Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FFB68BF6067311F19CC2DF5A3C3D8C67.roa
File:                     FFB68BF6067311F19CC2DF5A3C3D8C67.roa (raw, json)
Hash identifier:          j3gNIyc1qTt1S4oLfh5iyRNKOzkNBYlraGXjLRbZakk=
Subject key identifier:   E3:EA:94:58:73:2D:8D:25:4B:65:96:D5:92:0F:88:19:DD:46:CB:36
Certificate issuer:       /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial:       09
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FFB68BF6067311F19CC2DF5A3C3D8C67.roa
Signing time:             Wed 11 Feb 2026 20:24:20 +0000
ROA not before:           Wed 11 Feb 2026 20:24:20 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     136225
IP address blocks:        103.84.53.0/24 maxlen: 24
                          103.84.54.0/24 maxlen: 24
                          103.84.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
                          rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
        Validity
            Not Before: Feb 11 20:24:20 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=698ce573-7632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:ce:6b:7b:6d:b8:29:2b:ca:c7:db:21:83:
                    ca:75:54:4b:6d:f3:cb:de:ed:e5:cb:63:c5:ce:ed:
                    f8:55:82:f4:fc:f2:24:43:8e:0d:6b:34:ce:46:de:
                    cb:5b:11:dd:2b:12:9c:c9:52:c5:f6:e5:ec:23:66:
                    cc:50:0e:82:ce:7b:45:0e:a7:34:e2:b3:cd:80:51:
                    bf:0c:ae:f2:37:59:16:59:ff:3e:60:b3:5a:5a:e4:
                    f0:77:b3:12:d0:d1:a5:38:d5:7c:e0:35:fc:a4:ff:
                    be:10:59:7e:ca:76:a9:5e:6d:94:81:92:ba:a8:22:
                    e8:ab:1a:79:58:eb:29:8d:92:a6:f8:0b:1f:e3:69:
                    8f:99:ec:ac:35:ad:01:94:ba:ee:6c:a1:1c:64:b4:
                    94:a0:e3:42:cd:8f:b7:81:08:03:a0:b8:67:bf:37:
                    ee:16:49:d0:73:6d:20:64:b6:76:4e:63:9c:b1:74:
                    2a:a4:23:9b:3b:fe:42:8d:07:8a:dc:ff:b9:f9:fe:
                    ae:b9:19:22:a1:3f:bb:44:b1:f4:28:91:fb:15:08:
                    62:a1:bd:02:77:f1:83:c0:c0:35:7a:48:d7:83:fd:
                    8c:fe:3d:c5:57:ba:67:2c:78:56:81:00:97:ce:63:
                    dc:5d:e2:2d:71:80:8c:b9:be:f3:08:00:63:6a:de:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:94:58:73:2D:8D:25:4B:65:96:D5:92:0F:88:19:DD:46:CB:36
            X509v3 Authority Key Identifier:
                keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FFB68BF6067311F19CC2DF5A3C3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.53.0-103.84.55.255

    Signature Algorithm: sha256WithRSAEncryption
         85:37:70:07:55:ee:a8:5a:e1:b0:0a:33:79:df:b8:e1:c5:c7:
         a6:f2:04:81:72:48:92:9b:b4:10:25:10:54:0e:cb:ac:1c:0a:
         5a:43:34:40:c8:e2:2d:33:65:da:27:17:08:9e:bc:1e:cd:f6:
         85:25:aa:7f:16:8f:93:57:6c:1a:a4:ea:9d:c9:da:67:93:15:
         12:29:d7:8e:ce:c2:fa:bb:48:94:55:69:79:eb:9e:4b:4a:69:
         57:5b:7f:21:22:5e:40:88:9a:3a:f1:bf:63:8d:af:02:b7:ae:
         a7:ad:29:a6:b2:b2:40:84:b9:96:10:c0:5f:52:85:53:95:c8:
         46:be:5b:2e:66:a4:db:a4:8b:3d:b8:7f:73:40:e9:2a:86:34:
         8b:e1:1a:81:c7:12:5c:97:da:46:7d:a9:53:97:50:66:af:36:
         67:55:e8:17:3f:b0:1d:7c:fc:b0:60:97:40:d4:8d:4a:0f:79:
         81:f4:9e:af:3b:84:32:9f:2b:a9:5c:c3:92:a9:63:c7:e3:b3:
         68:b5:20:7a:5a:50:aa:88:1a:f1:41:d3:30:7b:66:62:97:ac:
         53:02:bf:9b:1b:d4:ae:37:10:8c:3b:77:4d:01:f0:1e:49:b6:
         23:f5:34:59:30:71:16:f5:80:70:a4:f3:6a:4a:30:43:43:6e:
         1a:2f:ab:1f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEy
OTczODExMC8GA1UEBRMoNjY2NTRFMDEyMDM5MzI2RTEzRDNDRDlFRjU4REE5RUYw
Nzc3MjI3NzAeFw0yNjAyMTEyMDI0MjBaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OGNlNTczLTc2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWfM5re224KSvKx9shg8p1VEtt88ve7eXLY8XO7fhVgvT88iRDjg1rNM5G3stb
Ed0rEpzJUsX25ewjZsxQDoLOe0UOpzTis82AUb8MrvI3WRZZ/z5gs1pa5PB3sxLQ
0aU41XzgNfyk/74QWX7KdqlebZSBkrqoIuirGnlY6ymNkqb4Cx/jaY+Z7Kw1rQGU
uu5soRxktJSg40LNj7eBCAOguGe/N+4WSdBzbSBktnZOY5yxdCqkI5s7/kKNB4rc
/7n5/q65GSKhP7tEsfQokfsVCGKhvQJ38YPAwDV6SNeD/Yz+PcVXumcseFaBAJfO
Y9xd4i1xgIy5vvMIAGNq3gtpAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQU4+qUWHMt
jSVLZZbVkg+IGd1GyzYwHwYDVR0jBBgwFoAUZmVOASA5Mm4T082e9Y2p7wd3Incw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzM4Lzk4Q0MzN0NFMDY3
MzExRjFBNkNGMzMwRjNDM0Q4QzY3L1ptVk9BU0E1TW00VDA4MmU5WTJwN3dkM0lu
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWm1WT0FTQTVNbTRUMDgyZTlZMnA3d2QzSW5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTczOC85OENDMzdDRTA2NzMxMUYxQTZDRjMzMEYzQzNEOEM2Ny9GRkI2OEJGNjA2
NzMxMUYxOUNDMkRGNUEzQzNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAZ1Q1AwQDZ1QwMA0GCSqGSIb3DQEBCwUAA4IBAQCFN3AH
Ve6oWuGwCjN537jhxcem8gSBckiSm7QQJRBUDsusHApaQzRAyOItM2XaJxcInrwe
zfaFJap/Fo+TV2wapOqdydpnkxUSKdeOzsL6u0iUVWl5655LSmlXW38hIl5AiJo6
8b9jja8Ct66nrSmmsrJAhLmWEMBfUoVTlchGvlsuZqTbpIs9uH9zQOkqhjSL4RqB
xxJcl9pGfalTl1BmrzZnVegXP7AdfPywYJdA1I1KD3mB9J6vO4QynyupXMOSqWPH
47NotSB6WlCqiBrxQdMwe2Zil6xTAr+bG9SuNxCMO3dNAfAeSbYj9TRZMHEW9YBw
pPNqSjBDQ24aL6sf
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:56 2026 by rpki-client