Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/C7492CAEFB5D11F0B51531C0496F56BC.roa
File:                     C7492CAEFB5D11F0B51531C0496F56BC.roa (raw, json)
Hash identifier:          Uo55ydVSxEmt3XMAFkAVA6CLbvv7qX5lo7YcS9HIaPo=
Subject key identifier:   2D:9E:DA:79:BB:39:7A:AE:D6:22:65:91:38:D6:FF:54:27:CB:D3:67
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       022E
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/C7492CAEFB5D11F0B51531C0496F56BC.roa
Signing time:             Tue 27 Jan 2026 08:54:24 +0000
ROA not before:           Tue 27 Jan 2026 08:54:24 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     138346
IP address blocks:        103.179.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Jan 27 08:54:24 2026 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69787d40-2e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:0a:7c:36:fc:40:76:f8:db:b0:e1:f7:aa:
                    e5:dc:1a:d9:d6:50:17:16:82:73:8c:48:4b:0b:de:
                    78:5f:c9:cd:03:82:ee:8c:e4:cf:82:dc:90:63:a5:
                    8b:fb:7e:2c:bc:23:ba:b7:6d:0a:3b:8b:e0:13:85:
                    0b:9f:50:cb:4c:e3:13:b8:66:30:a2:5c:35:32:8b:
                    de:f1:e4:35:97:e8:8e:04:6b:f0:f0:12:c8:38:e2:
                    fa:4a:24:fb:ca:ab:41:99:fc:fa:23:68:20:ee:8d:
                    81:e8:b8:57:40:03:d4:74:ab:25:c5:58:c5:5d:2b:
                    d6:5e:7b:a7:29:7d:8f:fd:94:31:06:97:b9:cb:0f:
                    d4:42:69:66:af:c6:9c:be:2a:68:42:31:e9:6f:4b:
                    97:23:4c:3f:18:ac:b3:6c:cc:5e:f5:c7:56:17:97:
                    86:87:19:7d:4a:82:7c:a7:ea:4d:bb:e4:72:10:eb:
                    b6:20:87:dc:de:d2:b9:6d:46:15:cc:02:1f:e9:8c:
                    86:09:ce:8c:96:5d:21:8c:de:be:ee:48:e4:8c:7c:
                    ca:3e:d5:01:6c:88:11:14:27:3d:86:b6:4d:95:60:
                    c3:1a:ae:c6:ad:64:b9:c4:89:bb:90:38:a1:64:e3:
                    c9:c7:80:b2:7b:68:b3:29:f5:e8:f4:e1:31:2c:f0:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:DA:79:BB:39:7A:AE:D6:22:65:91:38:D6:FF:54:27:CB:D3:67
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/C7492CAEFB5D11F0B51531C0496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:0e:91:5a:1f:27:53:8e:07:c8:f9:9b:6c:1d:62:9c:99:79:
         0a:1c:5f:93:c0:f1:e5:2b:41:24:18:50:ef:ed:bc:d1:e1:e9:
         02:44:45:af:ab:40:52:a0:2b:9f:e3:9e:cf:17:ba:e6:11:b8:
         b7:f9:c5:4f:78:50:1e:2d:9b:ed:60:d2:b4:94:36:24:94:79:
         c6:fd:3a:46:61:1c:ca:7c:5b:4d:40:c1:cb:c4:95:41:b9:f8:
         fc:0d:e3:e9:8d:25:44:0e:52:f6:2b:a9:9a:3f:1d:f5:2a:60:
         01:ec:16:5f:af:e8:b1:54:32:ab:0b:90:20:05:48:2d:b4:0a:
         43:1b:d2:a5:be:f4:b5:44:35:6f:66:b8:9b:6c:c3:1e:a2:1d:
         40:30:25:d4:6a:e7:db:28:df:0a:74:0a:48:6d:b3:cb:c1:a8:
         18:9b:5d:b7:d3:53:2c:b3:e0:0c:8a:a5:42:b9:e6:ac:19:f5:
         47:be:f0:8c:5b:6c:e0:5d:1b:74:2f:be:c3:b3:26:70:a8:5b:
         b7:1c:cf:3f:e6:06:16:a5:64:7b:cb:3d:f1:19:17:a4:ae:ec:
         7c:d5:7a:e1:00:c8:81:45:f0:5e:ed:a9:65:62:06:55:90:84:
         91:f0:19:52:9b:c7:06:38:f8:1d:35:d0:43:36:6e:f4:5c:30:
         c5:20:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:15 2026 by rpki-client