Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/7A299148000311F191DFD8AE3C6F56BC.roa
File:                     7A299148000311F191DFD8AE3C6F56BC.roa (raw, json)
Hash identifier:          1ZBN4tusR0uVvj+HMgqE/Wge+FlHEhxgFshEFmaxQ5g=
Subject key identifier:   FA:F8:49:FC:54:FB:AF:95:73:20:4C:3F:35:34:EA:D8:F0:B6:DC:A4
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0822
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/7A299148000311F191DFD8AE3C6F56BC.roa
Signing time:             Sat 14 Feb 2026 21:18:37 +0000
ROA not before:           Sat 14 Feb 2026 21:18:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        103.82.228.0/24 maxlen: 24
                          103.82.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Feb 14 21:18:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6990e6ad-b276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:af:73:b2:59:4a:a3:92:c9:24:30:08:36:
                    97:f7:c5:da:f8:ba:04:3b:a5:04:26:d1:b3:f2:92:
                    22:c2:32:50:d8:d8:89:c6:4d:9e:d8:db:26:7b:af:
                    f2:da:2d:f7:dc:08:26:3e:b1:1d:e7:82:b6:4f:00:
                    43:c3:22:9e:3f:18:49:a0:55:44:80:34:13:bf:ec:
                    6e:8e:88:2d:de:2b:6a:86:4e:db:61:2f:88:99:8f:
                    86:00:93:4f:d6:39:96:23:41:16:b4:f6:ba:23:1d:
                    97:05:34:10:b1:7a:f1:2d:5b:9c:50:73:51:4e:e8:
                    79:6e:92:db:39:79:62:ac:d2:96:e1:7a:96:7a:8d:
                    a7:1c:71:15:57:47:7e:bd:3a:8f:39:a1:62:0e:a6:
                    b7:e1:fe:9e:64:d3:36:bb:b2:e0:04:29:f5:74:a8:
                    e0:2f:f8:5f:2a:d4:cb:e4:6e:17:61:10:d3:ea:19:
                    9e:28:55:d6:94:68:4d:d0:b5:7b:81:31:bb:13:b5:
                    95:00:07:aa:9b:62:f1:b2:e7:5e:41:69:88:af:a5:
                    93:c8:3d:21:8e:bb:5f:71:95:82:30:71:66:41:20:
                    67:48:52:ed:40:13:e0:9e:b4:41:da:7e:8c:9f:e6:
                    e4:19:ad:7a:44:b6:ff:99:a3:df:23:8d:77:fc:fd:
                    2a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:49:FC:54:FB:AF:95:73:20:4C:3F:35:34:EA:D8:F0:B6:DC:A4
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/7A299148000311F191DFD8AE3C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:24:80:3d:75:60:52:6b:d6:e2:5b:35:e8:66:d8:9a:40:07:
         1d:97:6d:03:e9:36:57:70:ad:2b:78:8b:0c:fd:e1:bc:53:64:
         a8:9f:48:c9:dd:2b:05:27:ae:66:73:7d:76:53:9a:e3:49:f7:
         87:a8:87:82:69:24:13:b4:92:55:5d:16:f8:46:27:17:24:04:
         45:75:ea:10:56:81:14:cf:66:aa:02:67:41:68:f2:46:42:3a:
         ed:cf:90:59:2e:45:39:55:7d:df:b1:ec:7f:18:77:d2:2f:1b:
         b8:02:62:67:34:52:ae:a6:6c:1b:a3:a0:ca:1d:98:51:e0:ad:
         21:bf:c2:aa:6e:de:0c:97:8a:39:cc:32:04:f0:c0:7c:4b:ed:
         8e:90:f2:3b:a8:8f:41:66:d4:ca:dd:c4:ea:94:4f:c9:51:64:
         87:43:0a:fe:ab:83:57:3d:c1:ad:c9:34:3c:c1:85:88:21:f1:
         b3:89:1b:52:1b:5e:cd:90:a9:33:74:c8:fc:6f:b4:9a:68:9a:
         8c:f2:cc:b7:26:30:d1:5d:eb:a2:db:3a:0f:28:76:eb:88:a9:
         b1:6a:66:7d:e4:66:3a:c6:a9:fb:20:48:d8:1d:e6:4a:d0:61:
         27:9a:39:1d:35:b2:67:c0:71:7c:70:ca:31:88:fe:51:20:74:
         a1:f0:13:71
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2
RjM2MkU4MEYwHhcNMjYwMjE0MjExODM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTkwZTZhZC1iMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HWvc7JZSqOSySQwCDaX98Xa+LoEO6UEJtGz8pIiwjJQ2NiJxk2e2Nsme6/y
2i333AgmPrEd54K2TwBDwyKePxhJoFVEgDQTv+xujogt3itqhk7bYS+ImY+GAJNP
1jmWI0EWtPa6Ix2XBTQQsXrxLVucUHNRTuh5bpLbOXlirNKW4XqWeo2nHHEVV0d+
vTqPOaFiDqa34f6eZNM2u7LgBCn1dKjgL/hfKtTL5G4XYRDT6hmeKFXWlGhN0LV7
gTG7E7WVAAeqm2LxsudeQWmIr6WTyD0hjrtfcZWCMHFmQSBnSFLtQBPgnrRB2n6M
n+bkGa16RLb/maPfI413/P0qTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPr4SfxU
+6+VcyBMPzU06tjwttykMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0
Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzAzOTUvRUI2NzIyNjQxNENBMTFFQjgxNjQzQjBGQzRGOUFFMDIvN0EyOTkxNDgw
MDAzMTFGMTkxREZEOEFFM0M2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnUuQwDQYJKoZIhvcNAQELBQADggEBAEokgD11YFJr1uJb
Nehm2JpABx2XbQPpNldwrSt4iwz94bxTZKifSMndKwUnrmZzfXZTmuNJ94eoh4Jp
JBO0klVdFvhGJxckBEV16hBWgRTPZqoCZ0Fo8kZCOu3PkFkuRTlVfd+x7H8Yd9Iv
G7gCYmc0Uq6mbBujoModmFHgrSG/wqpu3gyXijnMMgTwwHxL7Y6Q8juoj0Fm1Mrd
xOqUT8lRZIdDCv6rg1c9wa3JNDzBhYgh8bOJG1IbXs2QqTN0yPxvtJpomozyzLcm
MNFd66LbOg8oduuIqbFqZn3kZjrGqfsgSNgd5krQYSeaOR01smfAcXxwyjGI/lEg
dKHwE3E=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:47 2026 by rpki-client