Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/59B22D68909111EABF08FC4FC4F9AE02.roa
File:                     59B22D68909111EABF08FC4FC4F9AE02.roa (raw, json)
Hash identifier:          pEmCJHKgTnqih/S1LWlyewYwgZVlK/GkPsEZzGbIa14=
Subject key identifier:   3F:26:16:BA:E4:5E:C6:E7:D7:50:1C:99:59:DB:64:74:CF:C9:A4:94
Certificate issuer:       /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial:       09F2
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/59B22D68909111EABF08FC4FC4F9AE02.roa
Signing time:             Thu 08 Jan 2026 20:16:18 +0000
ROA not before:           Thu 08 Jan 2026 20:16:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133331
IP address blocks:        103.225.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
                          rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546 (0x9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
        Validity
            Not Before: Jan  8 20:16:18 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69601092-1411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:9d:bf:dd:63:cd:84:4f:eb:36:26:6a:c1:
                    bd:d9:46:91:c7:18:72:de:91:2b:e1:38:cc:ce:92:
                    e5:b7:66:af:b6:0a:0a:11:48:24:0c:9c:81:81:b7:
                    19:f0:98:5d:c8:d2:2c:ad:7b:78:a8:67:19:10:5f:
                    33:6b:d4:d9:4e:c6:bf:1f:94:f9:12:50:7b:b9:01:
                    10:ce:b2:bf:ee:70:cd:4d:3f:e7:09:32:ea:a0:eb:
                    1a:ee:07:d5:9d:6c:f2:d2:04:27:c0:f8:0f:d6:81:
                    dc:a6:92:a5:fd:60:0f:7b:a8:c4:58:c2:18:34:91:
                    da:a1:98:0d:37:02:e6:28:2b:31:6d:3a:59:11:9e:
                    9c:07:0c:7a:43:03:99:d1:40:ba:c4:9a:be:0f:d3:
                    20:fb:8b:79:ee:30:ae:fc:8e:4a:b1:93:3e:0c:0f:
                    eb:48:79:46:fd:04:04:f7:7a:15:09:ba:f0:cc:dc:
                    a0:92:66:38:64:a6:f6:12:ba:53:0c:6d:64:28:e6:
                    84:88:8f:72:6e:20:7a:c1:24:d8:f5:45:20:53:3f:
                    d3:45:8b:96:a8:b3:d5:16:60:7d:3b:93:37:c1:41:
                    af:f6:76:93:91:23:47:aa:44:18:83:06:b3:f0:47:
                    65:72:36:58:e5:4a:de:35:fc:e9:13:c0:fc:04:0f:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:26:16:BA:E4:5E:C6:E7:D7:50:1C:99:59:DB:64:74:CF:C9:A4:94
            X509v3 Authority Key Identifier:
                keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/59B22D68909111EABF08FC4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:96:cc:43:ed:9e:96:32:92:d2:d3:ad:a1:78:01:16:22:3b:
         42:d2:5e:b3:49:6b:bf:b0:1c:9e:06:5d:59:99:d2:70:bd:91:
         17:41:34:0b:13:46:4f:af:ef:50:da:8a:ed:3d:58:3b:a3:8b:
         8b:a1:75:42:d0:89:1d:8c:22:ab:11:33:8a:0f:21:48:12:01:
         77:4c:89:77:0a:42:c5:dc:0d:e3:7a:ec:a3:36:f1:a7:30:c2:
         17:9a:cb:3e:8a:6c:9f:06:24:e2:be:0c:53:b4:d9:a7:08:92:
         44:0a:4d:1a:db:fb:b5:a6:77:61:f1:2e:2c:84:ef:e2:7a:6d:
         93:25:f6:19:c0:42:ac:b6:d0:7e:55:ff:1d:8c:10:47:14:cc:
         34:ed:3f:74:67:56:7b:ab:81:6b:22:82:7c:1e:5e:52:0d:65:
         84:7c:49:9b:f3:ea:e1:42:51:09:88:e6:c9:12:d4:19:ec:83:
         fb:e1:6f:7e:28:b1:01:a0:f5:b4:cd:c9:7b:c6:d8:ef:3e:fe:
         46:dd:f3:40:f2:21:d3:bf:61:28:f4:8b:3a:0f:6f:0b:4e:1c:
         9d:44:ba:93:fe:3c:ff:1f:60:4d:6c:f3:13:de:2f:6b:32:b2:
         e5:9d:cf:59:84:05:2a:07:ab:71:93:d8:d8:ed:15:87:c1:fd:
         ac:0a:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:04 2026 by rpki-client