Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa
File:                     B3A2D41A071211F0B9531F0DC4F9AE02.roa (raw, json)
Hash identifier:          I43la8Jg6nTXmIQnP62meA4bUFJBXemPB0O6WT7Y9jk=
Subject key identifier:   D2:30:EC:9E:E2:31:05:C8:9E:43:7E:4F:23:24:23:10:EB:DA:A9:DF
Certificate issuer:       /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial:       085A
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa
Signing time:             Wed 11 Feb 2026 09:29:57 +0000
ROA not before:           Wed 11 Feb 2026 09:29:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141189
IP address blocks:        103.156.26.0/23 maxlen: 23
                          103.156.26.0/24 maxlen: 24
                          103.156.27.0/24 maxlen: 24
                          2001:df4:e480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
        Validity
            Not Before: Feb 11 09:29:57 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=698c4c15-9061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:af:fc:a4:ab:2e:46:5e:ba:72:b1:31:c2:
                    f4:54:7b:f9:a7:59:9b:fc:1d:aa:1b:ab:0c:74:7b:
                    1c:f1:45:ca:26:57:19:f1:58:4f:2d:da:fc:38:c1:
                    71:9b:29:cb:a0:4f:cc:d4:27:62:bb:db:1b:4f:b8:
                    b4:7d:98:8e:e7:3c:19:e4:d5:05:9e:55:04:ec:79:
                    0e:cc:e2:50:0b:bc:89:b0:bb:2d:03:68:81:32:6b:
                    38:83:2a:a0:51:17:4c:73:d4:73:9a:aa:e6:01:9a:
                    8f:e5:5d:9d:bd:d0:54:90:95:68:34:cc:a6:ac:e4:
                    dd:a0:68:f2:ac:12:24:6f:20:05:b6:83:cc:43:cd:
                    8c:c4:56:35:c2:72:27:7d:f6:59:32:df:1f:17:75:
                    cb:2a:04:29:5f:44:e5:50:ed:51:82:06:4a:25:d7:
                    8c:24:52:64:16:bf:41:4d:a3:29:55:f3:a0:54:8d:
                    dc:c7:b8:0c:45:0e:16:10:c0:92:71:87:ca:cd:07:
                    db:0d:42:fe:96:20:6b:2a:8c:e2:a6:ba:b0:dd:5c:
                    59:d4:8c:2d:ec:9f:0d:5a:70:23:92:3a:31:16:05:
                    a1:1f:6f:47:e5:ce:44:64:3b:d6:e5:c8:c5:67:4b:
                    84:57:7b:69:bd:95:57:83:a4:de:f0:f4:ce:6e:7b:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:EC:9E:E2:31:05:C8:9E:43:7E:4F:23:24:23:10:EB:DA:A9:DF
            X509v3 Authority Key Identifier:
                keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.26.0/23
                IPv6:
                  2001:df4:e480::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:70:9a:da:eb:a5:17:59:7d:13:08:92:6e:35:08:c7:27:
         1e:d9:c5:2d:52:62:e7:06:49:37:75:93:bf:b7:b1:b8:32:aa:
         12:18:5c:04:1c:50:7f:df:e3:b4:6d:dc:ed:35:bd:b6:f8:39:
         d8:59:bf:28:ca:93:17:9f:a3:e5:fe:96:5d:b7:0d:d0:64:14:
         ae:14:b1:53:6e:aa:a9:9d:3e:30:9e:e1:3c:e1:04:0f:eb:1d:
         94:2f:a7:a0:d3:71:02:68:7a:10:64:e7:f0:9c:4b:5f:05:9d:
         81:ac:ef:b6:e9:d6:6b:c9:bb:d8:5d:8b:59:17:30:2a:22:20:
         1c:99:1b:34:82:2e:e8:ef:c8:fd:8b:3e:38:85:ea:ac:49:e1:
         d9:ab:2b:43:c4:14:f1:92:e2:d1:41:c3:5b:a3:5c:6b:75:34:
         92:6a:2d:27:9b:19:72:15:77:78:1b:fc:92:bc:49:21:2c:63:
         4a:09:ba:6c:08:c6:21:59:07:73:de:7d:da:fc:f0:8d:45:11:
         0f:a1:7d:d2:79:66:47:7c:da:b9:ae:fc:de:bc:ce:63:e3:aa:
         73:90:26:1e:1e:3d:b4:8a:7a:7c:d2:a7:56:b1:2b:b5:e2:43:
         06:7e:29:2b:6c:45:3b:70:a1:72:d8:81:c1:e4:fc:70:bf:69:
         5e:28:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:19:41 2026 by rpki-client