Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa
File:                     46C5452E0DD711EF85707821C4F9AE02.roa (raw, json)
Hash identifier:          iO3pgtesIJxgbMYCx/LqyA4+g53jPjICkWF08nO0EDk=
Subject key identifier:   41:B8:E6:35:52:69:00:22:69:EB:EF:94:9B:39:3E:FA:57:B0:82:CE
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0C82
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa
Signing time:             Thu 19 Feb 2026 06:28:11 +0000
ROA not before:           Thu 19 Feb 2026 06:28:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     58504
IP address blocks:        103.28.84.0/22 maxlen: 22
                          103.28.84.0/24 maxlen: 24
                          103.28.85.0/24 maxlen: 24
                          103.28.86.0/24 maxlen: 24
                          103.28.87.0/24 maxlen: 24
                          150.107.204.0/22 maxlen: 22
                          150.107.204.0/24 maxlen: 24
                          150.107.205.0/24 maxlen: 24
                          150.107.206.0/24 maxlen: 24
                          150.107.207.0/24 maxlen: 24
                          2406:b700::/32 maxlen: 32
                          2406:b700::/48 maxlen: 48
                          2406:b700:2::/48 maxlen: 48
                          2406:b700:3::/48 maxlen: 48
                          2406:b700:4::/48 maxlen: 48
                          2406:b700:5::/48 maxlen: 48
                          2406:b700:6::/48 maxlen: 48
                          2406:b700:7::/48 maxlen: 48
                          2406:b700:8::/48 maxlen: 48
                          2406:b700:a::/48 maxlen: 48
                          2406:b700:b::/48 maxlen: 48
                          2406:b700:c::/48 maxlen: 48
                          2406:b700:d::/48 maxlen: 48
                          2406:b700:e::/48 maxlen: 48
                          2406:b700:f::/48 maxlen: 48
                          2406:b700:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Feb 19 06:28:11 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6996ad7b-5042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:fd:3d:93:6f:70:94:88:13:47:a5:89:05:
                    31:4b:17:d5:fb:2c:ad:47:b9:dc:76:4b:99:52:25:
                    09:6a:76:1d:15:23:fc:fd:82:1b:fd:f0:be:08:27:
                    12:e3:57:f9:5b:76:fb:01:b2:b6:cf:41:73:a1:8a:
                    2e:a0:ff:c6:58:23:43:43:0b:48:0e:86:0a:4e:6d:
                    d4:30:1c:30:91:d8:5d:66:67:ae:43:b8:46:a6:6e:
                    9d:b9:d3:58:14:0b:47:99:39:3d:6d:3a:3e:75:3b:
                    8e:43:1c:91:71:2d:8b:4c:b6:b0:90:ee:73:a7:da:
                    0a:85:4d:57:c3:11:9a:79:0a:40:3b:f2:e0:28:6f:
                    53:45:e0:a0:8d:63:b3:29:cd:38:4e:06:48:93:fe:
                    0a:8b:63:03:8f:c6:55:aa:bf:3a:64:86:b6:22:b3:
                    a6:3a:fb:01:3a:c9:e8:0b:81:2f:22:c1:7f:a6:62:
                    99:f3:31:47:cf:63:dc:81:91:16:0e:ed:8e:dc:a0:
                    32:7e:b9:4a:82:46:d8:d9:95:1d:b2:49:3b:3f:85:
                    b0:0b:4e:eb:bd:a5:38:27:38:ea:20:ab:f8:d2:00:
                    b3:bb:77:1e:0e:fd:91:95:41:77:0f:50:8c:de:1e:
                    60:7a:ec:f7:ce:c4:4d:d5:4d:0b:f4:0b:64:b2:d9:
                    2c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:E6:35:52:69:00:22:69:EB:EF:94:9B:39:3E:FA:57:B0:82:CE
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.84.0/22
                  150.107.204.0/22
                IPv6:
                  2406:b700::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a0:b1:15:b6:fd:2f:34:4d:f4:47:7e:b9:4e:46:2d:12:28:
         c9:f9:c1:06:49:98:74:c5:20:53:ac:fb:6e:38:60:5a:94:8b:
         6d:bc:73:de:b9:42:44:fb:0b:c8:3f:dc:eb:b5:cd:64:b0:0a:
         f3:71:8c:c8:c1:6b:51:c7:0f:62:61:8f:aa:3f:ea:d5:32:04:
         c0:c7:3f:e0:2a:93:51:f6:11:47:3f:50:14:90:61:f1:95:13:
         e5:8b:6c:96:d3:40:34:3a:fe:2b:31:a6:84:74:73:a8:7f:d1:
         bf:cc:00:86:e3:e2:a7:45:d3:9f:24:cd:e0:d7:29:71:5f:ec:
         6f:55:a1:43:9c:f4:bf:01:07:eb:1d:0b:39:f0:34:50:76:c5:
         3e:1c:63:4e:ea:45:bb:9b:2f:b2:63:5c:8f:a4:08:85:05:b9:
         e4:03:54:e5:94:5f:c6:70:49:8f:42:5c:25:77:b7:96:f6:f0:
         a0:b3:3b:00:fb:a3:bc:ab:4b:b4:05:c8:17:43:1e:b5:3f:5d:
         81:c1:93:9e:e0:07:fc:65:9d:37:6f:68:ab:5a:a3:93:ff:d6:
         a7:47:00:df:3a:46:57:8f:cb:de:bf:61:55:19:1a:08:f3:ed:
         c1:13:cf:f3:42:7f:bb:c5:7a:be:1e:e8:84:d9:d0:69:60:96:
         cf:b1:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:21:07 2026 by rpki-client