Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/59136C26FFB911F09F6B6297696F56BC.roa
File:                     59136C26FFB911F09F6B6297696F56BC.roa (raw, json)
Hash identifier:          DDczGG/HubU6TR5OLqeS8m7SdTUW8gIQ0yvlSi2z1Hw=
Subject key identifier:   9A:9E:15:B2:23:8F:BB:CD:4B:E6:D6:BF:70:32:D8:8E:9B:BD:4C:6A
Certificate issuer:       /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272
Certificate serial:       BC
Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/59136C26FFB911F09F6B6297696F56BC.roa
Signing time:             Sun 01 Feb 2026 21:59:58 +0000
ROA not before:           Sun 01 Feb 2026 21:59:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     56265
IP address blocks:        103.3.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl
                          rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272
        Validity
            Not Before: Feb  1 21:59:58 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=697fccde-ffd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:d6:48:10:eb:df:78:0d:fd:fb:80:3a:fc:
                    63:21:dc:6d:4b:81:85:2a:71:ee:34:ae:99:8b:e0:
                    71:d1:9a:96:5c:68:df:87:2d:c1:a6:a2:d1:89:3d:
                    30:b2:55:cb:ba:37:9a:c8:c7:b9:c6:cf:c9:df:6f:
                    23:c5:93:36:82:4e:d0:64:14:cc:bb:4b:dd:04:70:
                    68:b0:ed:ff:12:0c:88:bd:b4:ea:41:f5:81:7b:e0:
                    97:6d:72:2f:21:ca:39:61:32:91:34:19:73:a1:2c:
                    40:a8:4d:a5:e6:94:b5:b9:ea:1d:5c:a9:c0:8b:07:
                    00:55:c5:ae:16:1c:c1:e0:53:bd:b5:36:55:7c:70:
                    a0:e4:b6:24:11:76:de:d0:01:da:48:63:25:8b:78:
                    2e:de:b4:a6:1a:5e:ca:65:c6:79:d1:d2:c6:27:87:
                    ad:d4:eb:f8:52:d3:3e:7f:86:2b:2a:a1:ad:10:38:
                    4a:38:07:8f:7b:3f:c5:a6:c4:4e:d5:3b:5d:db:9e:
                    cb:5a:25:c0:3a:0a:bc:46:48:b7:9e:b5:6c:c9:6e:
                    ba:c7:39:6b:d6:c8:ea:fb:06:ce:9b:17:58:7f:c7:
                    3f:a4:ee:b8:15:62:40:4e:dc:08:da:65:ef:d5:04:
                    a2:49:ca:86:ea:ac:0b:3a:2a:fa:ae:e0:e8:f0:f0:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:15:B2:23:8F:BB:CD:4B:E6:D6:BF:70:32:D8:8E:9B:BD:4C:6A
            X509v3 Authority Key Identifier:
                keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/59136C26FFB911F09F6B6297696F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:85:76:84:89:89:0f:c2:12:85:57:8d:9c:de:a5:9a:8a:
         dc:20:64:0e:ab:5c:2f:4d:a3:2a:3b:94:73:7f:0e:95:dc:74:
         83:22:0e:47:ec:73:62:76:2c:d7:02:d7:9a:a7:77:e6:a4:37:
         59:c8:db:fc:cd:17:7f:0d:0a:90:4b:69:e3:19:da:60:78:a5:
         56:12:0e:7a:19:50:bb:97:7d:5c:bd:fe:f2:c0:53:3c:ce:38:
         a2:d8:70:48:b9:06:51:4b:9d:2d:d3:30:f9:a6:13:ec:8c:3b:
         21:ff:1f:14:ca:12:9f:bf:f5:b7:d7:c0:f4:7e:ba:b1:5d:82:
         20:42:05:2a:aa:34:18:de:df:10:ff:57:bb:dd:4e:90:95:a0:
         6e:ee:fb:2f:8c:26:4d:b7:5e:68:85:7e:b4:6e:5b:b2:4f:5c:
         98:38:7d:50:ff:33:d4:c5:10:f4:7b:1e:dc:55:a2:3c:54:e0:
         ad:70:ab:e2:77:64:a5:39:06:18:ee:8a:c2:81:66:77:07:91:
         39:ec:ba:4a:36:8c:f0:95:cb:29:a2:4b:0a:85:49:e8:84:8c:
         a0:04:d1:08:dd:96:20:1c:1a:2c:8b:2c:29:10:b8:88:07:2a:
         ba:dc:09:d9:16:63:38:b5:b9:ba:50:e9:60:b6:f7:a9:7c:7f:
         c6:3d:50:0e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQzODIxMTAvBgNVBAUTKDc2ODg3NDY5RDY0MTBCRTQ2ODA3NzU4Nzg0N0VFQUEw
ODBCNDIyNzIwHhcNMjYwMjAxMjE1OTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdmY2NkZS1mZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsZfWSBDr33gN/fuAOvxjIdxtS4GFKnHuNK6Zi+Bx0ZqWXGjfhy3BpqLRiT0w
slXLujeayMe5xs/J328jxZM2gk7QZBTMu0vdBHBosO3/EgyIvbTqQfWBe+CXbXIv
Ico5YTKRNBlzoSxAqE2l5pS1ueodXKnAiwcAVcWuFhzB4FO9tTZVfHCg5LYkEXbe
0AHaSGMli3gu3rSmGl7KZcZ50dLGJ4et1Ov4UtM+f4YrKqGtEDhKOAePez/FpsRO
1Ttd257LWiXAOgq8Rki3nrVsyW66xzlr1sjq+wbOmxdYf8c/pO64FWJATtwI2mXv
1QSiScqG6qwLOir6ruDo8PA5VQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJqeFbIj
j7vNS+bWv3Ay2I6bvUxqMB8GA1UdIwQYMBaAFHaIdGnWQQvkaAd1h4R+6qCAtCJy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDM4Mi80NEI1RkExQzBB
QzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMtUm9CM1dIaEg3cW9JQzBJ
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMEluSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQzODIvNDRCNUZBMUMwQUMwMTFGMEI1OEY4MjQ3QzRGOUFFMDIvNTkxMzZDMjZG
RkI5MTFGMDlGNkI2Mjk3Njk2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnA+wwDQYJKoZIhvcNAQELBQADggEBAEQrhXaEiYkPwhKF
V42c3qWaitwgZA6rXC9Noyo7lHN/DpXcdIMiDkfsc2J2LNcC15qnd+akN1nI2/zN
F38NCpBLaeMZ2mB4pVYSDnoZULuXfVy9/vLAUzzOOKLYcEi5BlFLnS3TMPmmE+yM
OyH/HxTKEp+/9bfXwPR+urFdgiBCBSqqNBje3xD/V7vdTpCVoG7u+y+MJk23XmiF
frRuW7JPXJg4fVD/M9TFEPR7HtxVojxU4K1wq+J3ZKU5BhjuisKBZncHkTnsuko2
jPCVyymiSwqFSeiEjKAE0QjdliAcGiyLLCkQuIgHKrrcCdkWYzi1ubpQ6WC296l8
f8Y9UA4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:57 2026 by rpki-client