Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/3A51C4061DF211ED95A51A3EC4F9AE02.roa
File:                     3A51C4061DF211ED95A51A3EC4F9AE02.roa (raw, json)
Hash identifier:          /ladZCKg0Wdq2DDwxfj4ZObrqdHNe2mLSPEcHRUNfPs=
Subject key identifier:   BF:7C:E5:27:01:D7:8D:44:CF:A2:00:EA:28:1D:A5:BA:CE:69:77:F2
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       0457
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/3A51C4061DF211ED95A51A3EC4F9AE02.roa
Signing time:             Tue 17 Feb 2026 00:20:42 +0000
ROA not before:           Tue 17 Feb 2026 00:20:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.181.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:27:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Feb 17 00:20:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6993b45a-cd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:e1:14:f1:2d:dd:f0:57:8e:9a:39:2d:22:
                    53:b4:9f:54:93:61:8f:16:b0:ca:b7:d2:63:b5:84:
                    a5:30:c8:a3:f9:f4:f2:cb:d0:7b:3c:63:ee:6f:4a:
                    b2:7c:0e:63:a6:68:93:97:84:ef:26:d3:d5:b6:ab:
                    fc:66:6b:c0:da:b5:bb:da:27:58:68:07:4d:ab:45:
                    13:e1:ca:eb:80:5f:b2:c1:84:71:ff:d2:48:41:67:
                    47:63:fc:4e:65:08:c0:ac:b7:d3:6b:a7:eb:f8:ef:
                    81:8c:4c:80:5e:c0:63:50:e0:6c:df:f7:54:c7:4d:
                    55:ee:de:cd:0a:e5:8b:d1:39:46:26:fa:78:66:10:
                    25:54:eb:21:20:16:49:bd:78:01:cf:69:25:73:94:
                    9d:81:0a:d7:ff:6b:fa:6a:e3:11:e8:54:26:fa:ca:
                    05:f6:34:08:c5:7b:95:0f:5f:62:2e:3a:72:90:cb:
                    31:8f:09:dd:f9:23:c2:1a:99:f0:ab:78:c4:d3:55:
                    e8:df:52:ff:33:a5:08:c2:db:3f:3f:f0:5b:8d:36:
                    ab:7e:ab:34:36:37:47:62:76:1f:03:1d:c6:59:d6:
                    d5:e4:1b:0e:95:18:fb:60:c0:e9:b9:5b:0a:cb:9f:
                    84:8c:1c:44:9c:7c:3b:ad:db:e0:86:ca:56:41:d0:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:E5:27:01:D7:8D:44:CF:A2:00:EA:28:1D:A5:BA:CE:69:77:F2
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/3A51C4061DF211ED95A51A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:dc:4e:e9:ba:bc:22:d2:d6:80:34:ec:16:bb:1b:a3:7d:40:
         ab:5b:34:d0:ab:4a:47:d8:26:18:de:ea:d9:64:be:59:4a:77:
         74:34:56:fc:42:80:c3:db:28:7a:aa:6e:3b:16:09:37:76:28:
         53:a1:59:aa:ce:e9:0f:56:ab:8f:be:46:70:f2:cc:f4:5d:fe:
         9c:bb:97:0b:94:e1:a7:8c:87:01:f9:54:e7:00:c7:d7:05:c1:
         32:81:6d:4c:42:e1:26:20:0b:63:d3:69:47:60:63:1b:63:2a:
         56:ac:b5:e1:f3:c9:79:65:48:1b:68:04:44:b0:89:b3:52:5c:
         1c:20:3f:52:1e:df:df:4f:d0:01:24:84:be:ca:81:8a:7c:97:
         db:aa:d4:15:1a:23:2e:44:37:b8:6f:32:f0:ba:8b:fe:f9:8b:
         50:19:b7:30:a0:29:57:c5:ae:89:89:a2:b4:1f:4b:db:ce:b9:
         c4:be:96:88:ed:ee:ce:05:d2:0c:45:b4:83:14:3a:5c:43:75:
         cd:40:6e:6d:11:24:70:71:5c:a2:2b:06:95:79:dc:a7:1d:ff:
         65:5c:fe:1e:23:da:f8:35:43:5e:2b:bf:2c:59:92:40:97:c0:
         46:0c:2d:8a:6c:29:7c:58:9f:bf:cc:45:64:ee:0f:1e:af:1f:
         d3:a9:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:05 2026 by rpki-client