Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/BF77D1785DCB11EA880A7643C4F9AE02.roa
File:                     BF77D1785DCB11EA880A7643C4F9AE02.roa (raw, json)
Hash identifier:          cnK6htjY784zMO4i1RMPc026++dnuxX39YQ30Fhn9Jw=
Subject key identifier:   09:01:CE:7B:F4:2C:CC:41:9D:D6:7E:6F:CC:A0:A7:A5:8F:59:89:CB
Certificate issuer:       /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial:       0B09
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/BF77D1785DCB11EA880A7643C4F9AE02.roa
Signing time:             Wed 18 Feb 2026 19:16:54 +0000
ROA not before:           Wed 18 Feb 2026 19:16:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     58713
IP address blocks:        103.48.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
                          rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2825 (0xb09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
        Validity
            Not Before: Feb 18 19:16:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69961026-7b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:c7:24:5f:f6:fb:0c:95:69:41:b3:cd:25:
                    cd:62:c2:3d:b7:21:85:12:94:61:1a:da:fa:e8:71:
                    33:22:65:6a:ed:32:ee:7e:eb:65:28:db:97:71:14:
                    53:6d:f9:33:73:23:b1:6b:9b:b4:cf:4b:26:ea:61:
                    c3:e5:3f:44:d3:45:55:20:3c:49:5d:4c:d1:cb:d9:
                    ac:ba:3b:e7:44:ca:5b:17:1c:de:70:21:4e:b7:8b:
                    53:51:88:bf:1b:4b:e2:4a:bd:f9:fd:7f:3c:13:3a:
                    aa:1d:d0:64:4a:8e:bc:93:16:43:c0:0b:9d:de:b1:
                    10:b7:a8:1d:e2:4c:1c:1e:08:ee:ac:7e:3e:c2:f1:
                    1c:63:32:25:04:5e:00:07:df:71:74:1e:16:65:66:
                    2c:19:8c:31:d4:0c:6a:1d:6a:80:1b:e4:a5:ce:70:
                    89:4f:58:1d:94:68:cd:11:8e:6d:87:10:9e:88:b6:
                    0e:96:b6:4a:72:9c:70:93:ec:2c:d5:47:14:33:d2:
                    3a:2f:64:16:41:cc:55:7d:a5:7e:16:94:41:77:db:
                    53:87:b1:7e:62:51:63:6f:c5:01:46:5c:08:05:ff:
                    d9:c5:ba:0b:51:1f:ba:71:89:b0:c6:e8:9b:56:6e:
                    b5:e8:e4:62:f7:05:1a:40:b9:e4:b9:4e:1d:34:04:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:CE:7B:F4:2C:CC:41:9D:D6:7E:6F:CC:A0:A7:A5:8F:59:89:CB
            X509v3 Authority Key Identifier:
                keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/BF77D1785DCB11EA880A7643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:f9:99:51:bd:38:f5:39:9c:d7:e7:a1:6f:64:ce:94:05:5a:
         91:51:fc:de:9e:18:37:a1:02:11:e0:ac:99:bc:02:b8:00:aa:
         25:df:fd:5a:86:fc:d5:2e:d9:a7:9a:43:b8:21:62:95:b4:43:
         27:47:46:f3:02:06:f5:80:0b:a1:e1:1b:11:5c:94:be:b0:64:
         bd:3b:10:77:b4:c9:be:0b:c4:07:a0:7f:96:69:05:7d:c8:13:
         19:72:3b:9b:d0:4f:05:73:1b:35:f6:4d:90:7e:81:48:7f:4d:
         2b:0e:95:0b:46:14:af:48:70:f6:1a:16:ad:82:cf:3c:3c:9a:
         2c:f9:4c:ad:37:99:f0:89:b3:53:18:13:ad:b6:34:45:1a:93:
         d0:5c:68:92:57:c4:24:c2:51:00:f0:22:49:fb:37:b6:7b:e2:
         ac:77:b8:3e:ed:c5:35:8d:5a:af:77:aa:83:92:81:a3:4a:63:
         61:d7:77:dc:3f:d5:b0:5a:22:cd:61:13:fe:4d:ae:f8:97:2d:
         81:fd:9c:a9:08:cd:85:3c:15:22:67:96:65:ff:ab:33:11:cd:
         8a:bc:9f:8c:ba:17:2b:9b:57:1c:f6:e0:89:3e:80:61:0a:8e:
         a2:80:4b:4d:75:17:e6:12:65:46:6c:3c:53:c0:42:00:13:89:
         3d:a4:7d:db
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEVDNzgxMTAvBgNVBAUTKDg0OEE3OUFCNTA0MUU3MUNFNjIyNTBCNTdGQzFFMEY1
NDk3OEM5M0EwHhcNMjYwMjE4MTkxNjU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk2MTAyNi03YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkTHHJF/2+wyVaUGzzSXNYsI9tyGFEpRhGtr66HEzImVq7TLufutlKNuXcRRT
bfkzcyOxa5u0z0sm6mHD5T9E00VVIDxJXUzRy9msujvnRMpbFxzecCFOt4tTUYi/
G0viSr35/X88EzqqHdBkSo68kxZDwAud3rEQt6gd4kwcHgjurH4+wvEcYzIlBF4A
B99xdB4WZWYsGYwx1AxqHWqAG+SlznCJT1gdlGjNEY5thxCeiLYOlrZKcpxwk+ws
1UcUM9I6L2QWQcxVfaV+FpRBd9tTh7F+YlFjb8UBRlwIBf/ZxboLUR+6cYmwxuib
Vm616ORi9wUaQLnkuU4dNARspwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAkBznv0
LMxBndZ+b8ygp6WPWYnLMB8GA1UdIwQYMBaAFISKeatQQecc5iJQtX/B4PVJeMk6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM3OC8xOTJFRkYwODVE
Q0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4em1JbEMxZjhIZzlVbDR5
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJcDVxMUJCNXh6bUlsQzFmOEhnOVVsNHlUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVDNzgvMTkyRUZGMDg1RENCMTFFQTg0RTAyOTQzQzRGOUFFMDIvQkY3N0QxNzg1
RENCMTFFQTg4MEE3NjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnMFkwDQYJKoZIhvcNAQELBQADggEBAMz5mVG9OPU5nNfn
oW9kzpQFWpFR/N6eGDehAhHgrJm8ArgAqiXf/VqG/NUu2aeaQ7ghYpW0QydHRvMC
BvWAC6HhGxFclL6wZL07EHe0yb4LxAegf5ZpBX3IExlyO5vQTwVzGzX2TZB+gUh/
TSsOlQtGFK9IcPYaFq2Czzw8miz5TK03mfCJs1MYE622NEUak9BcaJJXxCTCUQDw
Ikn7N7Z74qx3uD7txTWNWq93qoOSgaNKY2HXd9w/1bBaIs1hE/5NrviXLYH9nKkI
zYU8FSJnlmX/qzMRzYq8n4y6FyubVxz24Ik+gGEKjqKAS011F+YSZUZsPFPAQgAT
iT2kfds=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:53 2026 by rpki-client