Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/69482E56075411EFB23BE380C4F9AE02.roa
File:                     69482E56075411EFB23BE380C4F9AE02.roa (raw, json)
Hash identifier:          5VXSVqBRZ54kF1gw42EU8mIY4oxlH5yrDJ9ATM7i36o=
Subject key identifier:   3E:15:C3:80:CE:40:94:3D:77:9E:1B:C5:F2:71:0E:A6:EE:D3:CE:4C
Certificate issuer:       /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial:       0780
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/69482E56075411EFB23BE380C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 21:18:36 +0000
ROA not before:           Wed 04 Feb 2026 21:18:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134507
IP address blocks:        103.231.204.0/22 maxlen: 23
                          103.231.204.0/24 maxlen: 24
                          103.231.205.0/24 maxlen: 24
                          103.231.206.0/24 maxlen: 24
                          103.231.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
                          rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
        Validity
            Not Before: Feb  4 21:18:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983b7ac-1523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:d4:c5:c2:a0:4b:ac:97:97:22:65:21:42:
                    78:f9:fa:7a:15:8e:46:c1:66:37:cd:2d:51:d1:06:
                    bf:eb:27:58:34:1d:f4:02:ee:83:88:af:78:39:35:
                    cc:e7:78:cc:43:a4:0a:90:dc:3d:5d:e5:54:10:fc:
                    b5:5f:30:e7:b7:96:f7:18:d3:09:92:68:7c:dc:9d:
                    e4:6e:12:ec:76:4b:da:92:1c:ba:32:6e:41:3e:ec:
                    95:fd:50:5b:d5:61:59:0e:30:a2:a6:8c:d9:0b:84:
                    30:be:5c:6c:51:fa:d0:60:66:74:41:27:1b:05:af:
                    39:29:ee:e5:c2:26:a4:f6:f2:72:59:91:c0:e5:d1:
                    7d:4b:62:86:88:0b:6b:a1:fd:ea:66:cb:f1:20:9f:
                    7d:33:e9:70:2d:05:6d:10:4f:45:3c:28:ef:e5:d7:
                    44:65:4e:80:ee:32:71:fc:9b:14:80:04:4d:83:0f:
                    13:ab:e8:ee:04:00:40:89:a1:48:96:bb:d4:66:db:
                    14:98:41:3f:77:69:23:a4:0f:38:10:fb:b9:20:26:
                    c4:8c:17:1f:96:26:d4:4e:fa:30:a0:96:fa:ae:1b:
                    b0:d9:e8:f5:20:79:be:6d:0a:26:31:ae:08:4a:76:
                    95:6e:20:ff:b8:d0:61:7d:e5:db:50:ed:e9:4c:2d:
                    38:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:15:C3:80:CE:40:94:3D:77:9E:1B:C5:F2:71:0E:A6:EE:D3:CE:4C
            X509v3 Authority Key Identifier:
                keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/69482E56075411EFB23BE380C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:a9:85:d2:96:3a:bd:d4:a7:cd:db:e7:18:0f:7d:0e:16:
         14:c2:e6:eb:2e:26:e7:e6:15:47:ba:34:6b:5c:e5:38:cb:83:
         2b:51:51:9b:47:69:e6:80:d4:d3:64:ac:ed:ee:7a:92:12:72:
         53:3e:cb:99:77:3c:71:4e:cd:93:df:f5:28:88:ba:61:71:eb:
         6a:ac:92:7f:6f:fa:96:6a:9a:b2:89:7d:c2:4d:c3:9b:f1:cb:
         83:36:99:e2:01:c8:2a:8d:6a:44:59:90:3e:30:6a:2e:96:79:
         3e:98:0a:94:d6:32:11:f8:e7:f2:50:21:21:a0:55:b1:00:23:
         a0:d4:12:a2:41:bc:07:67:c4:32:2b:5f:c4:51:72:77:e3:3d:
         ab:50:6a:e4:09:7c:9e:e2:5a:04:18:89:3b:4a:50:60:20:f0:
         24:4b:41:48:a5:da:cc:7f:7b:d9:44:7a:ac:bf:87:c7:aa:67:
         c8:93:97:da:83:cc:52:ff:d1:6a:93:20:8c:3b:49:c1:95:4a:
         a0:06:f3:43:42:b7:db:18:42:7d:18:ba:f0:af:b7:d4:60:d2:
         78:6e:16:d2:6f:de:e7:25:59:18:19:e2:ba:04:18:2c:d1:d5:
         60:fc:e1:5b:3b:1b:65:b5:eb:f3:a8:92:6c:48:b6:a0:96:80:
         fb:74:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:16 2026 by rpki-client