Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
File:                     F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (raw, json)
Hash identifier:          DS7ZIrv/NPpi8NXQnRe21bKbXQT7rVsHC0eYDgaCMr0=
Subject key identifier:   0F:39:52:A2:DD:F0:06:0F:5A:90:6A:52:E7:44:EB:C7:13:63:5E:73
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0615
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
Signing time:             Mon 09 Feb 2026 08:18:52 +0000
ROA not before:           Mon 09 Feb 2026 08:18:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137550
IP address blocks:        103.112.236.0/24 maxlen: 24
                          103.112.238.0/24 maxlen: 24
                          2406:d1c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Feb  9 08:18:52 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6989986c-cbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:a1:01:2d:4f:c7:6e:bc:68:13:96:85:47:
                    e4:a2:81:6d:fd:f2:ff:69:3c:72:c3:d0:14:6e:d2:
                    f6:cd:fc:9c:39:a3:d5:69:93:48:76:60:38:b5:97:
                    40:fa:5e:d4:7d:b2:dd:1b:c0:e5:3f:d4:12:26:61:
                    0b:8b:20:ce:3f:db:b8:54:70:be:ea:f9:b7:86:f1:
                    d4:e2:b5:e0:47:b4:f7:75:b4:67:e5:22:b5:92:50:
                    b5:2c:30:ec:f9:8a:66:c9:df:1a:ac:43:7d:52:eb:
                    fe:56:3d:af:64:a6:10:c0:9a:c3:51:85:c0:5a:ba:
                    d6:13:ba:4b:c0:68:24:6d:0a:3c:e3:ea:70:ea:6e:
                    3d:bb:72:71:6e:e1:98:f1:ba:59:05:cf:b1:49:f8:
                    d9:d6:04:38:bb:ff:1f:23:65:bf:dd:a3:c0:d2:fc:
                    36:7d:a9:5e:c2:0e:72:29:87:af:6c:82:e9:2e:9b:
                    4b:85:5d:a7:b4:07:54:d8:8f:6c:2c:2b:42:7e:0f:
                    d9:41:45:ad:01:3a:0c:38:d3:55:66:6c:5b:6b:32:
                    59:d7:83:58:47:57:9b:82:d3:a4:29:21:94:9a:7e:
                    6f:28:17:46:e6:3e:99:fb:90:d8:1f:bc:4a:a0:26:
                    c5:d2:6b:e8:e2:46:65:e8:fe:1d:39:bf:44:03:53:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:39:52:A2:DD:F0:06:0F:5A:90:6A:52:E7:44:EB:C7:13:63:5E:73
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.236.0/24
                  103.112.238.0/24
                IPv6:
                  2406:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:e2:a3:c8:24:10:bc:b8:86:46:28:38:d9:2a:0e:c9:75:
         00:67:bb:4e:63:3e:60:2a:d0:d4:c5:4c:6a:6d:11:88:e0:53:
         00:f6:51:82:77:3b:9d:2f:8c:81:8b:79:99:35:10:4b:8e:e9:
         56:9e:d5:85:53:69:98:fe:d1:e1:f4:ab:5c:a4:5f:5a:c7:41:
         0a:61:86:21:9d:1d:ba:6e:67:2c:b2:c1:cf:75:8f:50:9e:ed:
         2b:7c:26:99:89:1b:d6:25:a4:2e:af:92:32:0c:4c:8f:4e:d9:
         43:79:4a:b0:95:e5:8e:bb:2c:e2:74:8a:4f:92:16:83:b3:6f:
         a7:b2:da:e7:8b:63:4d:38:22:68:66:83:3a:e3:b9:e8:41:f1:
         06:a7:af:f4:ac:d4:d4:75:70:3a:ad:21:0b:a6:e7:ba:12:e9:
         1e:84:b9:5f:50:9c:68:7f:c9:f3:3a:59:66:a1:ab:af:c3:0a:
         ba:6d:83:9e:8f:95:77:92:3d:53:cb:0f:d7:a4:9e:e7:c4:63:
         72:f3:e9:5f:71:1c:14:0b:61:6b:8e:43:e0:64:04:d3:98:0c:
         9f:25:e9:4f:31:4d:cd:9f:cd:8b:27:a0:b6:df:77:c4:e8:94:
         3b:53:92:bb:f1:e4:ea:49:e5:d7:61:f2:31:d7:c9:17:fa:2e:
         bc:cd:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:52 2026 by rpki-client