Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/B2BB920001CE11F182556E3A746F56BC.roa
File:                     B2BB920001CE11F182556E3A746F56BC.roa (raw, json)
Hash identifier:          hhS1qZPFli9Sal+nR4Ez6TDJwFXrsp00XArLdlOD0GM=
Subject key identifier:   44:6F:FD:0C:37:96:79:E3:51:DF:E1:9F:38:F4:04:37:6D:47:67:C3
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       E7
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/B2BB920001CE11F182556E3A746F56BC.roa
Signing time:             Wed 04 Feb 2026 13:37:50 +0000
ROA not before:           Wed 04 Feb 2026 13:37:50 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135401
IP address blocks:        103.109.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Feb  4 13:37:50 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69834bae-01a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:aa:29:0c:b0:52:64:68:ff:5d:41:e8:fd:
                    51:b6:5f:40:73:3b:fb:22:f6:8c:a0:e7:a9:f1:42:
                    5a:5d:d6:a4:da:d2:fd:49:c9:3e:6b:61:b8:f9:c8:
                    ae:f5:44:07:e0:2a:71:83:8a:73:40:ec:76:78:b0:
                    96:c3:bc:eb:57:e3:2c:44:46:7f:93:7e:31:15:bd:
                    e1:68:05:c8:20:65:ac:8b:11:9c:83:4e:b3:e4:a2:
                    a8:39:52:c5:14:45:63:11:1d:75:5e:97:25:c6:0b:
                    26:88:de:f5:6d:1f:1f:ab:00:ec:01:a8:20:ae:5f:
                    d6:22:e8:8d:2b:c5:74:79:05:7e:6a:87:59:28:47:
                    1c:50:55:9e:ea:2d:4f:cf:83:d6:63:8e:9d:11:bb:
                    a7:0e:3d:f2:f2:2a:fd:f2:14:ab:0e:06:c0:99:7b:
                    69:ae:09:b8:c3:f8:d9:e8:a6:e9:24:b7:4c:b3:bf:
                    75:be:63:a5:6a:2e:a2:3f:cf:5b:29:2e:c2:bd:b7:
                    5e:70:05:94:f7:53:73:7e:b1:73:b8:30:0e:ba:20:
                    74:6b:d2:55:60:7b:70:19:38:ac:b8:1a:d4:40:b0:
                    dc:0b:53:66:b6:c0:16:e6:72:c0:1b:4b:bf:26:a5:
                    81:1a:51:c1:81:e6:e2:54:90:cc:4e:6d:fd:65:09:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:FD:0C:37:96:79:E3:51:DF:E1:9F:38:F4:04:37:6D:47:67:C3
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/B2BB920001CE11F182556E3A746F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:1a:86:c3:d4:2c:c5:03:49:f9:9e:4e:e0:07:8e:7b:c6:
         cf:ca:f0:e2:19:d0:88:4d:41:25:ee:4b:88:61:47:96:02:d1:
         83:97:e9:81:bc:c5:e7:e1:44:6b:9e:d7:2e:85:a0:0a:28:47:
         21:b6:66:77:33:d6:65:d9:06:b5:07:04:96:3c:df:60:87:f7:
         ff:52:f1:64:42:e5:a3:88:4b:bd:14:2e:41:27:0f:56:0c:72:
         3d:4f:22:2e:59:ce:a8:d2:06:01:41:7b:13:50:56:e9:e2:3a:
         51:7e:94:b1:66:a1:1c:72:d8:bf:04:52:76:68:e1:00:23:24:
         66:0d:d1:4a:9f:48:5b:41:69:a6:e3:5e:1a:c4:ea:78:d0:c0:
         3e:e1:04:13:8e:ff:c4:32:d7:09:40:fd:67:72:a0:45:2c:8f:
         c0:cd:07:0f:a4:b0:80:29:76:18:83:ed:bd:bb:f3:11:b0:5b:
         0e:6c:8f:3a:77:b6:fb:0d:60:e8:57:43:c6:bf:17:79:0c:c6:
         0c:a1:91:f9:4b:d3:6a:d4:bf:44:b7:09:4c:6c:bb:de:53:5a:
         a3:a6:5c:52:ef:fb:57:d3:d9:a5:22:86:da:ab:e8:7d:c6:98:
         5b:5e:d3:a9:33:39:92:c4:e1:2d:ff:31:50:fd:03:37:08:b8:
         3e:11:07:84
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC
OTlFNTBGMTMwHhcNMjYwMjA0MTMzNzUwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgzNGJhZS0wMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuyqKQywUmRo/11B6P1Rtl9Aczv7IvaMoOep8UJaXdak2tL9Sck+a2G4+ciu
9UQH4Cpxg4pzQOx2eLCWw7zrV+MsREZ/k34xFb3haAXIIGWsixGcg06z5KKoOVLF
FEVjER11XpclxgsmiN71bR8fqwDsAaggrl/WIuiNK8V0eQV+aodZKEccUFWe6i1P
z4PWY46dEbunDj3y8ir98hSrDgbAmXtprgm4w/jZ6KbpJLdMs791vmOlai6iP89b
KS7CvbdecAWU91NzfrFzuDAOuiB0a9JVYHtwGTisuBrUQLDcC1NmtsAW5nLAG0u/
JqWBGlHBgebiVJDMTm39ZQnCHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFERv/Qw3
lnnjUd/hnzj0BDdtR2fDMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy
QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE
eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM0OEQvMEMyMTU4QjJCMkM5MTFFRjkwM0Y3ODgzQzRGOUFFMDIvQjJCQjkyMDAw
MUNFMTFGMTgyNTU2RTNBNzQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnbRIwDQYJKoZIhvcNAQELBQADggEBAH5sGobD1CzFA0n5
nk7gB457xs/K8OIZ0IhNQSXuS4hhR5YC0YOX6YG8xefhRGue1y6FoAooRyG2Zncz
1mXZBrUHBJY832CH9/9S8WRC5aOIS70ULkEnD1YMcj1PIi5ZzqjSBgFBexNQVuni
OlF+lLFmoRxy2L8EUnZo4QAjJGYN0UqfSFtBaabjXhrE6njQwD7hBBOO/8Qy1wlA
/WdyoEUsj8DNBw+ksIApdhiD7b278xGwWw5sjzp3tvsNYOhXQ8a/F3kMxgyhkflL
02rUv0S3CUxsu95TWqOmXFLv+1fT2aUihtqr6H3GmFte06kzOZLE4S3/MVD9AzcI
uD4RB4Q=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:26:09 2026 by rpki-client