Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa
File:                     DB4085480A3A11E999FA296FC4F9AE02.roa (raw, json)
Hash identifier:          MFygAzAYnWEG/2rNe09geE+avsKMAfvJRSQk83klSzY=
Subject key identifier:   3A:E5:CD:83:B5:FD:93:B8:F9:1F:B6:50:F7:C1:3F:A3:94:BA:23:16
Certificate issuer:       /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C
Certificate serial:       11D3
Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa
Signing time:             Fri 30 Jan 2026 17:14:47 +0000
ROA not before:           Fri 30 Jan 2026 17:14:47 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     45455
IP address blocks:        103.28.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl
                          rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4563 (0x11d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C
        Validity
            Not Before: Jan 30 17:14:47 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697ce706-6ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:5e:d3:18:fd:84:3e:2f:32:1b:bc:98:41:
                    0e:d7:43:06:51:e0:52:f1:8a:fa:e7:6c:5e:85:16:
                    94:ce:eb:39:9b:eb:1e:16:1f:9d:64:e8:de:c5:b1:
                    1e:14:90:63:a5:5b:70:72:54:d8:ba:95:14:b3:05:
                    92:26:4e:95:de:db:e8:1b:d7:8c:c5:47:e0:69:3e:
                    a5:40:22:c2:2a:89:a4:a1:20:fe:6a:46:83:61:11:
                    a5:37:d5:65:d4:e7:59:06:a6:dd:da:1d:62:04:34:
                    40:8c:f6:d3:c0:45:b8:87:d5:3e:f9:25:03:43:f8:
                    f8:7f:02:ba:ed:2c:65:61:28:d9:37:bb:c3:7f:ad:
                    51:71:e2:77:ba:77:52:f0:7f:2a:61:33:1b:c6:9e:
                    1c:36:90:3c:a4:35:27:53:dc:f2:be:8d:ba:67:27:
                    f8:21:fa:54:24:a0:e7:68:b4:78:ef:29:0f:64:30:
                    56:a8:14:d7:04:df:c2:0e:0b:d2:86:4f:80:4d:8d:
                    e2:bf:86:92:68:ea:d1:48:0c:b0:69:ab:ea:58:7b:
                    aa:7c:57:d6:c1:6b:2a:c5:13:e6:f5:2a:67:87:29:
                    99:fa:a2:83:b0:0d:e7:eb:80:64:d3:9b:45:cf:57:
                    5c:88:89:4b:47:75:74:d8:f1:7d:94:e2:39:76:8f:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:CD:83:B5:FD:93:B8:F9:1F:B6:50:F7:C1:3F:A3:94:BA:23:16
            X509v3 Authority Key Identifier:
                keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ca:35:05:f8:f6:70:48:ec:b1:2e:a4:29:33:22:bc:62:66:
         c5:50:3b:1f:50:47:33:82:05:b7:75:98:da:59:a0:c6:8e:32:
         57:d0:e8:06:1a:cc:66:76:db:24:92:3d:a8:7e:08:0a:e6:40:
         e9:5a:34:c7:1b:3d:6b:a9:68:57:ab:5b:4e:80:ad:2c:ac:df:
         75:c2:1f:c9:73:c2:4b:04:6b:16:5d:96:9c:16:0c:e5:1d:40:
         2d:7d:65:da:f4:f8:1c:d6:ab:96:7c:33:26:96:1e:92:ee:3f:
         05:42:11:b0:ec:6d:a7:7c:fc:e5:56:82:05:ca:50:37:11:bc:
         77:71:12:88:cc:e8:c5:db:38:48:8b:10:b7:11:19:87:0b:05:
         50:b3:0d:99:b3:e9:7a:bb:53:96:a1:89:3d:6c:01:8f:fb:fc:
         5a:47:30:45:ca:e5:04:07:4c:07:74:48:c3:34:bd:10:09:64:
         3a:ff:71:dd:ac:14:00:de:35:02:93:53:7e:68:c6:8e:40:9e:
         6d:4c:03:08:0e:5b:8a:6e:a7:3b:04:70:76:82:e1:ba:7d:c9:
         a1:c8:5f:44:39:d1:fb:57:84:49:91:4b:19:20:74:f7:20:32:
         56:b7:f2:5f:3d:ea:20:a5:48:43:f1:cc:c0:56:d9:10:a8:01:
         5f:ac:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:23:26 2026 by rpki-client