Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
File:                     D254B444679111EF8A2C9062C4F9AE02.roa (raw, json)
Hash identifier:          uWEyeMJLYsMGmjoC0uqql21JmftSK+C8wOE1boQycuA=
Subject key identifier:   FD:5B:A3:62:FA:B8:0A:D4:A5:43:DD:CE:4C:01:99:65:84:2F:37:28
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       04DE
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 00:19:43 +0000
ROA not before:           Sat 31 Jan 2026 00:19:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134788
IP address blocks:        103.178.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Jan 31 00:19:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697d4a9f-ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:4f:5a:17:7d:84:52:72:5c:fb:57:fb:d7:
                    76:d8:b8:95:d1:5a:5f:8e:23:3c:b9:70:2a:e7:76:
                    ba:1c:1b:34:8d:c3:6a:92:f5:0e:bf:a7:94:9d:5c:
                    6d:a1:a9:a7:11:cd:ac:0f:3f:e5:80:27:bf:13:a4:
                    7c:6f:76:0c:00:3b:18:df:34:8f:0a:2e:0d:18:ac:
                    5e:af:46:58:6a:36:3e:73:9e:55:5c:2b:17:23:1b:
                    19:ad:21:cc:bc:3a:0e:a3:51:9d:be:c6:75:cc:92:
                    3b:95:0f:9a:e9:1c:54:22:19:f9:04:1f:1d:5c:0b:
                    ff:00:fc:95:98:88:46:d1:83:a3:68:a6:4e:15:3b:
                    c2:3f:17:92:a7:93:aa:77:57:dc:94:b6:1b:49:57:
                    69:1d:32:d9:0a:3a:44:07:08:c2:67:4f:84:af:34:
                    97:a6:a2:20:7b:e6:2f:fe:c0:a0:92:d5:02:01:f0:
                    b2:ca:8e:e5:a5:2e:7d:06:ca:84:f4:18:32:7a:15:
                    e2:6c:8c:07:ee:bc:72:94:07:33:e4:bd:43:cc:4a:
                    3d:48:0b:81:71:90:c6:8b:dd:8c:32:d0:9c:77:45:
                    a0:a6:31:57:db:94:3f:03:c6:ff:a2:41:df:5b:e7:
                    f8:18:ef:be:98:1e:25:f2:5c:fc:56:a1:60:a8:70:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:A3:62:FA:B8:0A:D4:A5:43:DD:CE:4C:01:99:65:84:2F:37:28
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/D254B444679111EF8A2C9062C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:51:05:f1:2f:11:96:65:e8:0b:32:28:df:9a:41:e2:01:
         77:8a:a3:b7:3a:8f:12:a6:31:00:12:f3:54:6b:e4:13:a7:66:
         86:1e:35:85:22:1e:90:c5:94:52:2f:1b:0d:42:14:30:ac:77:
         2b:20:a7:7b:07:43:32:48:2f:2a:44:fe:65:59:b1:9e:03:d9:
         2c:17:ab:b2:d7:e0:d4:fe:19:ec:a9:8f:a5:9c:73:be:fc:19:
         ee:be:55:ea:f4:d0:b0:4c:2b:45:d2:29:c6:d4:19:f2:8c:18:
         11:17:86:bc:0d:99:0c:ba:12:b0:88:ba:8a:a9:17:be:3e:d7:
         41:05:be:c6:a9:cf:5b:28:3d:96:9b:4b:47:a0:5e:10:83:0e:
         f8:da:9c:1d:06:59:6e:6d:41:15:bd:2a:79:53:91:af:74:25:
         8a:08:96:b8:10:24:e4:2e:89:6e:0d:ec:42:ea:3e:d6:3f:b2:
         2d:a8:1d:04:aa:fb:ab:7a:ce:7e:ad:aa:f6:22:30:a9:db:00:
         f5:64:dc:20:b2:06:00:df:9c:0d:66:01:3e:c0:59:33:8e:df:
         0c:ba:a8:1d:6a:34:42:c5:3d:1a:4f:75:f9:a1:f6:9b:bb:04:
         bd:1e:9f:81:55:a9:ac:da:1a:b4:bb:03:d1:34:40:65:83:77:
         73:27:23:42
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx
QTRDREQwODIwHhcNMjYwMTMxMDAxOTQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkNGE5Zi1lY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmFdPWhd9hFJyXPtX+9d22LiV0VpfjiM8uXAq53a6HBs0jcNqkvUOv6eUnVxt
oamnEc2sDz/lgCe/E6R8b3YMADsY3zSPCi4NGKxer0ZYajY+c55VXCsXIxsZrSHM
vDoOo1GdvsZ1zJI7lQ+a6RxUIhn5BB8dXAv/APyVmIhG0YOjaKZOFTvCPxeSp5Oq
d1fclLYbSVdpHTLZCjpEBwjCZ0+ErzSXpqIge+Yv/sCgktUCAfCyyo7lpS59BsqE
9BgyehXibIwH7rxylAcz5L1DzEo9SAuBcZDGi92MMtCcd0WgpjFX25Q/A8b/okHf
W+f4GO++mB4l8lz8VqFgqHD6HQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP1bo2L6
uArUpUPdzkwBmWWELzcoMB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE
RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkY0MjgvMzVFQjEzNDg1REQ4MTFFQ0I5QjRENjMwQzRGOUFFMDIvRDI1NEI0NDQ2
NzkxMTFFRjhBMkM5MDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnshswDQYJKoZIhvcNAQELBQADggEBAHgaUQXxLxGWZegL
MijfmkHiAXeKo7c6jxKmMQAS81Rr5BOnZoYeNYUiHpDFlFIvGw1CFDCsdysgp3sH
QzJILypE/mVZsZ4D2SwXq7LX4NT+Geypj6Wcc778Ge6+Ver00LBMK0XSKcbUGfKM
GBEXhrwNmQy6ErCIuoqpF74+10EFvsapz1soPZabS0egXhCDDvjanB0GWW5tQRW9
KnlTka90JYoIlrgQJOQuiW4N7ELqPtY/si2oHQSq+6t6zn6tqvYiMKnbAPVk3CCy
BgDfnA1mAT7AWTOO3wy6qB1qNELFPRpPdfmh9pu7BL0en4FVqazaGrS7A9E0QGWD
d3MnI0I=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:46:30 2026 by rpki-client