Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
File:                     B4D99056FF2511F0989D8DC686EE528E.roa (raw, json)
Hash identifier:          ew8sdGl4rom8HxN/a8WKGku9q7OXmx77v3SQQVmGwHk=
Subject key identifier:   15:9C:E8:85:42:40:FF:7F:16:DA:06:D9:56:E2:D3:CB:4E:21:BB:0E
Certificate issuer:       /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial:       017C
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
Signing time:             Tue 03 Feb 2026 04:23:02 +0000
ROA not before:           Tue 03 Feb 2026 04:23:02 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     9821
IP address blocks:        103.80.140.0/22 maxlen: 22
                          202.90.128.0/19 maxlen: 19
                          202.90.135.0/24 maxlen: 24
                          202.90.155.0/24 maxlen: 24
                          203.211.56.0/22 maxlen: 22
                          2001:d18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
                          rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
        Validity
            Not Before: Feb  3 04:23:02 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69817826-7ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:91:d5:b8:16:8b:da:a7:5b:4b:cd:fa:fa:
                    8f:71:dc:c6:84:50:0c:66:63:ae:02:28:a9:47:54:
                    5c:3c:db:d7:84:df:7a:13:0b:6e:a7:91:21:32:17:
                    04:81:80:07:51:62:a9:b6:ba:b3:e6:11:9e:d3:88:
                    0b:34:dc:bd:2b:20:e2:5c:d1:fe:5a:dc:5c:30:5a:
                    b6:06:f7:1e:5e:22:0c:98:d9:0e:37:dd:e1:ef:ae:
                    f6:c2:c9:99:05:28:e9:c2:8f:b8:dc:ab:1b:e0:54:
                    4e:08:f4:f6:c9:dd:1a:e8:90:bc:30:11:62:00:d3:
                    09:31:28:10:b3:94:54:a5:bf:9d:57:d1:7b:48:57:
                    89:cc:7b:5f:db:fc:cc:85:6d:99:bb:46:c1:eb:5d:
                    fc:97:ee:77:08:be:5e:fa:cf:18:9f:e5:ef:ac:bf:
                    28:f9:81:5a:2e:9c:a6:cc:5f:ab:84:e7:19:c4:0b:
                    c2:fc:68:03:e7:85:6e:22:02:0b:f9:62:a8:2a:4f:
                    f1:8d:9f:5f:6a:57:89:6e:3e:78:e7:c7:dd:6c:2b:
                    4d:fd:94:54:e2:ee:d1:09:8c:2c:b1:5e:49:16:88:
                    92:dc:df:73:9c:a6:b4:c8:3e:be:44:af:0f:b6:88:
                    ff:36:46:a8:5d:0e:04:a9:6c:67:8d:e6:53:dc:b3:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9C:E8:85:42:40:FF:7F:16:DA:06:D9:56:E2:D3:CB:4E:21:BB:0E
            X509v3 Authority Key Identifier:
                keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.140.0/22
                  202.90.128.0/19
                  203.211.56.0/22
                IPv6:
                  2001:d18::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c2:4f:8a:47:5e:29:e5:4b:d0:50:31:35:6b:cf:70:dd:2e:
         a9:4d:30:f4:a7:70:da:c7:f6:08:e8:b1:a3:47:a2:5b:67:5b:
         7a:87:85:00:c9:ef:e8:87:60:84:35:4e:be:fa:6a:d1:4c:43:
         9e:56:cf:70:81:77:bd:44:41:83:b9:26:da:8e:82:c9:7b:ba:
         9c:d1:7d:47:1c:a7:73:fc:55:0c:29:a9:b1:4a:68:51:14:10:
         bc:89:86:16:3f:72:86:f1:bc:5f:9e:cf:df:9d:ab:04:45:5a:
         61:91:52:f9:97:79:9b:d1:fd:06:a6:8e:c7:be:0d:d9:63:26:
         b8:3e:b2:4c:3d:ae:90:ab:12:bb:e1:69:b5:80:6b:58:fc:44:
         9d:07:7c:04:dd:c9:2f:8c:84:4a:05:0e:8e:fa:a1:b8:4d:0b:
         c9:fe:21:dc:c5:df:a8:9b:db:a1:ce:ce:49:86:44:fb:87:72:
         e6:db:bf:ff:9b:d7:4e:7d:16:79:a3:77:58:90:0c:49:7f:54:
         62:8a:99:85:18:4f:ef:3f:78:8b:f8:ad:0d:e8:8e:44:ce:50:
         30:1f:67:e6:48:5a:9c:13:a3:06:76:28:7c:67:95:97:6b:37:
         29:e0:bd:60:6e:9a:cd:f2:a6:ac:6e:a5:34:85:6a:11:54:8d:
         f3:19:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:24:42 2026 by rpki-client