Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
File:                     2C4CD10078C011EE90D36F13C4F9AE02.roa (raw, json)
Hash identifier:          wnFdP9Vd/CtxXviR/A/vQhDI0jeqdwInOJYSjbgHh7g=
Subject key identifier:   BD:86:80:52:13:2A:78:CB:C5:00:EF:46:8F:22:5C:57:66:FB:14:AB
Certificate issuer:       /CN=A91925D2/serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
Certificate serial:       01A3
Authority key identifier: 34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
Signing time:             Sun 11 Jan 2026 03:22:58 +0000
ROA not before:           Sun 11 Jan 2026 03:22:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151967
IP address blocks:        103.65.138.0/23 maxlen: 24
                          2001:df3:8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91925D2, serialNumber=34517CC29F74169FD736A2C240619F8B330FDD9D
        Validity
            Not Before: Jan 11 03:22:58 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69631792-4cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:cf:c6:2d:2a:48:6e:b9:14:9c:06:e8:95:
                    37:ce:67:bf:84:ef:8b:15:58:3b:ce:93:d2:fe:82:
                    82:77:1c:35:8f:60:2e:f9:fa:bb:dd:a4:5c:25:ae:
                    be:80:57:69:29:bd:40:94:52:d0:16:26:4c:19:63:
                    70:80:e6:48:bc:fb:e6:9b:84:31:b4:0a:e2:44:74:
                    0c:fd:84:1d:dd:9b:7e:b8:66:b7:cc:d9:31:b7:29:
                    f5:99:b8:21:fa:c7:dd:b3:b9:15:07:6b:79:23:99:
                    c3:68:3d:c3:2c:f7:b1:dc:ad:88:8b:1a:a2:7a:fb:
                    07:85:de:aa:72:59:47:3b:ba:82:58:aa:2c:d8:55:
                    e5:7f:f1:a2:3c:78:f4:28:29:90:76:0a:78:55:d8:
                    d2:a8:c4:32:d0:82:4f:2e:9b:f4:f2:1b:1d:13:55:
                    e4:ef:af:75:37:c4:ed:df:a5:8a:9c:27:a4:0a:b0:
                    38:8e:fb:a2:e1:ba:34:d1:5d:db:bc:94:5a:0e:45:
                    2b:f6:60:e6:2f:85:28:c3:d5:3e:8a:38:e7:7d:79:
                    c2:eb:92:83:0c:80:58:a0:d6:99:f2:ff:8a:b7:a6:
                    bb:6b:9b:00:9f:f6:af:9b:a2:b4:3f:9f:ff:cd:25:
                    63:a8:ce:1c:66:e7:67:b0:db:fe:88:12:bb:7e:ee:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:86:80:52:13:2A:78:CB:C5:00:EF:46:8F:22:5C:57:66:FB:14:AB
            X509v3 Authority Key Identifier:
                keyid:34:51:7C:C2:9F:74:16:9F:D7:36:A2:C2:40:61:9F:8B:33:0F:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/NFF8wp90Fp_XNqLCQGGfizMP3Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFF8wp90Fp_XNqLCQGGfizMP3Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91925D2/6DF602D078BF11EE93FFB764C4F9AE02/2C4CD10078C011EE90D36F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.138.0/23
                IPv6:
                  2001:df3:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:cd:4f:63:34:bd:48:25:01:cd:41:1b:f1:46:05:c1:b3:
         20:e6:80:ff:13:b0:b4:c2:02:92:9c:62:ae:29:0a:66:06:79:
         3a:1c:1f:c6:dd:76:c6:09:3e:1e:9c:48:5c:d1:c4:5e:f4:d6:
         51:bd:a9:a0:bc:95:5e:07:1c:86:32:ec:82:ab:85:90:6c:7f:
         0f:df:46:45:fe:1f:7f:f2:b1:d1:9f:0b:7d:77:e1:97:ab:0d:
         7a:a7:2a:4f:c5:11:83:c7:24:e4:61:7f:6f:17:2e:64:3f:98:
         9e:cb:b6:ae:ed:c2:fa:2a:7a:98:e0:92:62:ad:84:3c:48:7d:
         67:6f:ea:05:ac:a5:52:c2:f0:a6:01:4b:fa:62:d9:9d:ef:f4:
         1c:f3:0a:be:b0:eb:af:83:a1:ec:36:be:a4:3a:59:2b:00:e9:
         e1:92:b0:6d:e1:1d:c8:38:48:6b:67:47:ab:29:d0:84:c2:d5:
         c3:61:d8:c1:f3:1d:a6:cb:cf:31:43:17:ab:86:97:b9:87:5e:
         80:f8:2f:4c:b3:de:6c:0a:e3:a4:5c:77:e4:d1:7f:75:d4:76:
         f5:f9:00:3d:98:b9:73:e2:16:a2:fa:ec:85:47:cc:70:20:52:
         15:02:e7:70:bf:7c:d3:fd:ba:4e:dc:42:48:dd:d8:c9:fd:da:
         c7:9e:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:02:40 2026 by rpki-client