Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/D9FDBEA0FB5D11F0A7F971C0496F56BC.roa
File:                     D9FDBEA0FB5D11F0A7F971C0496F56BC.roa (raw, json)
Hash identifier:          FBkS9ggAwAwAIBlBIX+OpUJ2obUurfAMDu0oKF5U9EE=
Subject key identifier:   C8:0D:29:43:7F:BE:8D:D0:90:DB:C5:A9:8C:18:F7:1B:93:7E:7A:9D
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       0230
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/D9FDBEA0FB5D11F0A7F971C0496F56BC.roa
Signing time:             Tue 27 Jan 2026 08:54:56 +0000
ROA not before:           Tue 27 Jan 2026 08:54:56 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     138623
IP address blocks:        103.179.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Jan 27 08:54:56 2026 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69787d5f-b1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:a4:ac:d2:21:82:5e:d0:eb:51:0f:a4:81:
                    c9:1e:60:04:22:a7:0c:41:09:82:79:5d:67:41:c7:
                    f6:e0:c1:3b:99:97:5b:3d:3e:30:08:e5:8a:f1:a7:
                    05:57:01:12:40:81:e0:55:79:f4:62:8b:41:c9:68:
                    90:e6:73:c2:49:db:ef:eb:57:1e:e4:eb:fe:e1:90:
                    56:67:08:16:8b:50:4e:85:e0:3a:30:f9:2f:7f:02:
                    28:54:e9:3d:b3:d4:ee:58:b4:16:1c:57:94:6b:9b:
                    93:5e:6d:da:cf:e0:58:9e:2d:c9:31:58:66:12:62:
                    a3:70:77:53:eb:71:8e:bf:7c:57:d8:cc:c1:1c:45:
                    dd:05:b0:cc:50:58:d5:67:5a:2a:bb:5b:e6:6c:56:
                    7b:35:21:98:1f:f2:f5:ab:44:56:ee:c0:2e:a3:9d:
                    c9:e4:0c:08:b5:3b:5b:46:53:54:92:19:b9:09:5f:
                    c8:e7:dd:f6:10:b2:11:47:33:f8:44:3d:1a:ae:36:
                    a4:df:ff:51:f4:56:d0:72:7a:0e:29:07:74:c5:1b:
                    18:31:30:80:04:ac:9d:c0:16:7c:b5:a6:53:bc:bf:
                    a1:09:b9:f4:23:25:57:d7:45:e1:49:e5:15:6b:ad:
                    b1:bd:ed:89:ba:37:21:5b:e2:2c:13:ec:12:87:f7:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:29:43:7F:BE:8D:D0:90:DB:C5:A9:8C:18:F7:1B:93:7E:7A:9D
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/D9FDBEA0FB5D11F0A7F971C0496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:3b:89:dd:65:e2:a5:9e:11:5c:61:16:78:e9:4c:86:71:
         b7:58:01:ee:6c:39:e3:5b:94:33:8f:f2:26:42:f8:bb:55:f8:
         64:f6:f9:25:28:61:a6:1e:ca:bd:3b:89:48:f9:bc:f4:1d:66:
         f2:9e:4c:94:35:bd:7d:24:8b:be:68:15:c4:94:cd:1d:a7:39:
         4e:c7:65:8a:4f:45:34:23:6f:79:be:91:96:ef:71:2e:bd:a1:
         bf:5a:19:0d:83:8f:29:5b:cd:b7:a4:95:19:17:b7:84:3c:f8:
         e1:e6:6b:2e:05:19:1b:9e:7e:aa:01:a4:3d:7e:bc:24:8e:24:
         b4:46:4e:67:57:75:b8:d2:d8:1b:79:8d:a7:30:57:c8:a7:62:
         63:e3:ee:d8:48:29:a9:55:98:ae:5c:a5:90:d6:1d:f6:c2:7d:
         cb:6e:c2:5d:bf:8f:8e:75:f8:6e:10:aa:0a:e7:d7:59:9e:cf:
         bb:4e:55:b3:b7:00:35:f3:d9:85:9e:a6:92:e3:4c:b6:09:be:
         8b:93:fa:15:43:b5:af:cf:54:a8:89:5e:1f:99:d3:d1:44:df:
         c7:d4:51:6e:26:38:8d:df:4c:b5:07:0a:36:f3:5e:2d:5a:98:
         e3:0e:23:12:2e:74:83:3f:0c:70:6b:10:63:38:e5:99:13:4d:
         1a:d3:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:15 2026 by rpki-client