Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/277BE15035CD11EAA2366620C4F9AE02.roa
File:                     277BE15035CD11EAA2366620C4F9AE02.roa (raw, json)
Hash identifier:          DwmZP6wybLxLMtJim6AD+TQ5YHF56ls1AjdW5Qw6lUw=
Subject key identifier:   62:B9:46:40:48:0A:B1:9A:E5:D7:D3:23:6E:38:69:E9:73:72:CB:69
Certificate issuer:       /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
Certificate serial:       0C1E
Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/277BE15035CD11EAA2366620C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 19:15:46 +0000
ROA not before:           Sat 31 Jan 2026 19:15:45 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139904
IP address blocks:        103.146.220.0/23 maxlen: 24
                          2001:df2:7180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3102 (0xc1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
        Validity
            Not Before: Jan 31 19:15:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697e54e1-5b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:30:60:d6:14:17:47:fa:93:25:d8:ba:41:
                    3c:48:8c:74:82:fb:2e:9a:db:90:26:16:bd:81:4c:
                    d3:56:b9:c3:cb:7e:1d:0d:97:c0:8a:46:cc:c6:c4:
                    22:f3:59:59:84:4f:3f:8f:6c:83:d6:2d:cb:ba:20:
                    1e:01:b5:73:64:0a:a8:ae:51:f5:9b:8c:81:c6:e6:
                    dd:7f:62:9c:4a:5b:55:d0:74:50:c4:71:b9:a9:5e:
                    8e:76:b6:30:d4:f6:ea:e4:fe:a7:5c:f2:fa:ac:65:
                    32:e3:00:f4:0b:d6:40:db:e5:46:ed:cd:52:4f:67:
                    d2:d0:cf:64:8c:31:1a:b2:1f:c6:a6:24:f9:72:22:
                    e5:ee:ab:98:bc:eb:90:7d:54:bf:e9:44:5b:8d:9c:
                    d4:d2:92:ae:27:fa:57:84:85:ad:7e:08:79:d3:0b:
                    2d:97:95:90:d5:54:5f:d6:74:22:8c:c6:e5:72:18:
                    67:20:b2:28:b6:cd:0c:c3:2a:20:62:e7:07:82:ba:
                    a1:24:73:17:85:9f:d7:8d:87:03:07:e4:f9:ab:c0:
                    5f:fd:88:21:11:4e:39:08:c3:b4:3c:14:e4:77:1c:
                    08:82:52:1d:8e:eb:e4:57:0c:ca:0b:7f:9d:11:75:
                    8a:e1:d9:9d:d5:46:8c:77:e6:d4:02:89:f2:e2:57:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:46:40:48:0A:B1:9A:E5:D7:D3:23:6E:38:69:E9:73:72:CB:69
            X509v3 Authority Key Identifier:
                keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/277BE15035CD11EAA2366620C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.220.0/23
                IPv6:
                  2001:df2:7180::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:5b:91:56:68:23:fa:cc:e4:dd:d5:d5:a9:2e:64:2e:c6:
         32:e8:c7:6a:34:0c:b1:70:db:8f:cd:66:90:2b:7a:2d:04:00:
         c0:ac:67:8f:36:3a:8b:d7:a4:6c:42:d8:44:36:99:77:ac:60:
         e8:92:a9:ea:3d:08:08:6e:6d:0c:57:2f:a8:7e:2d:2d:89:5c:
         49:22:1a:09:2f:94:75:2d:43:e0:1d:41:03:f4:15:5a:c9:1e:
         69:14:5d:e7:93:ff:35:09:07:92:2d:8f:81:63:12:8f:c8:e9:
         8f:6c:f1:1a:d6:0f:36:cf:69:e8:8d:35:50:04:40:4e:53:ec:
         34:3d:7c:2e:b9:6e:8e:8c:da:55:ca:62:74:96:7d:da:dd:92:
         c6:c0:58:26:5e:e5:82:04:2f:ee:e3:1b:84:32:09:94:61:69:
         12:2b:0f:1e:e8:6e:11:11:e8:27:6e:3e:12:a8:f3:9c:cc:db:
         94:6c:41:56:2d:9e:96:8e:33:9a:e1:d8:3e:28:41:24:b0:a3:
         c9:5a:6e:cd:ca:ce:e8:30:0a:ca:a9:36:ff:f8:67:db:68:e4:
         e0:be:84:d9:27:22:d8:eb:d6:15:aa:70:fa:1a:e7:7f:c9:0d:
         97:90:23:a1:ee:a7:81:43:ef:46:1b:e0:36:a2:51:32:78:a0:
         20:4b:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:14 2026 by rpki-client