Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
File:                     BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (raw, json)
Hash identifier:          wtDotGbEs87cEpUxwaMvxa3UVVU2th2jfl9BvmgtjLY=
Subject key identifier:   F9:7D:DB:CA:B7:A8:6B:07:C7:4D:2E:DB:D7:FC:AD:44:18:7F:8A:83
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       06EF
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
Signing time:             Sat 14 Feb 2026 22:20:03 +0000
ROA not before:           Sat 14 Feb 2026 22:20:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142063
IP address blocks:        103.166.102.0/24 maxlen: 24
                          103.166.103.0/24 maxlen: 24
                          2001:df1:b340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: Feb 14 22:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6990f512-2bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:11:44:14:ca:e2:1d:43:78:49:4c:1f:8b:
                    f8:b2:2e:4f:fe:88:e8:83:c4:d2:ca:5f:ae:b6:58:
                    d2:6c:42:d7:27:f2:6a:12:8f:0d:ee:cc:71:ae:fe:
                    08:b9:0c:4f:a1:8a:dc:b7:d6:da:ff:7c:c9:da:cb:
                    c1:a1:7d:65:e6:f3:e7:fb:28:31:8e:30:05:28:4e:
                    9a:e5:35:c0:5e:3e:1c:15:99:de:65:63:c6:14:19:
                    e1:6d:8f:84:a8:e1:d6:00:f3:19:7c:2c:ed:61:42:
                    55:29:d7:3c:26:53:99:8d:14:80:d4:67:18:c5:94:
                    5a:af:60:00:c5:4c:50:52:95:68:e8:5e:f1:9c:78:
                    b5:44:a6:f8:b4:55:30:7e:a8:8f:85:d3:38:c2:8a:
                    60:98:ce:64:f5:8e:06:cf:eb:73:c3:05:be:08:37:
                    97:3c:86:4d:f0:39:19:22:8f:f0:cc:0b:13:f7:b6:
                    3a:8f:25:98:91:e6:cd:e4:2c:ff:41:cc:a2:30:06:
                    96:9d:2e:0c:39:92:e4:51:9b:cf:91:e3:21:50:85:
                    a2:bd:11:ba:59:eb:de:52:f1:99:6c:a6:6d:31:4e:
                    17:f8:4a:c0:15:a7:c2:b4:05:ff:a4:b5:1b:0d:df:
                    3d:63:52:42:68:49:2c:6a:8f:c8:ff:16:f9:65:97:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7D:DB:CA:B7:A8:6B:07:C7:4D:2E:DB:D7:FC:AD:44:18:7F:8A:83
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.102.0/23
                IPv6:
                  2001:df1:b340::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:90:b1:dd:87:0c:cd:47:76:5f:e5:ad:52:6e:25:1c:82:
         af:07:91:36:5f:58:75:34:7d:d2:6e:e0:cd:61:73:34:0a:92:
         ce:cd:53:10:8e:16:01:7e:9a:d4:4f:97:ed:3b:89:4a:fe:b7:
         f6:5c:07:ac:c5:a8:b0:52:86:f1:d4:b2:99:bd:e6:b0:b6:40:
         52:67:bc:94:72:30:a1:37:00:c4:1b:e1:af:7e:e0:b5:7f:2c:
         08:20:81:23:6d:0d:49:a9:75:eb:b4:ab:03:92:03:33:89:57:
         c1:f4:26:e2:cb:d6:6e:1e:2c:7e:39:82:c2:68:c0:9e:1c:07:
         fa:a5:5e:0b:b3:14:88:d5:a7:e2:55:8d:b7:f0:b2:8a:ba:cb:
         ea:70:c5:8c:3c:cf:c1:59:ac:e1:ab:04:67:e2:73:d6:fa:c5:
         5f:c2:05:f1:40:ef:c6:20:22:6f:af:3a:d6:3e:0d:d2:8e:bb:
         aa:25:4d:ff:93:c1:7f:02:bb:68:20:78:b8:e0:f8:c1:d0:96:
         cb:ed:68:84:48:02:0f:df:82:6e:dc:7a:9a:19:fc:ff:75:0b:
         11:e2:a0:7a:28:5e:0c:ae:ac:23:f6:06:03:43:f8:60:fc:34:
         fd:6c:28:05:c3:d2:73:9c:84:35:8c:51:5c:24:d6:39:fa:92:
         97:9c:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:32 2026 by rpki-client