Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/6B191E20F75811EB9C2B5D4DC4F9AE02.roa
File:                     6B191E20F75811EB9C2B5D4DC4F9AE02.roa (raw, json)
Hash identifier:          Q+qQNh06TWJSPioowQk9TdPpmfJvoadRPGqElrlppYI=
Subject key identifier:   5F:0C:41:27:EC:85:57:FD:F5:05:17:CC:03:69:E8:04:EF:64:D0:5E
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       05BB
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/6B191E20F75811EB9C2B5D4DC4F9AE02.roa
Signing time:             Wed 28 Jan 2026 23:19:11 +0000
ROA not before:           Wed 28 Jan 2026 23:19:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55479
IP address blocks:        103.246.106.0/24 maxlen: 24
                          202.3.77.0/24 maxlen: 24
                          2001:df0:92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Jan 28 23:19:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697a996e-dbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:56:a3:13:d7:b7:0f:b7:16:cb:fb:84:e8:
                    5e:51:36:49:65:04:b8:3b:c0:c7:22:10:aa:7b:a3:
                    e2:25:8b:cf:d6:c4:22:a4:da:de:ed:a0:2b:8c:78:
                    de:53:09:9a:39:57:3e:20:9c:13:36:cc:73:cd:7c:
                    d2:80:22:e3:03:98:3b:3f:50:0e:a9:8d:83:d7:be:
                    f5:07:44:d0:fe:44:7b:22:a6:aa:a6:b4:67:3e:d9:
                    b3:a3:43:aa:2d:2a:fa:65:17:be:1b:1b:55:09:fe:
                    a7:ca:d8:69:dc:3f:de:55:4f:93:90:19:34:e5:79:
                    3f:8b:d6:c0:8d:90:dd:fe:85:04:59:4e:ba:b3:e5:
                    a1:35:f8:4c:73:be:90:68:82:33:c3:a5:2a:f2:96:
                    0d:b2:b0:19:2f:2f:66:ed:58:81:3a:0a:a2:f8:a3:
                    05:da:58:b8:49:22:20:31:5b:9e:7d:16:0a:5a:73:
                    fd:0e:52:3f:b3:91:94:91:85:df:07:c4:8b:12:14:
                    a1:c1:04:3a:44:09:09:41:5d:4d:b7:38:82:82:01:
                    ca:2a:fc:1d:e7:a3:f1:42:98:61:84:dd:cc:c9:76:
                    6e:49:e4:1b:0f:78:bc:f1:52:69:99:4f:f0:10:b2:
                    bc:eb:9a:c4:e6:d0:ab:01:5c:10:87:ae:df:7b:8e:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0C:41:27:EC:85:57:FD:F5:05:17:CC:03:69:E8:04:EF:64:D0:5E
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/6B191E20F75811EB9C2B5D4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.106.0/24
                  202.3.77.0/24
                IPv6:
                  2001:df0:92::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:d4:7b:82:78:70:7d:fd:a6:ca:e8:01:4f:12:7c:d9:e9:
         b7:fd:89:47:82:b6:9d:41:85:ac:c5:7b:ee:e7:d3:b5:5f:02:
         e6:bc:59:a7:91:ed:79:89:98:17:f6:79:40:f7:4b:aa:21:68:
         5c:36:c3:2a:47:f3:b2:f3:1f:c7:34:00:f6:18:97:e4:30:1a:
         9a:63:65:c3:13:b1:94:3b:5d:39:a1:de:47:3a:0f:6c:0c:3b:
         cb:a5:8d:dc:59:a0:54:54:c9:ee:b5:fb:90:ae:b5:6d:8b:ab:
         16:f0:7b:57:36:d0:aa:8c:f5:69:c3:7e:20:3b:3f:84:f9:9c:
         2c:a0:ff:73:94:98:f2:fb:a9:7a:4e:9f:f0:e5:5c:81:58:12:
         fe:fd:aa:02:85:1f:b8:83:eb:b6:2f:78:f0:25:54:1d:24:89:
         5f:07:58:e1:2c:8e:7e:20:ca:49:65:75:51:f1:24:3e:6d:a5:
         60:41:cb:70:05:d5:1a:d8:02:57:eb:7b:7c:61:2b:e1:2a:a4:
         8e:2e:3c:84:32:ed:b6:7d:55:0c:0b:22:17:fe:54:b7:f0:33:
         81:4b:92:82:45:0a:39:71:87:e7:2c:36:72:af:e3:ca:85:0c:
         64:c3:96:4a:91:5e:5c:db:36:9c:22:0b:6c:fe:94:ef:19:2e:
         22:7c:56:8b
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB
RUFBOTA4NkYwHhcNMjYwMTI4MjMxOTExWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhOTk2ZS1kYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8NWoxPXtw+3Fsv7hOheUTZJZQS4O8DHIhCqe6PiJYvP1sQipNre7aArjHje
UwmaOVc+IJwTNsxzzXzSgCLjA5g7P1AOqY2D1771B0TQ/kR7IqaqprRnPtmzo0Oq
LSr6ZRe+GxtVCf6nythp3D/eVU+TkBk05Xk/i9bAjZDd/oUEWU66s+WhNfhMc76Q
aIIzw6Uq8pYNsrAZLy9m7ViBOgqi+KMF2li4SSIgMVuefRYKWnP9DlI/s5GUkYXf
B8SLEhShwQQ6RAkJQV1NtziCggHKKvwd56PxQphhhN3MyXZuSeQbD3i88VJpmU/w
ELK865rE5tCrAVwQh67fe45gcQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFF8MQSfs
hVf99QUXzANp6ATvZNBeMB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3
NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFDODMvNEJBRkIxMThGNzU2MTFFQjk5RjkxMDRDQzRGOUFFMDIvNkIxOTFFMjBG
NzU4MTFFQjlDMkI1RDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBABn9moDBADKA00wDwQCAAIwCQMHACABDfAAkjANBgkqhkiG
9w0BAQsFAAOCAQEARfHUe4J4cH39psroAU8SfNnpt/2JR4K2nUGFrMV77ufTtV8C
5rxZp5HteYmYF/Z5QPdLqiFoXDbDKkfzsvMfxzQA9hiX5DAammNlwxOxlDtdOaHe
RzoPbAw7y6WN3FmgVFTJ7rX7kK61bYurFvB7VzbQqoz1acN+IDs/hPmcLKD/c5SY
8vupek6f8OVcgVgS/v2qAoUfuIPrti948CVUHSSJXwdY4SyOfiDKSWV1UfEkPm2l
YEHLcAXVGtgCV+t7fGEr4Sqkji48hDLttn1VDAsiF/5Ut/AzgUuSgkUKOXGH5yw2
cq/jyoUMZMOWSpFeXNs2nCILbP6U7xkuInxWiw==
-----END CERTIFICATE-----
Generated at Fri Feb 20 03:53:49 2026 by rpki-client