Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/16AC8742071011F19135264E253D8C67.roa
File:                     16AC8742071011F19135264E253D8C67.roa (raw, json)
Hash identifier:          whu1HJ3KVfoss6q6CpolZkQ48bG/50IDZGS/Uwe8Ge8=
Subject key identifier:   47:AD:35:F7:F1:11:CC:80:89:A6:62:B1:F8:D9:9D:6A:7C:C1:A1:09
Certificate issuer:       /CN=A91230A3/serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067
Certificate serial:       08
Authority key identifier: 5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/16AC8742071011F19135264E253D8C67.roa
Signing time:             Wed 11 Feb 2026 06:13:15 +0000
ROA not before:           Wed 11 Feb 2026 06:13:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135356
IP address blocks:        45.251.104.0/24 maxlen: 24
                          45.251.105.0/24 maxlen: 24
                          45.251.106.0/24 maxlen: 24
                          45.251.107.0/24 maxlen: 24
                          45.251.108.0/24 maxlen: 24
                          45.251.109.0/24 maxlen: 24
                          45.251.110.0/24 maxlen: 24
                          45.251.111.0/24 maxlen: 24
                          103.215.2.0/24 maxlen: 24
                          103.220.72.0/24 maxlen: 24
                          103.220.73.0/24 maxlen: 24
                          103.220.74.0/24 maxlen: 24
                          103.220.75.0/24 maxlen: 24
                          103.220.76.0/24 maxlen: 24
                          103.220.77.0/24 maxlen: 24
                          103.220.78.0/24 maxlen: 24
                          103.220.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl
                          rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91230A3, serialNumber=5EF2BC76FCC3FDC979579EB3419F821874E96067
        Validity
            Not Before: Feb 11 06:13:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698c1dfb-b03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:df:71:87:fc:40:b3:e8:47:ee:c2:64:84:
                    d0:b8:6b:9b:ff:8e:12:50:1c:13:b7:ad:3d:96:a9:
                    f5:41:ce:4d:4a:fe:81:20:cb:1d:3d:20:0d:b3:cf:
                    9f:61:fe:73:99:14:2f:95:4c:95:62:45:a3:89:a0:
                    c4:2f:aa:7f:6d:4a:fa:37:8d:6a:67:b5:98:4f:e5:
                    f1:45:f5:d1:26:de:56:50:04:7e:b8:cd:89:3a:03:
                    d7:06:f2:45:7d:34:b4:81:14:24:de:46:21:22:10:
                    23:75:df:b2:b2:c4:9c:63:dc:d4:15:5a:35:43:3f:
                    ed:c3:92:4e:84:06:52:2e:b9:3d:a0:20:c9:ea:76:
                    46:61:44:67:2b:19:7e:c7:0b:4f:52:de:f6:66:dd:
                    4d:2a:61:41:c8:18:dd:9a:f5:86:e7:b5:9b:53:df:
                    8b:93:8b:7f:14:21:68:12:b8:32:de:ea:a9:4f:4f:
                    1c:a7:b9:ad:ae:a9:62:d0:ba:2d:31:2f:d3:98:5b:
                    c8:24:7e:4c:d0:30:10:20:1a:7e:28:4f:26:68:ed:
                    5c:81:6f:4f:6f:ea:d7:8c:f1:a8:6e:1e:5f:31:9a:
                    89:ab:15:a9:bf:17:6a:bc:be:cd:93:cb:a4:5e:75:
                    cb:f3:49:9a:58:18:89:07:b6:46:31:77:5c:93:53:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:35:F7:F1:11:CC:80:89:A6:62:B1:F8:D9:9D:6A:7C:C1:A1:09
            X509v3 Authority Key Identifier:
                keyid:5E:F2:BC:76:FC:C3:FD:C9:79:57:9E:B3:41:9F:82:18:74:E9:60:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/XvK8dvzD_cl5V56zQZ-CGHTpYGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvK8dvzD_cl5V56zQZ-CGHTpYGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230A3/FB9809A6070311F1A8105F55223D8C67/16AC8742071011F19135264E253D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.104.0/21
                  103.215.2.0/24
                  103.220.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:6d:61:2a:0e:16:cf:9b:a8:93:a1:9e:ad:70:73:13:c5:
         5b:c3:f0:e3:01:c2:1d:6e:55:b4:d1:ad:dc:1f:e5:85:9b:03:
         16:bd:2b:01:1a:64:2e:df:47:1f:65:c4:5a:8b:15:54:df:17:
         49:6c:64:f8:8d:6e:55:cd:fb:50:51:2b:7c:32:11:81:e8:92:
         03:14:e6:81:df:ff:2f:1a:c7:e2:da:24:68:16:71:5a:f4:8e:
         a2:9a:0c:30:97:63:11:dd:9c:31:5a:fd:57:93:68:11:de:52:
         0f:45:65:43:3a:1d:69:1a:bd:24:8b:24:32:21:d3:fd:08:80:
         a9:c2:f3:71:ad:c7:93:fb:72:65:99:40:ea:ba:05:94:22:66:
         f1:f0:ce:d8:5e:d8:35:cd:95:d6:6f:6d:46:22:ec:47:a7:26:
         e8:4d:4c:18:6e:0e:89:21:b9:4f:3c:4f:97:fc:e9:74:24:eb:
         30:49:48:d1:d0:e1:e7:b1:4d:7a:35:b4:1d:0f:4d:6a:ee:8e:
         82:c2:40:25:8f:af:52:39:d6:54:16:6a:ce:61:ed:ed:25:b7:
         10:11:fe:77:f3:fc:8e:6e:f2:dd:a6:92:0f:08:32:de:c3:0c:
         8a:1f:51:36:61:3a:2a:72:52:4e:4e:c6:ec:26:ab:fb:77:bb:
         a8:ef:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:30 2026 by rpki-client