Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/BFF7726E6EF711E69FBC340BC4F9AE02.roa
File:                     BFF7726E6EF711E69FBC340BC4F9AE02.roa (raw, json)
Hash identifier:          PuSf6M3irHYhnDa7WXPOHe/+fpZXwzToymjaTutJ7vg=
Subject key identifier:   FC:13:7E:E8:09:4D:11:05:8A:1F:D7:A7:89:97:5B:48:DB:D8:AE:C2
Certificate issuer:       /CN=A9110C7C/serialNumber=39D1D595541891353094583618D6CC079C830CE1
Certificate serial:       1F1E
Authority key identifier: 39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/BFF7726E6EF711E69FBC340BC4F9AE02.roa
Signing time:             Wed 28 Jan 2026 16:13:42 +0000
ROA not before:           Wed 28 Jan 2026 16:13:42 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     64076
IP address blocks:        103.38.220.0/24 maxlen: 24
                          103.205.38.0/24 maxlen: 24
                          2001:df2:4bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl
                          rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7966 (0x1f1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C7C, serialNumber=39D1D595541891353094583618D6CC079C830CE1
        Validity
            Not Before: Jan 28 16:13:42 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697a35b6-2785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:e7:f8:7a:46:9a:c2:de:71:b0:20:3f:2e:
                    5a:6c:b5:46:12:a4:11:47:2b:34:45:a5:49:84:08:
                    07:db:fd:a9:5d:c9:1c:d1:21:66:09:e0:97:5b:6a:
                    99:e9:8e:69:4a:33:6d:3a:d0:8b:3f:aa:33:22:fe:
                    14:59:2a:08:01:06:7b:57:97:be:06:a7:19:3d:f9:
                    e1:3d:aa:de:99:fd:0c:9c:2d:19:92:ab:19:83:31:
                    98:98:54:82:fa:e1:45:8b:5e:4e:d9:c9:6a:66:c7:
                    45:b3:d6:3c:05:af:7d:63:b7:70:f3:29:dc:75:1e:
                    61:5f:90:bd:f9:ee:68:1c:54:1f:a5:d9:ef:5f:43:
                    98:39:c2:94:91:41:6a:18:2e:eb:45:dd:ce:e8:7a:
                    0b:8a:0a:2d:0d:4c:16:78:3a:a7:3c:84:9b:61:d7:
                    e4:da:e8:d6:dd:5b:6d:42:37:c0:95:8f:4a:90:63:
                    87:c0:3d:1c:46:6b:db:06:07:b6:1c:50:06:5f:e0:
                    f1:e6:7b:95:70:d4:21:41:31:de:c6:16:3b:eb:8a:
                    40:8e:a6:49:2c:91:c7:c4:fb:09:65:c7:32:a2:f0:
                    c7:1f:f1:27:58:14:69:81:b1:2e:3c:3a:8b:6b:70:
                    b4:13:ca:84:51:8a:5d:d8:53:3c:64:ff:a3:98:5b:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:7E:E8:09:4D:11:05:8A:1F:D7:A7:89:97:5B:48:DB:D8:AE:C2
            X509v3 Authority Key Identifier:
                keyid:39:D1:D5:95:54:18:91:35:30:94:58:36:18:D6:CC:07:9C:83:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/OdHVlVQYkTUwlFg2GNbMB5yDDOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdHVlVQYkTUwlFg2GNbMB5yDDOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C7C/29F7A0406EF711E69E32670AC4F9AE02/BFF7726E6EF711E69FBC340BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.220.0/24
                  103.205.38.0/24
                IPv6:
                  2001:df2:4bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:4a:06:67:6c:5b:1b:82:b6:77:51:26:4f:26:0e:4f:97:be:
         f0:43:53:fa:95:b4:60:62:28:a2:8d:e5:c8:55:7f:5e:27:9b:
         d9:85:dd:a4:9e:0e:2e:90:c5:f9:5f:5b:05:29:c2:aa:69:01:
         5f:49:62:42:f4:21:4e:dc:99:6d:68:f6:bd:4c:80:d9:be:33:
         e1:97:4d:1b:f7:df:c5:53:63:26:ba:a8:f5:73:2f:7d:e8:41:
         70:35:3f:2a:8b:f9:c5:89:c2:1b:d0:90:3c:f5:7b:3a:66:c4:
         cd:c2:d8:8f:18:fd:8b:9d:58:51:b9:58:3d:ec:bd:de:a3:5a:
         76:85:d3:9f:58:77:b0:85:57:70:fe:3a:0e:48:12:e7:d5:e6:
         52:0d:00:c6:99:57:3a:88:a7:e0:41:e1:30:f6:1e:8a:f8:1e:
         6c:fe:1a:98:a7:c0:cf:df:1d:8d:b7:5c:55:dd:44:3c:5f:bd:
         fd:c4:96:43:58:62:f9:0c:cf:35:64:a9:91:4e:88:d6:c9:0a:
         02:0c:b2:b3:cd:c2:7f:32:6f:09:64:2c:c2:eb:43:0b:0f:e8:
         2a:4c:82:bd:0a:e0:38:bc:a7:d7:94:f5:a4:b4:a5:69:55:c4:
         3d:7d:ed:1a:9a:91:09:7c:af:74:15:b7:8d:33:df:58:aa:9c:
         af:b3:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:14:09 2026 by rpki-client