Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/EECD7500CF6E11ED915AD729C4F9AE02.roa
File:                     EECD7500CF6E11ED915AD729C4F9AE02.roa (raw, json)
Hash identifier:          OL0cJvIEHl9XR7QFwbxOXkSFz5Cmvw8iz8urgQe1yAs=
Subject key identifier:   E4:89:BD:07:DB:E7:EA:DC:8E:BB:3A:E7:1E:56:45:0B:04:16:D7:A1
Certificate issuer:       /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial:       0706
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/EECD7500CF6E11ED915AD729C4F9AE02.roa
Signing time:             Wed 18 Feb 2026 22:18:59 +0000
ROA not before:           Wed 18 Feb 2026 22:18:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     131314
IP address blocks:        103.163.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
        Validity
            Not Before: Feb 18 22:18:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69963ad3-f831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:3c:41:c4:0e:d8:12:a1:9b:39:82:46:be:
                    05:d0:f3:f1:8d:17:b9:28:c4:77:d9:e3:7b:b7:85:
                    c7:cf:93:7e:10:f9:52:47:a7:22:d5:a7:13:1a:ce:
                    3c:50:de:48:02:eb:3a:be:a8:ac:2b:ba:86:dc:bf:
                    17:3b:24:ac:3f:98:98:54:ec:8c:27:04:2c:a5:80:
                    e1:bd:6c:c2:4d:a1:cb:bc:a9:36:65:5a:8e:60:f0:
                    ac:60:1c:88:f1:f4:6f:00:60:a0:04:d0:58:cb:2d:
                    e3:93:e8:2a:2d:bd:1f:0a:9d:aa:19:01:e0:18:aa:
                    76:0c:8e:4b:6f:a2:f6:68:25:76:b6:c6:ed:ce:ed:
                    76:b1:19:ca:1b:94:bb:a9:ac:3c:2c:3e:53:e1:20:
                    90:de:f1:cb:10:41:4b:a8:c9:3d:07:79:7b:1c:23:
                    13:e3:2b:54:2c:d8:19:0c:53:d9:0e:28:1d:2e:55:
                    43:60:4c:44:e1:d4:a0:3e:ae:83:82:f1:18:09:52:
                    3d:13:f9:d3:00:de:f0:fd:dd:4f:c2:55:e7:60:24:
                    14:e0:d5:0b:04:3d:99:6a:9d:a7:e2:2d:7d:33:91:
                    8e:08:c3:6e:0f:96:46:95:04:70:e5:6e:d7:2b:ae:
                    70:80:69:5f:12:38:fc:26:72:a0:80:02:a4:63:f0:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:89:BD:07:DB:E7:EA:DC:8E:BB:3A:E7:1E:56:45:0B:04:16:D7:A1
            X509v3 Authority Key Identifier:
                keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/EECD7500CF6E11ED915AD729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:ef:46:e1:16:86:e1:f5:54:97:66:96:e5:c8:c8:8b:0f:
         a2:3e:d0:46:1b:80:66:00:5c:3f:05:7f:c6:b2:0d:77:c0:c5:
         fe:61:da:96:96:6e:62:b1:60:5b:d4:3e:3a:a8:6a:64:22:25:
         0c:05:f2:0d:aa:f0:89:21:bc:66:78:70:c4:61:f7:7d:db:e3:
         23:76:50:b7:3e:80:eb:62:d9:84:25:2e:68:26:81:d0:79:e6:
         2f:37:e9:e4:08:c0:52:8f:85:aa:db:0b:3b:fc:ce:29:bd:b3:
         4c:c9:58:24:f4:94:6f:f6:ac:dc:da:65:80:48:99:d2:12:23:
         c7:b5:6e:fe:75:76:f8:a9:6b:7b:69:b4:51:46:cc:11:b2:e5:
         90:77:eb:45:72:04:34:f3:26:84:60:f8:23:95:c7:0e:27:7f:
         e2:a7:1e:ce:eb:2d:71:e0:30:4a:32:11:00:df:07:25:79:3d:
         16:ea:14:ed:0c:de:e3:4f:7b:29:e3:b6:7d:3c:9f:13:68:05:
         c4:81:74:aa:71:9a:b2:f3:e6:d3:71:22:2b:4b:48:5a:d3:73:
         b5:ac:68:83:d8:18:5d:ae:a7:bc:d8:82:8a:cf:49:c4:8d:e7:
         c2:f6:7b:23:8f:60:e0:e1:1a:ce:2a:c0:27:ba:ec:cf:53:8a:
         a0:dc:02:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew
MkU4RTg3ODcwHhcNMjYwMjE4MjIxODU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk2M2FkMy1mODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm9g8QcQO2BKhmzmCRr4F0PPxjRe5KMR32eN7t4XHz5N+EPlSR6ci1acTGs48
UN5IAus6vqisK7qG3L8XOySsP5iYVOyMJwQspYDhvWzCTaHLvKk2ZVqOYPCsYByI
8fRvAGCgBNBYyy3jk+gqLb0fCp2qGQHgGKp2DI5Lb6L2aCV2tsbtzu12sRnKG5S7
qaw8LD5T4SCQ3vHLEEFLqMk9B3l7HCMT4ytULNgZDFPZDigdLlVDYExE4dSgPq6D
gvEYCVI9E/nTAN7w/d1PwlXnYCQU4NULBD2Zap2n4i19M5GOCMNuD5ZGlQRw5W7X
K65wgGlfEjj8JnKggAKkY/AfbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOSJvQfb
5+rcjrs65x5WRQsEFtehMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD
RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o
NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUNBQjcvNjQ2OThCRDQ3Q0Q2MTFFQjlBMkE2MDZCQzRGOUFFMDIvRUVDRDc1MDBD
RjZFMTFFRDkxNUFENzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABno6QwDQYJKoZIhvcNAQELBQADggEBAECK70bhFobh9VSX
ZpblyMiLD6I+0EYbgGYAXD8Ff8ayDXfAxf5h2paWbmKxYFvUPjqoamQiJQwF8g2q
8IkhvGZ4cMRh933b4yN2ULc+gOti2YQlLmgmgdB55i836eQIwFKPharbCzv8zim9
s0zJWCT0lG/2rNzaZYBImdISI8e1bv51dvipa3tptFFGzBGy5ZB360VyBDTzJoRg
+COVxw4nf+KnHs7rLXHgMEoyEQDfByV5PRbqFO0M3uNPeynjtn08nxNoBcSBdKpx
mrLz5tNxIitLSFrTc7WsaIPYGF2up7zYgorPScSN58L2eyOPYODhGs4qwCe67M9T
iqDcAmc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:53:54 2026 by rpki-client