Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/F7CC41D2FD9111F0AFA9C1725C6F56BC.roa
File:                     F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (raw, json)
Hash identifier:          yjnXkRteWHLrAWaY0SI5HenHlG2jMnDyPtfiXVc0ocE=
Subject key identifier:   2A:66:C4:F8:E0:1F:56:2D:A5:7C:7F:80:A3:48:CE:E4:E8:FB:E2:C5
Certificate issuer:       /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Certificate serial:       04
Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/F7CC41D2FD9111F0AFA9C1725C6F56BC.roa
Signing time:             Fri 30 Jan 2026 04:13:02 +0000
ROA not before:           Fri 30 Jan 2026 04:13:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138657
IP address blocks:        103.103.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
                          rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
        Validity
            Not Before: Jan 30 04:13:02 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=697c2fce-455c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:16:1f:35:34:c9:68:71:16:77:13:0b:6a:
                    50:83:a0:28:87:22:f6:41:7d:e9:2b:03:1c:99:97:
                    c3:e6:31:40:3a:16:b1:f3:c9:29:bd:a9:56:a1:40:
                    47:e4:d5:cd:4c:b8:27:ee:66:57:14:fd:23:85:cb:
                    b5:77:05:05:d8:16:c7:b6:dc:9d:b1:93:aa:65:63:
                    55:63:a2:95:d2:41:bc:1c:01:8f:ae:9a:18:dc:88:
                    5c:b1:92:9c:82:68:13:f1:40:01:d0:05:23:87:1f:
                    b9:06:5c:5a:f0:71:46:8c:ba:4a:b8:3e:1d:67:7f:
                    c2:13:10:d5:9f:f6:f5:79:29:14:18:0f:e4:f8:13:
                    2e:8d:c4:30:00:f0:f7:b7:55:3a:d5:bb:c1:8a:d4:
                    09:7e:97:56:c3:1e:b5:90:07:0b:e8:fa:66:89:13:
                    83:1c:1b:67:20:b0:d7:80:c9:b0:48:e8:66:db:b6:
                    ab:40:2c:7d:0a:22:f0:b6:a1:d3:f5:8d:aa:64:76:
                    39:24:38:19:21:9a:98:19:1d:9e:0a:74:2b:f7:14:
                    e3:80:9c:a2:91:ef:84:00:39:80:fb:17:9b:fd:86:
                    84:f6:7d:d3:ee:37:dd:1c:10:56:9a:73:ef:e8:28:
                    36:98:6f:be:27:1a:32:a4:06:b6:95:98:3c:1f:b7:
                    e3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:66:C4:F8:E0:1F:56:2D:A5:7C:7F:80:A3:48:CE:E4:E8:FB:E2:C5
            X509v3 Authority Key Identifier:
                keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/F7CC41D2FD9111F0AFA9C1725C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:94:35:6e:45:d0:88:cb:06:7d:3a:a5:c9:5e:57:5d:6e:
         d3:cb:34:95:49:68:d5:d8:88:62:43:77:6c:26:96:72:ac:58:
         3d:de:66:a5:a6:5f:c2:39:85:e5:88:ba:28:03:37:52:d3:1b:
         69:4c:28:ed:c7:68:21:b1:99:47:1b:a1:d6:2c:d4:7c:38:e9:
         5c:f3:96:6f:18:1c:16:b6:4e:5d:b6:51:ac:81:07:08:c9:50:
         35:43:2e:66:1c:6c:1b:0c:1b:ff:ca:a8:7a:f5:75:4c:12:03:
         fd:2e:5f:22:7b:ef:1c:6e:14:30:2e:67:3c:3a:ff:0d:a1:21:
         28:e0:2c:c5:8d:78:49:5d:ee:24:fb:04:20:c6:c8:79:1c:49:
         19:11:e7:b7:61:29:c1:3f:cf:b0:4e:a5:fa:8e:5d:2a:7e:e1:
         1d:a0:3b:ac:f9:91:c8:c0:63:6d:54:d5:48:b8:dc:7f:f1:a3:
         58:f8:56:01:9c:44:08:47:9d:7b:1f:45:69:7f:c3:6d:71:a8:
         5d:f0:14:b6:94:6c:b2:76:99:2b:ff:c9:c1:d9:0b:3c:05:43:
         42:c2:c3:e0:c5:8e:68:95:43:2a:c4:2e:43:d9:6e:33:e4:45:
         ef:b3:0a:f2:50:45:08:d8:bf:2c:8f:0a:9b:f1:32:7e:a8:41:
         38:0a:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:42 2026 by rpki-client