Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/81A901FA8A0411EEA251F746C4F9AE02.roa
File:                     81A901FA8A0411EEA251F746C4F9AE02.roa (raw, json)
Hash identifier:          /8VAf9BTeANYtiJNn6p6S309hiCqmtL9UPtJ/qbilMg=
Subject key identifier:   EA:72:37:C6:C8:26:6C:7F:DE:FC:BF:57:66:F0:A6:17:C3:A0:6F:FE
Certificate issuer:       /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
Certificate serial:       0195
Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/81A901FA8A0411EEA251F746C4F9AE02.roa
Signing time:             Wed 07 Jan 2026 03:22:25 +0000
ROA not before:           Wed 07 Jan 2026 03:22:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     38315
IP address blocks:        203.169.24.0/21 maxlen: 21
                          203.169.24.0/22 maxlen: 22
                          203.169.24.0/23 maxlen: 23
                          203.169.24.0/24 maxlen: 24
                          203.169.25.0/24 maxlen: 24
                          203.169.26.0/23 maxlen: 23
                          203.169.26.0/24 maxlen: 24
                          203.169.27.0/24 maxlen: 24
                          203.169.28.0/22 maxlen: 22
                          203.169.28.0/23 maxlen: 23
                          203.169.28.0/24 maxlen: 24
                          203.169.29.0/24 maxlen: 24
                          203.169.30.0/23 maxlen: 23
                          203.169.30.0/24 maxlen: 24
                          203.169.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl
                          rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888
        Validity
            Not Before: Jan  7 03:22:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=695dd171-618b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:6d:b5:d1:10:e9:6f:ca:a4:1e:d7:96:94:
                    d6:5d:0c:68:67:24:03:14:56:25:c7:d0:65:2e:85:
                    8b:43:a1:32:ce:ba:53:44:dd:2f:53:e4:f6:b8:59:
                    f4:41:7a:0e:00:94:09:29:cf:ef:8e:39:84:3d:28:
                    ec:35:e5:f6:13:26:8c:61:d9:b4:ed:ae:08:c1:a6:
                    fe:55:7f:bd:db:85:87:65:74:b8:ab:18:f3:90:0b:
                    23:33:dc:31:22:81:45:b3:7a:2f:8c:1b:3b:27:81:
                    aa:20:74:3a:23:12:d3:5b:1a:c3:2f:39:31:79:fb:
                    9c:59:ef:72:0b:7a:ea:2c:ae:7b:78:ff:6a:b9:93:
                    21:05:f9:ce:8c:0d:ed:21:e2:77:5c:3a:03:d5:c4:
                    80:d0:1f:7d:2e:a6:33:d3:f6:68:28:75:1d:0f:88:
                    a4:99:44:6c:8e:cd:7f:cb:27:a1:93:f6:38:1c:51:
                    4c:2d:99:d7:27:8f:62:32:99:0f:59:44:a6:d6:11:
                    85:24:14:18:c2:ae:9a:d4:df:68:b5:66:cb:33:c8:
                    b8:35:cc:46:13:ea:26:af:1f:c9:64:90:10:0a:a6:
                    2a:34:d1:0c:0d:b2:47:09:35:ac:a5:49:10:93:9f:
                    ce:5b:e5:64:a8:30:73:c6:08:f4:f7:31:0a:c8:93:
                    a1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:72:37:C6:C8:26:6C:7F:DE:FC:BF:57:66:F0:A6:17:C3:A0:6F:FE
            X509v3 Authority Key Identifier:
                keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/81A901FA8A0411EEA251F746C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:ad:5a:c5:87:cc:f2:e1:3c:d3:2d:2c:1a:ed:04:a1:03:15:
         68:09:74:d0:f7:30:c9:8a:04:41:44:bb:a3:5b:37:e2:4d:fe:
         7a:a9:f7:f5:e7:63:4c:9c:69:78:09:b9:bb:7a:a5:f8:b9:59:
         3e:33:52:ed:91:8f:1c:77:fa:7e:5d:cd:a5:21:55:80:1b:14:
         24:61:42:27:0c:3e:43:8c:53:ab:93:12:9a:1c:61:0e:b8:b9:
         9e:d5:6f:36:c4:fb:e9:f7:a6:76:f3:f9:b0:a0:a9:71:ae:41:
         8d:33:c3:db:fd:76:db:8a:81:e6:7c:0e:b6:76:70:44:0d:27:
         1e:a4:35:8d:36:dc:8f:7e:b4:19:ad:da:1d:e0:e0:a1:75:14:
         e0:75:d4:c5:02:95:ed:1d:29:24:26:d0:ed:2d:c5:ad:de:d5:
         4c:6e:08:ee:e8:c9:a5:e5:2b:ee:43:5e:a1:ff:ec:a0:15:9c:
         6c:fc:bc:b0:5a:98:38:e0:06:b9:6d:ec:77:6c:f8:6f:97:ee:
         4d:21:26:54:3e:3e:cc:bd:fb:a9:8b:38:72:df:1d:bc:97:68:
         41:48:1a:5f:e0:f2:47:72:43:f9:1e:fc:32:1d:26:ce:ec:bc:
         24:b3:d4:a5:0a:70:36:77:81:a5:42:44:97:bf:2f:c3:6b:54:
         7a:7d:e3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:01:18 2026 by rpki-client