Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/214E0454B58A11ECAF32FE29C4F9AE02.roa
File:                     214E0454B58A11ECAF32FE29C4F9AE02.roa (raw, json)
Hash identifier:          +Bl3HZaSUARxCjCCmP0hzFEV+gWprtcPkCkk01ypk3M=
Subject key identifier:   B8:F1:97:82:BD:78:E5:8E:3E:99:C7:D5:5A:27:30:3A:D7:55:A2:50
Certificate issuer:       /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Certificate serial:       03DB
Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/214E0454B58A11ECAF32FE29C4F9AE02.roa
Signing time:             Thu 29 Jan 2026 00:20:39 +0000
ROA not before:           Thu 29 Jan 2026 00:20:39 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149294
IP address blocks:        103.178.18.0/23 maxlen: 24
                          2400:3ee0::/32 maxlen: 32
                          2400:3ee0::/48 maxlen: 48
                          2400:3ee0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
                          rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
        Validity
            Not Before: Jan 29 00:20:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697aa7d7-7269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:e4:b5:a3:a6:77:35:bf:92:0b:1d:f7:27:
                    a2:5f:8d:04:25:a6:99:ad:d4:c2:87:b0:13:5f:d4:
                    16:52:cb:b8:8b:34:31:14:76:37:22:af:ba:80:d9:
                    9c:45:a7:89:e9:fb:06:8c:18:39:22:b4:ce:5e:3b:
                    68:26:31:f3:9d:c4:93:8f:47:61:b9:14:21:96:80:
                    eb:d5:e8:8f:15:fd:e8:fa:bd:7a:69:1f:7d:17:8e:
                    dc:ef:ea:a1:71:69:fe:fb:b0:49:66:eb:ee:29:d7:
                    95:d7:9e:95:87:d1:36:de:3f:fc:bf:88:0c:d7:9f:
                    ca:17:36:c0:f6:d4:3a:eb:6b:d5:b8:80:83:56:2c:
                    89:d0:ec:63:e0:ec:dc:db:40:cc:c3:9d:23:22:43:
                    8e:6f:6e:96:4f:d5:f3:7c:d7:fd:91:c3:08:2a:35:
                    43:2b:85:29:7b:42:1f:f4:96:c6:97:ee:fe:77:54:
                    4c:c1:a1:2c:f0:f7:ef:bd:6f:3e:f2:56:fe:31:43:
                    c3:11:e1:cd:4f:ff:ec:ca:48:e2:4c:31:27:2f:c4:
                    02:00:a1:63:1d:aa:6f:7c:6e:94:8d:65:4f:16:f2:
                    ef:4b:ab:90:3e:06:44:6b:c8:4e:e9:bb:cb:d2:08:
                    46:3e:3e:64:cb:26:0a:a5:01:26:eb:32:30:b1:8d:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:97:82:BD:78:E5:8E:3E:99:C7:D5:5A:27:30:3A:D7:55:A2:50
            X509v3 Authority Key Identifier:
                keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/214E0454B58A11ECAF32FE29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.18.0/23
                IPv6:
                  2400:3ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:36:4d:9f:01:4d:65:b4:7c:98:43:d9:b5:9a:28:34:89:
         cd:aa:c2:e2:5b:62:28:da:be:37:17:1b:e7:41:91:e4:09:7d:
         ad:63:18:02:ef:3b:de:2e:f1:5b:a3:99:9c:ba:34:8f:8c:dc:
         23:52:2a:f3:ab:c2:28:aa:9f:2a:89:9c:b2:70:c2:13:25:cc:
         72:5e:fe:f8:fa:f0:33:c6:72:24:8d:69:7a:ca:3d:6a:55:e2:
         6a:7c:62:36:f1:c3:80:b5:d2:b4:06:3b:20:7b:cf:65:89:9b:
         ab:b0:51:94:14:b9:dc:0d:fe:07:dc:5f:b4:6a:dd:94:7c:c3:
         29:a0:a2:4e:24:e2:fd:17:43:32:e3:24:44:f6:9f:7e:10:1d:
         64:93:98:c3:25:5d:72:da:f6:5c:c4:49:12:aa:89:e6:4f:e7:
         66:dc:e2:30:de:00:45:f5:fd:90:0c:ad:97:ca:4b:c4:dd:b2:
         28:e2:10:45:d9:b3:3d:4e:72:57:5a:8e:4b:f4:c9:9d:66:b9:
         29:f2:e4:64:f4:d3:bd:33:49:3a:bd:4d:38:da:d0:d2:2c:93:
         d4:bf:af:3c:af:81:23:c0:57:d4:63:5b:53:15:f2:96:64:27:
         e4:2a:32:6f:65:e2:eb:be:83:d5:35:24:49:4e:eb:3f:e1:f3:
         d1:00:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:39 2026 by rpki-client