Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
File:                     8D0DD6C2690811EFAC6DE109C4F9AE02.roa (raw, json)
Hash identifier:          XpuvqRgCYfVVN7ut63Ekpf8at2zKLjTFxPL6L+Yvcb8=
Subject key identifier:   D2:8D:BB:42:49:1E:31:25:BC:08:9D:8A:55:9D:DD:08:5C:B9:4D:F5
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       0821
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
Signing time:             Sat 14 Feb 2026 21:18:36 +0000
ROA not before:           Sat 14 Feb 2026 21:18:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140586
IP address blocks:        103.82.230.0/24 maxlen: 24
                          103.82.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Feb 14 21:18:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6990e6ac-4de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:74:fc:e9:4e:f7:32:49:13:6f:59:b1:39:
                    ea:8d:dd:b2:c4:74:a1:ab:2d:de:c9:e3:f9:0d:ef:
                    0a:0f:20:67:20:7f:06:b1:80:3b:b5:38:6d:e3:69:
                    33:d2:2a:1d:95:86:3f:b3:c2:e2:09:93:cf:98:2b:
                    64:01:51:ac:7b:ef:15:36:b5:ec:a0:7d:5f:8b:62:
                    e3:15:d0:5a:83:1a:5b:96:05:20:f6:70:cb:06:f3:
                    af:6d:71:bf:e0:77:e8:8c:62:ac:75:b5:5a:31:77:
                    d8:ae:0b:6c:fb:f1:d6:5f:19:a5:2c:56:2c:68:99:
                    08:4c:d9:29:37:3d:cb:5c:e9:0a:78:b1:46:98:5a:
                    f5:8f:63:c4:99:6d:6b:bf:48:ac:f1:06:8e:0a:b8:
                    11:b0:52:6f:19:fa:ad:2f:3a:99:f7:03:7c:72:10:
                    f5:63:f5:08:7c:d8:8a:65:72:84:5c:56:1d:05:19:
                    50:59:67:fb:87:c0:6f:52:3c:e9:0c:b5:97:c1:8e:
                    d8:4b:15:dc:87:35:ac:dc:6d:e1:48:3c:55:53:c5:
                    e0:d6:c8:e9:6b:33:58:3e:c1:6d:7b:52:05:74:a1:
                    2d:97:35:85:4b:55:24:6b:0a:7c:ed:b3:41:9a:55:
                    62:46:62:eb:33:db:44:ac:20:e6:f0:ce:17:71:81:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8D:BB:42:49:1E:31:25:BC:08:9D:8A:55:9D:DD:08:5C:B9:4D:F5
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:ef:53:19:82:ca:9f:e6:90:9e:0c:a3:0b:06:e9:97:0c:
         1d:5e:20:8e:79:ba:02:af:d3:49:cb:09:3d:eb:e3:4b:99:c3:
         db:62:59:c0:01:a8:a7:5a:ab:d6:a5:1a:d6:32:92:aa:87:46:
         33:77:23:c1:45:fe:ee:1e:fe:92:db:29:8a:c7:e3:28:d1:0a:
         76:cd:ae:ee:39:6e:50:65:13:39:ec:d2:6f:a8:23:28:46:35:
         dc:30:4f:f9:e6:ac:ba:0d:dd:d5:1b:2b:3e:72:8f:15:bc:31:
         9a:3d:ea:14:91:dc:e6:f4:2d:b4:a8:f4:1a:43:a9:09:ed:cb:
         f0:2b:b3:6b:e1:08:97:61:87:93:a2:f2:c7:1b:d5:e2:53:31:
         e5:f2:31:e2:92:53:c2:1c:5c:36:14:f7:13:2d:5d:90:59:ec:
         0f:77:82:f8:db:7d:2c:3f:de:d5:bd:5b:80:59:6f:16:06:5f:
         55:52:4a:9b:4f:44:eb:e4:45:c8:23:ec:ae:06:97:08:36:5c:
         87:62:68:ed:16:31:c4:a3:96:48:ef:11:99:3e:74:c3:ad:84:
         0c:7e:be:d6:b4:5a:85:0c:98:d2:f3:11:a7:36:e7:f3:3b:d1:
         05:b8:46:6e:98:de:9f:03:b6:ea:71:93:e1:80:71:96:a4:11:
         ff:ed:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:31:58 2026 by rpki-client