Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa
File:                     801F61DCC1E111EBB27A0812C4F9AE02.roa (raw, json)
Hash identifier:          BhSSYqZSGXXpI1luTNwOhhg1H/mMPyn+rBgpYKIGd48=
Subject key identifier:   11:CC:A5:F6:75:09:81:55:99:92:53:B8:94:DD:41:69:F7:B3:53:51
Certificate issuer:       /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial:       0746
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 21:18:50 +0000
ROA not before:           Wed 04 Feb 2026 21:18:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        45.251.136.0/24 maxlen: 24
                          45.251.137.0/24 maxlen: 24
                          45.251.138.0/24 maxlen: 24
                          45.251.139.0/24 maxlen: 24
                          103.225.84.0/24 maxlen: 24
                          103.225.85.0/24 maxlen: 24
                          103.225.86.0/24 maxlen: 24
                          103.225.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
        Validity
            Not Before: Feb  4 21:18:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6983b7ba-c335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9a:94:5e:9e:9d:e9:5d:dc:b9:a5:b1:bb:c5:
                    59:4b:5f:ab:18:95:b0:72:43:f1:79:69:6d:ef:25:
                    8a:75:60:ad:9e:b2:b5:8b:ff:74:47:ab:16:14:51:
                    dd:4b:2d:31:1c:a0:86:34:0d:7d:39:0d:08:1b:31:
                    e5:7e:47:9f:be:0b:a4:c2:fc:19:e4:45:b8:a8:71:
                    78:54:cf:6b:24:86:2f:9a:35:90:c0:25:6e:f7:50:
                    45:1e:6a:3e:7a:ff:91:57:8b:72:18:08:84:bd:c3:
                    cb:39:af:e7:ba:ad:50:c3:37:ba:e4:69:1a:93:53:
                    74:9b:ba:df:2f:53:44:e3:b8:52:62:c3:48:43:68:
                    bd:00:fc:7e:1d:14:af:fe:92:6b:20:5c:9d:93:d1:
                    3e:c6:10:53:9c:e9:9f:67:24:87:af:5a:ee:cf:af:
                    00:59:af:33:ca:cc:35:65:f7:eb:5a:ac:07:3f:c2:
                    b6:42:da:8f:15:7d:d6:b0:9d:75:19:7d:32:88:cd:
                    5b:51:be:8b:5b:94:87:f6:5e:20:21:6f:74:2c:cb:
                    a7:2d:0f:3d:37:52:86:00:c8:99:bb:42:c2:56:da:
                    2b:a3:f3:7a:de:51:79:b1:42:88:6d:71:f7:24:56:
                    13:67:86:38:1b:72:9e:6f:76:8c:39:23:8f:dc:a4:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CC:A5:F6:75:09:81:55:99:92:53:B8:94:DD:41:69:F7:B3:53:51
            X509v3 Authority Key Identifier:
                keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/801F61DCC1E111EBB27A0812C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.136.0/22
                  103.225.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:9f:a3:74:03:3c:79:d9:82:f2:00:61:86:04:0c:56:24:
         88:e2:85:d2:27:b2:27:d0:18:3b:6a:54:de:00:a8:1e:32:ca:
         85:e7:97:dd:5e:ef:c2:65:0f:b2:01:d7:d5:5e:d8:4e:1b:fb:
         02:ea:58:bf:f8:ed:a9:6c:6b:45:13:03:92:96:e5:51:41:93:
         b6:f4:6e:bd:50:aa:cd:61:df:89:54:ef:9f:79:44:7b:d2:c6:
         6d:89:65:15:ef:87:21:35:2b:f9:c8:58:97:1c:94:73:f7:5d:
         b2:ca:24:df:a9:49:0d:8b:9f:5c:43:89:44:a0:cb:3f:cb:36:
         2f:3c:46:cc:3d:f5:9a:f5:19:38:d1:95:92:13:6e:a7:2a:10:
         01:97:a1:24:4b:e0:13:5f:e6:c1:8a:7c:e0:fc:51:43:e2:11:
         17:39:45:35:d2:f4:ab:01:55:03:e9:a2:a9:08:c6:72:8e:5f:
         92:fe:c0:51:e5:b8:aa:24:55:93:e9:db:bc:c2:06:2f:60:d8:
         ad:d7:06:ab:27:91:99:b7:e0:33:70:21:23:ab:97:87:22:0c:
         1f:97:c8:bd:bf:25:ac:82:80:8f:bf:81:30:52:3b:b0:f6:38:
         55:39:4a:29:25:e2:10:2d:6e:aa:e1:bc:51:2b:52:8f:31:ba:
         fa:72:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:12:57 2026 by rpki-client