Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/DB056F0C688011F09D2C9A15C4F9AE02.roa
File:                     DB056F0C688011F09D2C9A15C4F9AE02.roa (raw, json)
Hash identifier:          b1EYcodOLNz2mosVm144PrUrVqHngjINdjk1gQYOSKc=
Subject key identifier:   04:9D:00:C6:18:7E:A7:5E:58:39:3B:23:BB:95:61:BB:F7:28:1D:E8
Certificate issuer:       /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Certificate serial:       1221
Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/DB056F0C688011F09D2C9A15C4F9AE02.roa
Signing time:             Wed 28 Jan 2026 17:14:48 +0000
ROA not before:           Wed 28 Jan 2026 17:14:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38056
IP address blocks:        125.253.132.0/22 maxlen: 24
                          125.253.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
                          rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4641 (0x1221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
        Validity
            Not Before: Jan 28 17:14:48 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=697a4407-5a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:d6:24:d0:8e:63:ea:97:a4:c6:9a:f7:ae:
                    e7:40:57:99:ca:ca:9c:34:f9:37:ab:9f:cc:f2:94:
                    7c:b7:6f:4a:6f:ab:20:76:0b:3e:46:62:2c:84:83:
                    a9:44:c2:8b:59:a8:80:e5:32:d9:cd:81:e3:d1:e4:
                    89:c6:0e:9b:64:38:01:81:56:91:2b:7d:52:9e:d0:
                    1c:ed:b5:ea:51:be:0c:4f:dd:e6:d9:b2:8c:4a:bf:
                    0a:e7:52:ed:57:1d:ab:8f:11:9e:9b:5a:4c:81:6b:
                    f7:6a:63:17:5b:6f:30:92:a3:d1:0c:45:4b:4e:9a:
                    f9:ad:b0:40:24:d2:dd:6e:ba:73:d2:e8:6b:04:6f:
                    6b:9e:0b:4a:3b:89:64:23:22:f4:3c:8e:25:51:1b:
                    fc:de:0f:bf:9e:6b:16:dd:bc:b5:26:58:de:a0:fe:
                    fc:db:2e:88:e3:6d:00:79:76:01:f9:f3:4f:9e:f0:
                    58:77:c8:ff:f4:22:a4:cb:35:19:10:e9:74:79:bc:
                    c0:3d:40:09:3f:da:0b:e0:ff:58:64:fc:c7:a5:f2:
                    3c:e2:37:3d:ac:a4:d6:f0:43:3e:9b:87:42:d8:be:
                    6a:29:d1:9a:c5:6a:72:e0:8b:e4:70:ad:09:cb:0a:
                    6b:e8:4c:93:d3:5e:64:56:b4:f2:ac:a9:26:8d:51:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9D:00:C6:18:7E:A7:5E:58:39:3B:23:BB:95:61:BB:F7:28:1D:E8
            X509v3 Authority Key Identifier:
                keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/DB056F0C688011F09D2C9A15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.132.0-125.253.139.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:3f:3f:b1:b2:75:83:27:78:f6:fd:79:9f:c3:59:b6:9e:2e:
         d5:51:84:bd:98:a4:a8:c9:08:a2:75:5c:84:28:de:fe:6a:a5:
         8e:64:6e:cc:8e:6d:8e:c0:57:b1:5f:b5:03:fc:1f:5f:b9:4d:
         54:ad:29:cb:6e:32:ff:39:9d:52:3f:cd:d4:24:2a:33:41:26:
         8c:5b:a1:e7:17:32:6c:16:75:79:51:ea:2f:19:1e:9f:78:7f:
         d0:9d:08:9b:3e:e9:51:97:71:c5:11:91:d1:80:1b:ce:69:e9:
         46:f4:39:bd:2d:4a:2a:01:da:c3:ac:d7:47:db:9d:2f:de:b2:
         c1:08:47:0d:ba:07:71:03:e6:49:16:06:5d:ee:db:d8:c8:e8:
         62:87:46:2b:75:ee:63:32:b9:15:8f:5c:ee:81:da:25:bf:2e:
         86:43:07:14:19:35:7e:d8:a3:01:e5:9a:7b:bb:34:c7:5e:35:
         bd:93:94:55:f5:6b:89:c7:cf:49:9e:85:01:a3:09:fd:15:0a:
         15:ad:17:35:1b:75:ad:c0:57:b8:e1:82:6b:4e:c2:6b:6a:8f:
         a4:52:ba:d1:c0:fe:4b:89:61:df:ee:0c:40:08:5e:63:f4:4c:
         fd:80:a6:51:b5:5b:ef:69:b8:f1:72:af:11:e6:f0:7a:d5:b9:
         aa:21:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:20 2026 by rpki-client