Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
File:                     A1F46062A64611EAA24E1461C4F9AE02.roa (raw, json)
Hash identifier:          QmxIAY7CHUzJfaZR7xmnSlR+x/gaqTguM34WO7mCYdg=
Subject key identifier:   98:3B:89:21:D9:06:1D:8B:2C:44:CF:2F:36:7F:79:7C:29:11:E4:89
Certificate issuer:       /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
Certificate serial:       0999
Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
Signing time:             Fri 06 Feb 2026 20:16:54 +0000
ROA not before:           Fri 06 Feb 2026 20:16:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134074
IP address blocks:        103.51.60.0/24 maxlen: 24
                          103.142.243.0/24 maxlen: 24
                          2001:df3:9840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4
        Validity
            Not Before: Feb  6 20:16:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69864c35-adff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:3f:19:5d:89:a5:fd:f0:00:2a:9f:74:90:
                    7c:0e:33:e1:42:f0:58:52:0f:8c:33:7a:19:0b:a7:
                    6a:8a:38:2b:04:2e:ea:e2:43:28:fd:fc:40:6b:28:
                    d5:16:47:11:a3:b6:f4:32:89:19:c5:65:48:af:3a:
                    25:1a:f5:1a:0e:92:74:db:37:2b:11:d5:c2:76:12:
                    05:61:16:c5:f1:94:95:e1:53:b6:8e:0d:f5:da:a9:
                    58:0e:7b:b4:70:76:0f:a4:17:46:a6:0b:0d:28:13:
                    11:b6:b2:50:13:dd:a5:e4:f3:c4:2e:02:bd:8a:af:
                    db:ef:21:a4:09:1f:1f:5a:11:4e:89:ee:a5:42:c1:
                    35:25:ad:aa:15:e9:de:23:e8:64:31:d0:1d:43:ef:
                    70:f1:47:b2:0f:e4:39:3f:d6:c4:c6:ec:68:16:db:
                    db:98:03:0c:b1:5d:20:26:44:e1:24:87:2b:7f:3c:
                    88:0d:6a:2a:8d:7a:a4:a6:9c:30:12:f7:b7:36:3c:
                    0d:07:ae:47:5b:c9:a5:48:ec:6a:14:e0:ed:19:fc:
                    6e:2b:9c:24:63:2f:f5:4d:3a:9e:2b:d1:42:a9:da:
                    24:88:dd:f0:09:81:c5:2c:45:2c:33:58:f0:f6:d6:
                    d2:8d:6c:c7:86:03:4d:b1:29:7e:da:bb:06:a9:41:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:89:21:D9:06:1D:8B:2C:44:CF:2F:36:7F:79:7C:29:11:E4:89
            X509v3 Authority Key Identifier:
                keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/A1F46062A64611EAA24E1461C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.60.0/24
                  103.142.243.0/24
                IPv6:
                  2001:df3:9840::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:80:32:b1:86:36:e0:fe:b0:f6:e9:c6:9a:93:bc:42:e8:6f:
         92:fa:1d:1c:29:eb:a7:63:34:fe:4b:77:1f:ac:17:87:d6:17:
         9c:4e:f1:be:d9:ce:e1:f8:00:2c:98:bc:c6:0b:66:e5:50:34:
         16:50:02:7d:58:1a:98:57:22:2f:ef:83:32:b5:9d:20:40:46:
         05:86:f5:99:cf:67:e1:f1:4a:60:04:b4:29:ba:f8:75:35:dc:
         4d:cb:ad:68:c4:71:91:d4:cc:64:73:5c:8b:4c:08:db:b8:c0:
         c1:d4:cb:18:54:a2:cf:21:61:16:07:a0:18:5a:35:6b:a3:a6:
         4e:8f:9c:57:32:bb:3b:c2:88:15:47:43:ac:50:c6:ac:2d:82:
         b9:71:05:01:9d:36:5e:7d:49:d8:40:cc:d6:9d:ad:4b:80:05:
         3f:a9:17:7d:77:fe:32:2a:33:52:7c:83:15:86:56:b6:6d:d0:
         da:73:3e:52:84:8e:6a:13:80:8f:17:25:e7:39:f5:65:81:a4:
         86:d4:de:d0:79:93:7e:b0:4e:b5:fe:7c:cd:63:8b:04:8a:9c:
         7c:f0:db:00:4a:d2:d4:59:b4:68:57:97:44:1f:0a:de:6b:84:
         95:f8:33:3d:13:c3:a4:69:a4:ff:73:d7:5f:bc:09:d0:20:10:
         42:14:53:1a
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICCZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE
QUIxMkMxRjQwHhcNMjYwMjA2MjAxNjU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg2NGMzNS1hZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAklk/GV2Jpf3wACqfdJB8DjPhQvBYUg+MM3oZC6dqijgrBC7q4kMo/fxAayjV
FkcRo7b0MokZxWVIrzolGvUaDpJ02zcrEdXCdhIFYRbF8ZSV4VO2jg312qlYDnu0
cHYPpBdGpgsNKBMRtrJQE92l5PPELgK9iq/b7yGkCR8fWhFOie6lQsE1Ja2qFene
I+hkMdAdQ+9w8UeyD+Q5P9bExuxoFtvbmAMMsV0gJkThJIcrfzyIDWoqjXqkppww
Eve3NjwNB65HW8mlSOxqFODtGfxuK5wkYy/1TTqeK9FCqdokiN3wCYHFLEUsM1jw
9tbSjWzHhgNNsSl+2rsGqUHdWwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJg7iSHZ
Bh2LLETPLzZ/eXwpEeSJMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2
NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkQwOTAvMkRDRTA0OENBNjQ1MTFFQTg2MUFEMzVFQzRGOUFFMDIvQTFGNDYwNjJB
NjQ2MTFFQUEyNEUxNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABnMzwDBABnjvMwDwQCAAIwCQMHACABDfOYQDANBgkqhkiG
9w0BAQsFAAOCAQEAzoAysYY24P6w9unGmpO8QuhvkvodHCnrp2M0/kt3H6wXh9YX
nE7xvtnO4fgALJi8xgtm5VA0FlACfVgamFciL++DMrWdIEBGBYb1mc9n4fFKYAS0
Kbr4dTXcTcutaMRxkdTMZHNci0wI27jAwdTLGFSizyFhFgegGFo1a6OmTo+cVzK7
O8KIFUdDrFDGrC2CuXEFAZ02Xn1J2EDM1p2tS4AFP6kXfXf+MiozUnyDFYZWtm3Q
2nM+UoSOahOAjxcl5zn1ZYGkhtTe0HmTfrBOtf58zWOLBIqcfPDbAErS1Fm0aFeX
RB8K3muElfgzPRPDpGmk/3PXX7wJ0CAQQhRTGg==
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:51 2026 by rpki-client