Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FF37A9C6067311F19CC2DF5A3C3D8C67.roa
File:                     FF37A9C6067311F19CC2DF5A3C3D8C67.roa (raw, json)
Hash identifier:          UEET9fCn5yw/TVpf35DoLsna3zqmKnyfK+lD1lXGYD4=
Subject key identifier:   40:6B:D7:8B:BF:B1:C9:FB:AA:8A:94:7A:8A:A5:9A:3C:A3:AF:AF:B8
Certificate issuer:       /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial:       02
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FF37A9C6067311F19CC2DF5A3C3D8C67.roa
Signing time:             Tue 10 Feb 2026 11:31:10 +0000
ROA not before:           Tue 10 Feb 2026 11:31:10 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136184
IP address blocks:        103.84.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
                          rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
        Validity
            Not Before: Feb 10 11:31:10 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=698b16fe-3738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:27:0f:01:14:e6:bc:0a:7c:18:67:cc:37:
                    31:ff:bc:a4:29:c4:00:86:3e:4f:59:97:6f:a4:f3:
                    22:68:35:2c:c5:a3:8d:1a:f7:a4:a3:67:e9:ce:7a:
                    dd:f5:29:35:dc:df:19:b0:c3:93:96:45:c4:78:fa:
                    74:d0:04:0c:da:34:ae:0e:24:57:45:f1:f7:81:f0:
                    3e:78:ab:f4:b2:02:c4:21:2f:bd:a4:e8:c7:61:b3:
                    4f:e7:f7:0d:3a:7c:7e:d8:a7:6d:b5:74:2c:85:bf:
                    f0:fc:08:72:8a:ad:61:f9:46:fd:cc:08:50:d7:b3:
                    9d:9c:4c:ec:6d:59:e4:65:32:69:ae:bc:c7:c1:30:
                    d1:92:cc:c4:fe:d4:22:ea:53:9c:5d:a5:24:da:dc:
                    6c:bb:db:ca:d7:98:b5:57:93:d9:41:35:b6:5e:24:
                    e9:01:6c:cf:ef:00:6f:61:ba:01:fd:7d:17:31:15:
                    ae:17:29:b2:3e:a6:8a:e5:59:3f:10:ed:ad:d8:4e:
                    0c:a3:aa:5d:4b:c3:b8:ee:fc:dc:95:ac:14:ff:fd:
                    3a:a7:b4:67:ed:4d:48:1a:85:e0:1b:c3:c4:8b:57:
                    91:1a:e2:cd:f4:b5:bd:64:06:e8:0d:f7:8d:7f:dc:
                    ad:7e:bb:18:1c:29:d6:02:68:c5:6a:15:5b:01:ca:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6B:D7:8B:BF:B1:C9:FB:AA:8A:94:7A:8A:A5:9A:3C:A3:AF:AF:B8
            X509v3 Authority Key Identifier:
                keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FF37A9C6067311F19CC2DF5A3C3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:2e:06:5a:96:52:68:67:92:80:69:84:05:ce:60:7f:c0:
         08:93:39:be:8a:e7:98:18:bd:2d:16:1a:5c:ff:39:73:ea:7a:
         43:d0:b3:63:36:5e:a4:58:34:0d:74:78:46:1a:f8:bc:c0:bc:
         1d:cc:c6:b3:c2:2d:84:92:6f:42:44:1f:09:5c:93:03:76:c6:
         53:1f:ca:cf:1e:09:63:07:26:91:3d:17:4e:00:54:6f:b5:43:
         7d:27:e3:7a:a6:1c:6a:f8:37:89:e0:09:25:9c:4d:be:34:2f:
         47:4d:52:af:03:be:de:19:9c:87:93:b8:12:c6:6d:2c:e5:96:
         a7:e8:ab:2a:3e:06:4e:b9:10:6f:17:3a:62:4e:2d:53:f6:87:
         75:ca:47:00:a8:d4:78:ab:b1:79:53:fc:31:97:e8:6b:40:9e:
         2d:26:66:6f:10:0b:6a:3d:82:26:ed:91:be:ab:b3:eb:18:04:
         13:fd:b6:6e:1c:0c:69:fb:e6:f9:29:85:8d:8a:01:f6:e7:08:
         a7:c9:13:95:ef:88:fb:c3:2f:85:51:65:ac:f6:93:51:45:f6:
         72:8b:3c:ba:2d:08:40:15:df:d2:fc:05:aa:31:83:89:ea:6e:
         c8:76:85:aa:bf:dd:02:86:7f:7b:af:40:31:39:70:2c:f7:fd:
         62:70:4d:29
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEy
OTczODExMC8GA1UEBRMoNjY2NTRFMDEyMDM5MzI2RTEzRDNDRDlFRjU4REE5RUYw
Nzc3MjI3NzAeFw0yNjAyMTAxMTMxMTBaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OGIxNmZlLTM3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCWjCcPARTmvAp8GGfMNzH/vKQpxACGPk9Zl2+k8yJoNSzFo40a96SjZ+nOet31
KTXc3xmww5OWRcR4+nTQBAzaNK4OJFdF8feB8D54q/SyAsQhL72k6Mdhs0/n9w06
fH7Yp221dCyFv/D8CHKKrWH5Rv3MCFDXs52cTOxtWeRlMmmuvMfBMNGSzMT+1CLq
U5xdpSTa3Gy728rXmLVXk9lBNbZeJOkBbM/vAG9hugH9fRcxFa4XKbI+porlWT8Q
7a3YTgyjql1Lw7ju/NyVrBT//TqntGftTUgaheAbw8SLV5Ea4s30tb1kBugN941/
3K1+uxgcKdYCaMVqFVsByr5bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQGvXi7+x
yfuqipR6iqWaPKOvr7gwHwYDVR0jBBgwFoAUZmVOASA5Mm4T082e9Y2p7wd3Incw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzM4Lzk4Q0MzN0NFMDY3
MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00VDA4MmU5WTJwN3dkM0lu
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWm1WT0FTQTVNbTRUMDgyZTlZMnA3d2QzSW5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTczOC85OENDMzdDRTA2NzMxMUYxQTZDRjMzMEYzQzNEOEM2Ny9GRjM3QTlDNjA2
NzMxMUYxOUNDMkRGNUEzQzNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdUNzANBgkqhkiG9w0BAQsFAAOCAQEANcwuBlqWUmhnkoBp
hAXOYH/ACJM5vornmBi9LRYaXP85c+p6Q9CzYzZepFg0DXR4Rhr4vMC8HczGs8It
hJJvQkQfCVyTA3bGUx/Kzx4JYwcmkT0XTgBUb7VDfSfjeqYcavg3ieAJJZxNvjQv
R01SrwO+3hmch5O4EsZtLOWWp+irKj4GTrkQbxc6Yk4tU/aHdcpHAKjUeKuxeVP8
MZfoa0CeLSZmbxALaj2CJu2Rvquz6xgEE/22bhwMafvm+SmFjYoB9ucIp8kTle+I
+8MvhVFlrPaTUUX2cos8ui0IQBXf0vwFqjGDiepuyHaFqr/dAoZ/e69AMTlwLPf9
YnBNKQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:55 2026 by rpki-client