Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/C41C9EFEF55A11E9BF182559C4F9AE02.roa
File:                     C41C9EFEF55A11E9BF182559C4F9AE02.roa (raw, json)
Hash identifier:          gFJBvypJ6w7CcfisSuC1dnQrbhBGZ18c0grQeyJx9GM=
Subject key identifier:   DB:42:EF:78:8C:08:68:D7:FA:77:97:A6:2B:60:53:F1:AC:A6:92:7C
Certificate issuer:       /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
Certificate serial:       0D1F
Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/C41C9EFEF55A11E9BF182559C4F9AE02.roa
Signing time:             Sun 08 Feb 2026 18:15:24 +0000
ROA not before:           Sun 08 Feb 2026 18:15:24 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136211
IP address blocks:        103.83.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3359 (0xd1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38
        Validity
            Not Before: Feb  8 18:15:24 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6988d2bc-eb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:44:91:aa:2f:05:8d:94:ad:bc:ab:2d:35:
                    eb:d1:01:bf:f0:4b:32:70:6b:2c:ec:43:6d:47:d3:
                    47:8e:d9:a4:88:75:bb:39:4d:8f:b0:9a:42:5c:95:
                    2a:93:a4:6c:33:8c:2c:a3:c8:65:a3:40:61:8f:2c:
                    6f:da:84:5c:b7:f4:ea:c5:8d:90:b5:11:f2:58:5f:
                    f1:4b:1a:b5:f8:1b:4c:0d:b9:ac:2a:7f:91:9a:07:
                    23:c5:95:d3:7f:eb:f0:a9:3e:61:73:ee:2c:ad:0d:
                    bd:08:dc:da:d1:bc:0f:2e:93:ae:98:f3:10:da:3b:
                    5d:fb:d2:77:a2:a4:74:86:90:bc:98:60:b7:15:ee:
                    83:17:04:4d:aa:f2:ce:44:b6:1c:ee:63:dd:5b:81:
                    ce:b4:6b:77:36:24:2b:06:f2:9f:32:f4:af:fb:b1:
                    97:f9:3c:e9:cf:27:34:08:21:fc:cc:b5:15:82:1d:
                    ee:cd:ab:3c:b5:48:e2:0a:20:05:ec:c2:72:9e:64:
                    4d:64:fd:26:33:a2:49:ba:42:40:7d:4a:ec:d6:21:
                    bf:a1:a4:dc:8a:32:1c:e2:bd:73:a3:e1:c6:54:04:
                    a3:6d:a3:4a:d9:d6:f6:02:95:dd:5d:b2:b6:46:38:
                    bb:07:31:d6:ce:76:3b:13:8a:1d:f7:2d:39:e1:4a:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:42:EF:78:8C:08:68:D7:FA:77:97:A6:2B:60:53:F1:AC:A6:92:7C
            X509v3 Authority Key Identifier:
                keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/C41C9EFEF55A11E9BF182559C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:d7:2c:7b:3f:1e:09:3e:11:ef:f3:2e:1f:15:3f:95:0d:
         8c:ea:d1:04:a2:bb:e1:af:a1:d9:3f:9a:d8:cc:c6:54:ff:ad:
         93:19:2a:de:10:b2:c4:7f:af:e7:04:5e:ed:ba:e4:ea:89:62:
         da:7e:88:d2:01:bc:5f:e7:6c:10:58:9b:4e:45:3e:89:b0:c3:
         77:6b:75:10:be:d3:46:d3:81:ee:8d:d2:1f:3a:49:b5:40:87:
         4c:1a:d7:1c:98:22:3b:23:b0:2a:75:af:c8:23:3c:33:4e:0b:
         6a:69:c1:54:db:7a:98:4d:e6:8f:ff:7c:c9:d9:df:ae:b3:e0:
         d8:e0:4e:eb:84:72:82:63:bd:ee:05:e1:38:f4:c6:62:14:31:
         40:64:2b:ec:11:2a:2f:48:0d:19:cd:54:75:6a:60:8c:a0:cd:
         22:2c:4c:28:4e:50:f3:21:79:1d:de:9b:49:de:37:d8:05:c7:
         68:f4:ef:ab:fc:21:f4:6c:2d:ee:e2:dd:ed:cf:72:57:d6:fa:
         7e:ab:54:29:a7:9e:26:a3:c2:b0:73:ea:52:d6:5d:c8:ac:a4:
         99:16:b4:5e:79:de:20:47:91:88:f8:84:84:7b:e7:1a:47:c0:
         2c:47:b9:7d:17:e6:6e:7b:ad:b5:72:e8:79:b4:21:af:74:3d:
         2a:cf:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:54:03 2026 by rpki-client