Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/9682ACDE16A611ED86A3EF0CC4F9AE02.roa
File:                     9682ACDE16A611ED86A3EF0CC4F9AE02.roa (raw, json)
Hash identifier:          r42gvRnxO3uF5b+prgf2woeqv6/k7l6TD4yPnDTEfnQ=
Subject key identifier:   DA:65:1E:8C:D5:52:27:0B:78:30:BC:BF:67:7D:26:E0:2C:59:78:F3
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       02E3
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/9682ACDE16A611ED86A3EF0CC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 01:20:53 +0000
ROA not before:           Sat 31 Jan 2026 01:20:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56294
IP address blocks:        103.177.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Jan 31 01:20:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697d58f5-d1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:06:1a:c8:d2:00:c2:87:1e:09:58:fc:92:
                    1f:37:2d:2a:67:3b:c4:e0:ff:a4:4b:32:d2:29:a5:
                    4f:a8:7b:db:12:d7:04:85:1c:3e:54:18:3f:57:94:
                    74:85:f2:39:b3:9d:01:8d:c3:0e:f4:b8:0b:27:5f:
                    ad:ed:3a:e9:55:2f:e3:58:6f:d2:26:6e:06:25:d4:
                    c5:b6:44:99:92:a8:05:6c:7b:f9:8c:ac:07:db:4d:
                    89:3f:38:87:3e:ca:96:1c:f2:8b:ce:7e:80:ba:96:
                    7e:2c:64:10:c3:4e:e8:54:0b:ad:6a:8c:7b:20:81:
                    96:8c:87:84:40:4c:97:ca:75:f1:41:83:3d:44:99:
                    b2:4d:ab:63:6e:30:af:7f:e3:ee:b9:42:69:86:e9:
                    27:41:2a:da:b9:df:6e:b8:48:31:d6:80:d8:78:19:
                    6b:37:ac:69:bb:98:0e:84:56:a8:6d:be:49:88:bb:
                    60:18:6b:b8:2c:09:14:1f:62:4b:2a:28:7d:6a:4a:
                    65:f0:fb:50:b8:b7:43:1c:1d:e7:f3:af:bd:c0:28:
                    2f:50:e4:16:21:e0:31:bc:66:95:5a:2c:89:2d:9c:
                    46:ce:9e:b3:69:06:1e:ee:f1:25:0c:6d:b2:72:fd:
                    78:94:1e:5b:d6:d8:dc:9e:d7:bf:07:c5:70:33:f3:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:1E:8C:D5:52:27:0B:78:30:BC:BF:67:7D:26:E0:2C:59:78:F3
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/9682ACDE16A611ED86A3EF0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:42:fa:7e:d1:09:d9:6f:dc:8b:cc:04:af:64:75:1a:92:8b:
         af:66:fd:ce:5a:ad:bd:d6:6a:0c:5c:99:c9:e4:61:1b:bd:94:
         2b:73:b7:aa:3c:ae:2e:a5:76:e8:c4:01:e7:17:f2:96:a0:89:
         92:8e:6c:6f:8c:64:2f:bf:e2:9a:85:02:c2:38:4a:f7:2a:b7:
         cf:96:9e:cc:19:02:0e:c5:67:0c:bf:eb:ac:3c:6c:14:f1:78:
         08:0f:fa:e5:df:8b:5e:dd:1f:02:ce:a1:75:8a:e7:99:04:50:
         78:7e:5d:1e:7d:f2:1c:30:f0:ea:34:d8:9b:eb:2c:cb:0c:6c:
         c0:15:a4:55:b1:9c:fb:5b:22:84:c7:43:0b:bd:ba:fe:37:33:
         54:8b:34:7b:6e:5e:3c:f8:d0:05:77:92:2b:80:75:37:24:40:
         6d:a2:ac:1b:25:10:3d:bf:6d:e5:d4:15:8c:d9:32:65:9c:51:
         45:e6:3e:a2:1c:2f:4b:c4:f0:dd:02:5f:55:ba:9e:b2:48:1f:
         95:87:c9:3e:3d:ee:eb:03:f3:70:0b:2a:48:64:48:05:9e:13:
         17:09:e6:1f:66:3b:30:a6:0d:a1:83:bc:b3:d2:c2:fa:ac:f1:
         44:b4:26:1b:52:48:99:fd:c1:d8:9f:64:0f:7a:eb:a3:b1:90:
         59:ab:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:03:29 2026 by rpki-client