Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/64197A380C4E11F1BFF51C3A113D8C67.roa
File:                     64197A380C4E11F1BFF51C3A113D8C67.roa (raw, json)
Hash identifier:          5Oy8Md0mZVaFY1N2L0Z/JaqYCAcPM4gQutr42m7Ekmk=
Subject key identifier:   C0:B1:64:97:A4:2F:EA:0E:7D:F9:08:6C:84:3C:32:CD:31:50:3A:48
Certificate issuer:       /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Certificate serial:       03DA
Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/64197A380C4E11F1BFF51C3A113D8C67.roa
Signing time:             Tue 17 Feb 2026 22:17:05 +0000
ROA not before:           Tue 17 Feb 2026 22:17:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132165
IP address blocks:        103.186.22.0/24 maxlen: 24
                          103.186.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
                          rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
        Validity
            Not Before: Feb 17 22:17:05 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6994e8e1-25c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:24:fc:d0:c4:de:98:78:c6:b2:fa:e4:7f:
                    52:5a:f0:f6:0f:70:61:c2:b3:2f:67:8a:fc:49:74:
                    c0:f6:27:37:80:8c:25:23:4e:88:6e:48:29:d3:5f:
                    7a:a7:44:47:c8:85:1c:5d:1f:a6:8c:21:ec:25:aa:
                    18:db:33:80:a4:7a:ae:08:56:d4:5c:55:19:1d:67:
                    e2:0d:74:25:a2:b7:1f:22:fb:2c:15:b5:5f:b8:37:
                    e3:69:04:8d:0e:a0:ac:d4:10:0d:f1:a3:a2:17:96:
                    ad:5e:be:7b:e1:df:04:c3:7f:ad:71:6c:ba:21:64:
                    43:a3:31:cf:de:40:af:fe:1e:b9:22:b1:49:8b:a1:
                    bb:03:5f:2b:70:fa:9e:f2:d0:03:03:0c:58:30:f0:
                    bb:f0:e9:93:c0:7e:e3:d3:32:76:51:b5:0b:87:b1:
                    d2:ab:cb:f4:a2:a0:a2:24:a1:66:1c:aa:f8:12:25:
                    00:02:35:4a:57:3d:fb:09:3c:96:bc:41:f8:31:09:
                    55:7a:eb:68:3e:cc:5e:f1:ad:27:f1:60:f4:37:e1:
                    d3:03:cc:af:63:e4:2c:4a:83:c4:cf:b7:b6:df:12:
                    5e:9f:e4:7e:0e:d2:d3:ec:1c:a9:12:61:6f:bd:49:
                    14:3b:5b:63:f8:6e:4b:39:74:0a:1f:ab:b7:54:c0:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:64:97:A4:2F:EA:0E:7D:F9:08:6C:84:3C:32:CD:31:50:3A:48
            X509v3 Authority Key Identifier:
                keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/64197A380C4E11F1BFF51C3A113D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:09:b1:02:b5:57:a3:71:80:0a:ca:e7:8d:c2:aa:5f:b5:95:
         53:98:8b:ee:90:ce:ab:2a:26:63:a5:35:f2:f3:c7:bd:35:7b:
         49:db:9d:08:d9:f5:ea:f8:3a:f0:23:28:2d:dc:a3:72:b6:c7:
         6a:da:7f:40:0a:d0:1c:5c:c1:ce:c7:01:b0:f8:91:68:4e:f1:
         ff:65:bb:ac:74:7e:af:15:b2:35:10:58:1a:78:4d:86:eb:02:
         a3:ba:3e:b7:bd:3a:8c:a1:f3:21:f8:0d:bf:e5:dd:25:9c:b0:
         6f:7d:9a:6b:2f:a2:17:d5:79:a2:d5:18:bc:48:9d:c5:bf:dd:
         7a:86:cb:46:f1:33:d9:40:02:3b:5a:a3:07:5a:09:27:a4:83:
         0b:b8:f4:bc:1c:70:8b:c9:a2:d9:08:b7:ac:ef:21:17:7e:d6:
         f3:81:a9:27:d2:89:8d:de:01:ed:50:e8:51:5f:72:84:37:dc:
         e9:fb:72:36:9e:e4:93:f1:06:7c:6d:6d:da:5e:87:dd:cc:df:
         ed:7b:b1:87:c5:ca:3d:96:81:b4:c6:08:95:c4:d8:33:77:08:
         13:77:18:d7:f3:af:9e:fe:c8:b4:b3:6e:f0:c8:2a:35:58:2f:
         4f:f9:26:63:36:87:80:d4:bc:84:19:2c:1d:a8:f8:24:9d:71:
         48:11:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:08 2026 by rpki-client