Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
File:                     5EEC619850A611EA823DE980C4F9AE02.roa (raw, json)
Hash identifier:          lPi0h7hpi46LXMXNA0gDpWnnIzYkE0zqdCyOkgHtAd8=
Subject key identifier:   F5:3E:43:D1:43:96:E0:6E:EA:73:4D:08:8F:D3:43:65:BA:88:FC:B3
Certificate issuer:       /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial:       0B43
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
Signing time:             Mon 26 Jan 2026 19:16:16 +0000
ROA not before:           Mon 26 Jan 2026 19:16:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137416
IP address blocks:        103.107.132.0/22 maxlen: 24
                          2402:55c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
                          rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
        Validity
            Not Before: Jan 26 19:16:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6977bd80-e32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:98:eb:6a:56:97:32:e1:ef:0e:ad:0b:c9:
                    dd:4f:a6:1a:b5:18:69:7b:85:07:a6:bf:73:3c:5b:
                    76:3f:82:b7:2e:d8:da:2e:7a:bb:7d:ec:82:43:6f:
                    40:8f:19:04:8e:65:e1:0a:63:25:8f:8e:27:a5:c2:
                    8d:27:cd:80:aa:67:69:3d:1f:13:90:90:61:66:33:
                    ff:96:1b:3d:37:bd:70:bb:0f:5a:87:35:9e:d0:5f:
                    bf:d2:08:20:d0:f2:a1:fa:39:a4:9d:1f:08:7b:35:
                    fe:c6:b5:8c:16:62:c6:bc:fc:c8:0e:0a:be:e2:cd:
                    34:71:f3:41:b4:ba:a2:ac:61:e2:9a:29:29:9f:dd:
                    96:13:cd:cd:47:35:1a:21:d5:ae:70:19:57:aa:50:
                    64:2a:cc:94:7c:3a:8d:18:41:23:39:7f:b9:00:9c:
                    04:4a:47:37:d9:3c:2f:8d:e5:d8:f5:c5:01:65:b2:
                    f2:a8:0a:4e:d8:cd:2a:8a:16:de:86:32:23:6a:98:
                    a9:57:c0:ed:e1:8b:af:61:57:dd:d3:04:66:95:c4:
                    5e:71:1d:f3:de:71:9b:e1:f8:b0:1e:e9:c5:15:21:
                    3b:5e:3e:a9:6a:bf:e0:e9:ab:ec:3e:8f:c3:55:33:
                    3b:bb:b0:98:a8:93:0e:52:fb:a8:07:fe:fc:2e:dd:
                    8e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3E:43:D1:43:96:E0:6E:EA:73:4D:08:8F:D3:43:65:BA:88:FC:B3
            X509v3 Authority Key Identifier:
                keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.132.0/22
                IPv6:
                  2402:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:75:a6:2c:5c:09:45:f3:29:a6:61:a6:60:7e:41:3e:de:13:
         ef:fa:65:4e:8f:83:6c:53:0a:dc:cd:92:a3:de:2e:84:be:a8:
         b3:00:55:7d:f5:61:b9:bf:86:8c:e1:a3:36:bc:4a:bf:fe:25:
         89:a4:9d:4e:3d:7d:87:ca:1e:80:10:d1:da:42:33:e6:d1:a0:
         a9:01:84:6c:ed:84:3f:ac:8d:90:4e:63:67:bc:9e:3a:7d:44:
         29:ef:be:3a:e5:a6:93:b2:f8:f8:61:76:1b:6c:ba:2d:15:91:
         5e:aa:96:35:bb:54:e2:c6:c5:4d:85:f1:bb:4e:4a:50:af:cc:
         6b:cc:93:0e:7f:57:d1:10:f7:e7:0d:ee:25:da:f8:61:5a:64:
         f0:5c:ca:a2:cb:84:de:c7:9b:d2:0e:b3:dd:b6:f5:a1:35:62:
         ae:82:f0:2b:99:f3:05:80:f2:a1:97:0a:a8:ef:4a:68:66:e0:
         97:91:90:11:fd:2d:96:c9:6e:f4:90:0d:c7:a7:fd:59:6d:97:
         3f:28:1b:18:8e:66:74:81:25:7f:e3:ac:9f:40:cb:21:9c:be:
         81:b2:87:6f:8c:8a:04:ee:fa:b5:94:e4:00:83:fa:02:27:3d:
         53:33:57:fb:fe:77:02:cf:7b:04:85:59:16:e8:25:9c:51:2a:
         fc:c8:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:08:48 2026 by rpki-client