:9b:d5:8b:32:
         a9:14:ef:62:1e:17:27:83:af:23:8d:8c:4a:aa:51:14:8c:05:
         54:ef:ed:2b:56:63:16:64:bf:1b:3a:f3:8e:86:3b:1f:b2:41:
         e8:30:70:d0:79:bd:51:ad:8b:6a:b3:8a:18:13:94:9d:d2:6a:
         0d:e5:ab:6b:d6:3a:cc:e8:cf:6d:0b:12:4a:86:0f:4c:00:75:
         d5:17:f7:bf:44:7d:32:96:fa:96:fa:64:a9:98:cd:d0:bb:94:
         ee:51:06:2b:e0:a2:b5:e6:d2:0d:2b:bf:9c:04:17:88:2e:69:
         c7:07:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:24:43 2026 by rpki-client