Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/05106CB4AFB011EA8972F65BC4F9AE02.roa
File:                     05106CB4AFB011EA8972F65BC4F9AE02.roa (raw, json)
Hash identifier:          FCLrSjB20tjUAEg6DZtRxYcecfOvh4mgIfKYilfeuhQ=
Subject key identifier:   59:0F:B2:29:30:46:A3:FA:18:C5:D2:28:C9:FE:1C:B4:3E:43:95:66
Certificate issuer:       /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6
Certificate serial:       2228
Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/05106CB4AFB011EA8972F65BC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 16:13:14 +0000
ROA not before:           Wed 04 Feb 2026 16:13:14 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135043
IP address blocks:        103.207.80.0/22 maxlen: 24
                          2404:2e80::/32 maxlen: 32
                          2404:2e80::/48 maxlen: 48
                          2404:2e80:1::/48 maxlen: 48
                          2404:2e80:2::/48 maxlen: 48
                          2404:2e80:3::/48 maxlen: 48
                          2404:2e80:4::/48 maxlen: 48
                          2404:2e80:5::/48 maxlen: 48
                          2404:2e80:6::/48 maxlen: 48
                          2404:2e80:7::/48 maxlen: 48
                          2404:2e80:8::/48 maxlen: 48
                          2404:2e80:9::/48 maxlen: 48
                          2404:2e80:a::/48 maxlen: 48
                          2404:2e80:b::/48 maxlen: 48
                          2404:2e80:c::/48 maxlen: 48
                          2404:2e80:d::/48 maxlen: 48
                          2404:2e80:e::/48 maxlen: 48
                          2404:2e80:f::/48 maxlen: 48
                          2404:2e80:10::/48 maxlen: 48
                          2404:2e80:11::/48 maxlen: 48
                          2404:2e80:12::/48 maxlen: 48
                          2404:2e80:13::/48 maxlen: 48
                          2404:2e80:14::/48 maxlen: 48
                          2404:2e80:15::/48 maxlen: 48
                          2404:2e80:16::/48 maxlen: 48
                          2404:2e80:17::/48 maxlen: 48
                          2404:2e80:18::/48 maxlen: 48
                          2404:2e80:19::/48 maxlen: 48
                          2404:2e80:1a::/48 maxlen: 48
                          2404:2e80:1b::/48 maxlen: 48
                          2404:2e80:1c::/48 maxlen: 48
                          2404:2e80:1d::/48 maxlen: 48
                          2404:2e80:1e::/48 maxlen: 48
                          2404:2e80:1f::/48 maxlen: 48
                          2404:2e80:20::/48 maxlen: 48
                          2404:2e80:21::/48 maxlen: 48
                          2404:2e80:22::/48 maxlen: 48
                          2404:2e80:23::/48 maxlen: 48
                          2404:2e80:24::/48 maxlen: 48
                          2404:2e80:25::/48 maxlen: 48
                          2404:2e80:26::/48 maxlen: 48
                          2404:2e80:27::/48 maxlen: 48
                          2404:2e80:28::/48 maxlen: 48
                          2404:2e80:29::/48 maxlen: 48
                          2404:2e80:2a::/48 maxlen: 48
                          2404:2e80:2b::/48 maxlen: 48
                          2404:2e80:2c::/48 maxlen: 48
                          2404:2e80:2d::/48 maxlen: 48
                          2404:2e80:2e::/48 maxlen: 48
                          2404:2e80:2f::/48 maxlen: 48
                          2404:2e80:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl
                          rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8744 (0x2228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912016A, serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6
        Validity
            Not Before: Feb  4 16:13:14 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983701a-3187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:e0:8c:75:9d:2f:69:5a:6b:9a:22:5a:fc:
                    08:d7:c1:42:9e:e1:7b:fe:40:fd:dc:a1:92:7a:bd:
                    28:91:49:5d:82:83:c6:36:c8:5c:8a:76:3d:fd:a7:
                    80:31:86:fe:35:62:fd:89:9b:b2:1b:fd:22:10:dc:
                    57:78:d1:66:4e:6a:77:c8:87:d6:5f:15:30:e3:ac:
                    d0:74:4a:b9:c1:67:6c:0c:bf:7b:62:c6:b0:fb:fa:
                    3f:a3:e7:02:20:ed:ed:66:11:b8:6e:92:42:f0:77:
                    cd:c9:fc:3c:f8:af:ac:eb:c9:2f:3b:b8:49:eb:4d:
                    5e:ae:27:3f:2d:d5:1f:de:75:58:d8:5d:5d:d2:e3:
                    a9:34:2a:b0:4c:32:17:5e:18:05:d4:9b:21:39:87:
                    76:99:3a:c8:d6:61:d1:e9:6d:75:de:b4:44:cf:54:
                    3c:b5:22:bf:c7:5d:e3:1d:7f:56:43:74:2d:18:1d:
                    05:1c:ba:d8:cb:7b:4d:2d:70:69:47:e4:ef:79:bf:
                    db:34:00:24:dc:88:51:0d:12:b3:6f:ae:b1:dd:55:
                    72:ba:28:10:a3:40:92:f5:03:64:99:7b:f6:86:0c:
                    8b:07:75:16:d3:32:77:50:cf:5f:dc:1e:cb:d0:e7:
                    38:4c:74:9f:9d:67:87:1c:57:1a:f8:32:38:03:d6:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0F:B2:29:30:46:A3:FA:18:C5:D2:28:C9:FE:1C:B4:3E:43:95:66
            X509v3 Authority Key Identifier:
                keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/05106CB4AFB011EA8972F65BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.80.0/22
                IPv6:
                  2404:2e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:f3:4d:58:d1:91:cb:92:17:a2:1a:cd:34:d4:95:30:b0:
         78:3a:61:5d:6e:62:e3:e6:b6:e4:92:fd:e0:5b:f9:45:75:70:
         84:d0:69:cd:ec:83:9c:79:a3:a3:a2:39:4a:40:c4:11:d4:09:
         de:f8:d7:35:45:cc:14:76:6d:41:1c:ca:de:6b:35:3e:ab:9a:
         97:62:4c:53:3b:66:db:2a:84:4b:db:a4:08:3e:62:2e:6f:90:
         a4:ab:32:4d:14:c6:10:48:95:71:fd:46:e9:54:f7:4e:e4:4c:
         13:db:1c:a7:60:b5:b8:87:ca:b6:83:b9:44:7e:db:ad:1e:6d:
         bf:86:1d:4d:ce:0f:23:7d:a3:25:44:af:2e:2d:8e:c2:20:3b:
         32:eb:99:e0:56:07:10:a9:e7:03:28:46:54:78:9f:ba:4f:02:
         b3:0e:37:af:fb:d1:e7:30:9a:3c:7a:a1:d2:59:20:61:4b:6e:
         76:a1:ac:41:37:13:b2:bd:51:c6:fb:4f:fe:f2:38:4e:3f:22:
         3f:1b:32:be:df:b6:7d:7a:2d:80:a4:61:9d:09:e5:f2:ee:fd:
         6f:11:a9:db:33:75:53:95:ee:7c:ef:2c:29:a4:0a:65:45:9b:
         61:c8:8d:29:27:8f:45:c5:ae:3b:39:cd:b3:c2:b9:ea:a3:56:
         54:90:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:32 2026 by rpki-client