Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/34AB7E9098E311EDBDD55016C4F9AE02.roa
File:                     34AB7E9098E311EDBDD55016C4F9AE02.roa (raw, json)
Hash identifier:          RfqhAwSWYkWgiFr8MCzXMhAG9EjLRJrF2SY1X5M4oZM=
Subject key identifier:   9A:C9:6A:62:EB:89:AE:4D:B9:B2:8B:1D:67:B6:E6:46:DF:DF:B3:C4
Certificate issuer:       /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial:       0260
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/34AB7E9098E311EDBDD55016C4F9AE02.roa
Signing time:             Tue 17 Feb 2026 01:22:11 +0000
ROA not before:           Tue 17 Feb 2026 01:22:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     150669
IP address blocks:        103.51.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
                          rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
        Validity
            Not Before: Feb 17 01:22:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6993c2c3-e96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:c5:7e:02:72:f7:21:0c:9e:04:ae:e7:ea:
                    65:51:b3:74:4e:84:8f:87:b3:96:f9:23:21:82:35:
                    ec:0d:bb:0a:a8:67:a8:8e:1f:dc:9e:18:80:1a:d9:
                    04:4e:8a:9b:b7:b1:04:fa:e4:1a:cc:68:bb:b0:36:
                    77:e2:50:8d:25:4a:1b:af:49:1f:14:93:1b:c0:3c:
                    f3:08:39:68:55:ab:65:36:6a:d7:ae:25:bc:56:3e:
                    2c:90:39:16:9d:1d:33:d3:1c:03:4f:5a:3e:44:50:
                    2f:59:94:38:b5:48:85:fb:54:4c:8f:12:9f:12:9f:
                    2b:91:fd:c9:99:86:ca:b4:12:f6:8e:6a:c0:6f:49:
                    a3:d8:17:31:4b:68:97:50:be:2f:a6:a1:6f:29:c9:
                    30:8b:b8:d2:ae:28:1e:ef:8d:b8:87:41:fa:91:b3:
                    a1:8a:b3:c2:a8:dd:52:e4:7b:31:38:f2:4c:d0:3f:
                    c3:9c:0c:ba:9c:9c:52:4e:95:b8:cb:17:de:cb:d6:
                    6c:ff:56:ba:c2:d7:bc:9a:69:8c:8e:57:0c:bb:44:
                    f5:f8:22:4f:49:90:63:20:50:89:30:08:a0:31:db:
                    7e:60:82:b9:8a:51:0d:16:fb:17:23:01:55:07:c9:
                    40:7b:85:5e:c1:76:7d:fd:f0:dc:c5:3a:47:23:52:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:6A:62:EB:89:AE:4D:B9:B2:8B:1D:67:B6:E6:46:DF:DF:B3:C4
            X509v3 Authority Key Identifier:
                keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/34AB7E9098E311EDBDD55016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:e1:b0:ba:e3:72:27:2d:c0:b0:24:ef:15:68:4c:bb:64:
         1f:6f:74:67:9d:2a:23:0d:bb:8b:82:db:52:56:be:26:b2:ec:
         89:da:0d:26:c0:52:05:86:cf:c6:b0:fc:42:82:0e:ad:70:a8:
         91:7d:4f:18:b9:37:84:ad:fe:ee:10:34:79:b5:81:ff:c0:6c:
         e9:75:9f:12:78:75:37:ad:7e:13:bd:52:b5:15:c8:d6:47:19:
         97:1b:96:21:22:8b:4f:10:26:a2:ed:d5:50:ef:0d:dd:d3:fa:
         81:72:64:1e:f6:53:fa:ae:be:f6:3b:44:60:0c:5d:0d:75:d4:
         7c:c4:01:34:5a:ed:d2:05:ba:8e:9c:9d:6c:73:9e:0b:70:c4:
         a7:d2:45:bd:50:e8:24:38:40:23:44:b6:d4:2b:9e:1c:4f:cc:
         63:7f:dd:5d:df:8c:a1:e4:16:73:f1:e0:31:1b:ae:d9:7a:d6:
         3b:5b:4d:79:d5:18:ab:26:30:3d:f4:22:9b:b5:10:b2:da:4d:
         a1:f8:06:ef:22:73:b8:b3:40:6a:14:d2:de:5b:ef:9a:6e:f7:
         64:d9:3f:ef:91:0c:9e:1b:c8:c8:1d:e7:2d:72:63:e7:bc:60:
         76:ef:48:57:a8:b6:79:86:b8:24:08:70:4f:a4:ae:9c:5d:d1:
         54:ae:18:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:43:14 2026 by rpki-client