Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/26E02598562F11EB94FD0463C4F9AE02.roa
File:                     26E02598562F11EB94FD0463C4F9AE02.roa (raw, json)
Hash identifier:          HyRMO/pcIzGm5plPPapZZ07tr13jSP+aoFVCVKamf28=
Subject key identifier:   54:99:06:FC:7F:8F:5A:E8:26:5A:1B:58:E0:A7:39:D2:1A:A3:70:3D
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       35BE
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/26E02598562F11EB94FD0463C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:10:26 +0000
ROA not before:           Fri 02 Oct 2026 15:10:26 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     55789
IP address blocks:        103.9.116.0/24 maxlen: 24
                          103.9.117.0/24 maxlen: 24
                          103.9.118.0/24 maxlen: 24
                          103.9.119.0/24 maxlen: 24
                          202.59.250.0/23 maxlen: 23
                          202.59.250.0/24 maxlen: 24
                          202.59.251.0/24 maxlen: 24
                          2001:df4:8a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13758 (0x35be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: Oct  2 15:10:26 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6abfc961-e566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:68:36:1a:be:5f:a8:79:79:5e:74:b0:57:4f:
                    30:00:db:f0:c4:66:5b:3e:ae:72:5e:15:af:03:31:
                    dd:40:ea:cf:87:c5:1d:bb:3f:c7:b6:77:38:ea:28:
                    41:5b:a9:b1:dd:31:c0:6d:3b:fd:2a:b3:d7:d3:0e:
                    35:1d:ea:c9:5b:8e:83:60:e1:39:ea:eb:7b:af:ec:
                    6f:85:96:d3:cb:d2:78:a4:98:f2:5d:d2:f5:5b:40:
                    68:1d:71:e0:96:db:3e:f0:e0:1a:ff:ad:18:53:31:
                    56:07:b7:1c:8f:e9:d8:dd:e6:17:16:d5:22:3a:9a:
                    e0:8c:43:dc:c8:18:0c:fd:e0:ff:78:22:e1:8d:0e:
                    66:f4:0c:31:08:cf:71:c6:a9:57:04:a2:61:c0:f4:
                    99:23:35:7e:0f:a8:2d:44:ff:46:e9:c5:fe:c8:c1:
                    e4:3b:7f:1d:ed:97:e3:fd:9a:70:9f:65:05:ba:12:
                    82:96:9f:76:b5:82:54:cf:c8:04:ba:a1:78:50:21:
                    90:4d:2b:70:dc:3a:8e:1d:49:78:c3:6b:5f:98:72:
                    55:f3:d2:4b:76:e7:05:a0:05:94:00:7d:7e:7d:ca:
                    cc:ce:d3:73:c9:6e:2c:aa:ce:0c:e0:31:c8:96:9a:
                    aa:41:a4:15:f9:cc:1c:49:57:ab:06:82:ee:ef:b1:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:99:06:FC:7F:8F:5A:E8:26:5A:1B:58:E0:A7:39:D2:1A:A3:70:3D
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/26E02598562F11EB94FD0463C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.116.0/22
                  202.59.250.0/23
                IPv6:
                  2001:df4:8a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:61:d8:15:19:b3:eb:4b:1d:3a:77:be:cb:fb:2a:6e:3e:fb:
         da:74:8f:df:01:97:0e:cc:3b:17:2a:bd:65:12:58:0b:f0:b9:
         7f:a9:2a:00:bc:0b:61:52:db:94:6b:d0:66:95:ab:9e:3b:cc:
         a2:56:93:b1:26:22:1c:9c:f2:c7:b8:c1:e9:10:99:fb:ac:db:
         db:59:eb:47:a8:4b:ae:fb:05:7b:ae:2b:bc:c2:91:95:2e:f7:
         35:55:da:ed:b8:8b:02:81:19:94:40:55:b3:47:2e:67:6b:41:
         7e:c9:4a:ce:31:35:5b:f2:79:8f:77:3c:1e:b7:a2:bd:50:38:
         7a:77:f1:63:a9:19:86:0c:6b:39:bd:ff:a4:1c:2d:82:2a:89:
         70:21:67:8f:41:6b:2c:5a:d2:68:83:3a:0f:4e:35:c3:2a:f6:
         6c:89:a4:e8:9d:19:3a:f5:bd:db:0d:d1:88:0f:c7:03:14:64:
         4a:03:93:8e:81:b2:27:65:68:58:68:8d:89:50:0f:1a:5d:f5:
         47:2e:8b:2b:e0:e7:fa:77:7e:ba:30:54:35:98:15:2a:65:2c:
         44:f9:c1:02:6d:45:40:f4:97:53:7f:80:eb:6a:17:8a:09:bb:
         57:c0:11:9d:e7:bd:ba:e0:2e:9d:ee:7a:81:a3:93:40:30:a5:
         05:33:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:31:53 2026 by rpki-client