Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/1333404E5A0D11EF8810E217C4F9AE02.roa
File:                     1333404E5A0D11EF8810E217C4F9AE02.roa (raw, json)
Hash identifier:          Ep4tMNglyyPmI0EPqOc5eqDEfoOyX4EBSgiHBPPncPI=
Subject key identifier:   0E:A4:99:A4:F9:88:6F:7C:53:4C:B2:4A:45:EF:C0:37:4D:17:A1:06
Certificate issuer:       /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial:       0221
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/1333404E5A0D11EF8810E217C4F9AE02.roa
Signing time:             Sat 07 Feb 2026 02:22:22 +0000
ROA not before:           Sat 07 Feb 2026 02:22:22 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136993
IP address blocks:        103.69.132.0/22 maxlen: 24
                          103.69.152.0/22 maxlen: 24
                          103.206.188.0/22 maxlen: 23
                          116.66.176.0/24 maxlen: 24
                          116.66.177.0/24 maxlen: 24
                          116.66.178.0/24 maxlen: 24
                          116.66.179.0/24 maxlen: 24
                          137.59.100.0/22 maxlen: 23
                          180.149.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
        Validity
            Not Before: Feb  7 02:22:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6986a1de-a4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:1c:35:ad:31:6e:a1:ac:6e:e4:9f:cb:49:
                    8a:51:6e:60:66:f5:d1:b6:28:ab:a7:a7:b9:7d:a2:
                    e1:2f:65:d6:09:de:0b:b0:9e:52:52:a1:5c:92:42:
                    d6:fd:0c:42:e5:1f:c9:18:fd:52:6a:24:f0:67:d9:
                    10:71:75:d5:59:bd:53:44:c4:5a:e2:f6:9e:e3:c0:
                    05:b7:56:ba:73:1d:e3:32:2b:8a:dd:e1:d7:37:48:
                    5a:8a:96:01:2f:e3:66:94:5e:3e:a4:78:12:13:86:
                    62:70:ba:56:24:c3:23:5e:19:7a:1e:b7:54:7f:21:
                    ad:c7:00:56:b1:25:a8:94:d1:15:31:6b:19:85:a6:
                    be:9e:ce:2a:ee:d6:07:42:02:f3:56:2f:71:2a:3d:
                    5e:8d:3b:0a:32:53:90:bb:14:1f:1d:0d:e6:85:b1:
                    3e:b1:71:7d:dd:31:07:c6:e1:30:60:0b:19:7b:d7:
                    61:60:13:16:78:b5:33:37:5e:5c:ce:41:6f:69:21:
                    c3:d4:a1:d9:aa:f0:25:40:63:e5:9d:cd:2b:c8:61:
                    f5:99:23:9d:54:6a:84:2d:c9:a5:b6:18:c7:b0:4d:
                    07:e1:19:f1:a1:5f:36:c1:4c:0c:5f:aa:a4:c9:78:
                    1f:12:fc:c9:bc:85:ce:5a:3d:2e:2b:f7:b8:55:70:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:99:A4:F9:88:6F:7C:53:4C:B2:4A:45:EF:C0:37:4D:17:A1:06
            X509v3 Authority Key Identifier:
                keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/1333404E5A0D11EF8810E217C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.132.0/22
                  103.69.152.0/22
                  103.206.188.0/22
                  116.66.176.0/22
                  137.59.100.0/22
                  180.149.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:77:30:d0:76:36:3b:f0:fd:8d:68:14:24:38:24:09:46:df:
         4a:86:9c:cb:5e:ec:48:28:d1:eb:85:5a:ab:d0:87:8a:3f:54:
         fc:a1:d2:97:f9:84:34:25:8b:b1:f1:d0:a4:9e:b4:29:15:18:
         9e:34:2a:38:7d:da:1e:7b:52:20:9b:8d:2c:b7:9b:88:00:2f:
         7f:dd:98:d8:23:84:b4:2b:b5:7d:20:41:70:63:a7:9e:a1:f4:
         61:05:20:c9:62:b7:8a:d5:68:31:dc:9d:2a:e8:3b:3b:d9:68:
         fb:6b:6e:9f:41:f3:aa:d8:4c:f6:11:d1:10:ed:28:1d:88:4a:
         d6:82:18:1d:59:99:1e:a2:de:c1:0f:7a:0d:94:d0:79:17:77:
         a4:da:c0:d6:81:c4:4a:69:09:1f:53:b9:56:38:d2:96:ba:72:
         00:5a:bd:7c:6b:f0:0f:56:01:04:ca:49:60:a5:4c:5d:39:5e:
         d6:be:00:31:9b:52:34:7b:b3:f9:49:51:68:01:d0:54:49:49:
         64:1a:e3:c1:57:fa:cd:00:bb:79:f7:ca:fa:7f:e5:f8:87:ee:
         37:c8:fb:8a:1e:0e:59:d9:cd:8c:89:0a:7d:51:4e:f3:2c:67:
         76:0e:00:58:63:68:f5:48:de:89:9e:71:94:79:ca:0d:53:3b:
         26:85:21:86
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0
NzYzNEJFRjcwHhcNMjYwMjA3MDIyMjIyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg2YTFkZS1hNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1bEcNa0xbqGsbuSfy0mKUW5gZvXRtiirp6e5faLhL2XWCd4LsJ5SUqFckkLW
/QxC5R/JGP1SaiTwZ9kQcXXVWb1TRMRa4vae48AFt1a6cx3jMiuK3eHXN0haipYB
L+NmlF4+pHgSE4ZicLpWJMMjXhl6HrdUfyGtxwBWsSWolNEVMWsZhaa+ns4q7tYH
QgLzVi9xKj1ejTsKMlOQuxQfHQ3mhbE+sXF93TEHxuEwYAsZe9dhYBMWeLUzN15c
zkFvaSHD1KHZqvAlQGPlnc0ryGH1mSOdVGqELcmlthjHsE0H4RnxoV82wUwMX6qk
yXgfEvzJvIXOWj0uK/e4VXBU6wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFA6kmaT5
iG98U0yySkXvwDdNF6EGMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG
Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MxRTkvQkJDRDVEMkNFRkNDMTFFREIyOUJCMDZDQzRGOUFFMDIvMTMzMzQwNEU1
QTBEMTFFRjg4MTBFMjE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMCoEAgABMCQDBAJnRYQDBAJnRZgDBAJnzrwDBAJ0QrADBAKJO2QDBAK0leww
DQYJKoZIhvcNAQELBQADggEBAER3MNB2Njvw/Y1oFCQ4JAlG30qGnMte7Ego0euF
WqvQh4o/VPyh0pf5hDQli7Hx0KSetCkVGJ40Kjh92h57UiCbjSy3m4gAL3/dmNgj
hLQrtX0gQXBjp56h9GEFIMlit4rVaDHcnSroOzvZaPtrbp9B86rYTPYR0RDtKB2I
StaCGB1ZmR6i3sEPeg2U0HkXd6TawNaBxEppCR9TuVY40pa6cgBavXxr8A9WAQTK
SWClTF05Xta+ADGbUjR7s/lJUWgB0FRJSWQa48FX+s0Au3n3yvp/5fiH7jfI+4oe
DlnZzYyJCn1RTvMsZ3YOAFhjaPVI3omecZR5yg1TOyaFIYY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:21 2026 by rpki-client