Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
File:                     9AAB80560BD511F1920C67C12E3D8C67.roa (raw, json)
Hash identifier:          y/DDjN/HRgYVtynKiGdnfIX2MTuYazn7BOFPufCz5D0=
Subject key identifier:   95:2B:6D:A3:C1:9C:47:99:FA:15:BE:87:1A:C6:2D:85:66:C2:FD:C7
Certificate issuer:       /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
Certificate serial:       04
Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
Signing time:             Tue 17 Feb 2026 07:55:47 +0000
ROA not before:           Tue 17 Feb 2026 07:55:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138655
IP address blocks:        103.140.31.0/24 maxlen: 24
                          2001:df0:a480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl
                          rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F
        Validity
            Not Before: Feb 17 07:55:47 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69941f03-ca59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:15:fa:1f:e8:77:8f:fa:83:e4:5b:fe:4d:
                    da:b7:b7:4e:2b:65:ee:a8:e4:28:1a:b5:af:df:af:
                    77:83:54:46:db:59:de:fe:aa:db:72:5d:b3:fe:ec:
                    c5:54:88:aa:be:4a:07:22:f8:09:fd:af:c2:6e:15:
                    5a:23:09:56:64:be:d5:c0:b0:7b:70:ca:69:70:65:
                    12:af:a0:bb:14:31:13:4f:e7:98:68:0a:a5:28:2f:
                    6e:c4:37:f5:6a:a5:9c:35:f7:7f:d3:61:c9:f6:39:
                    df:0d:54:62:fd:a4:cc:f5:73:9a:e1:aa:4a:92:44:
                    f9:dc:52:14:b9:0a:4a:53:56:75:5b:37:71:c2:9b:
                    d9:07:c8:18:f1:50:18:f6:d9:e6:29:b6:52:9c:a4:
                    3e:95:b7:5b:c1:07:8c:c8:13:e7:12:df:e0:48:44:
                    5d:97:2d:b7:7e:9e:4c:be:60:0e:f4:1a:02:d3:3e:
                    dc:8b:b5:3c:d9:71:15:d6:b3:1e:ab:ee:55:7c:c5:
                    5d:9e:0a:1f:b8:18:14:69:55:38:f5:25:c8:76:3c:
                    18:eb:4b:70:db:0e:35:ba:e3:f5:5d:3e:8e:e2:5c:
                    e1:06:05:97:8f:7d:db:97:ed:70:c9:db:51:7b:e1:
                    7b:c5:0e:33:1e:32:3d:f0:6a:0d:c0:18:75:a1:b3:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2B:6D:A3:C1:9C:47:99:FA:15:BE:87:1A:C6:2D:85:66:C2:FD:C7
            X509v3 Authority Key Identifier:
                keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/9AAB80560BD511F1920C67C12E3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.31.0/24
                IPv6:
                  2001:df0:a480::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:e9:48:4a:f8:e5:fb:2b:9a:f1:4b:d8:4a:f8:4b:e3:ee:
         ea:85:39:75:07:20:c0:d4:1d:7e:50:2f:a0:de:c2:26:10:35:
         51:a2:43:38:ba:00:fb:7c:e3:24:ef:b0:92:e2:44:a2:c7:19:
         bc:06:30:e9:09:92:b4:13:38:82:31:eb:6f:fd:39:9c:e7:b5:
         c9:e4:4a:c5:13:6f:5b:1d:30:d2:e6:66:53:12:9e:7b:38:7b:
         a7:1e:c2:33:ce:52:76:c2:59:d3:b3:fa:64:83:b7:ae:9f:88:
         96:d9:b7:41:67:7f:9c:d7:c2:a6:5a:72:28:af:b2:c2:82:a7:
         4a:0e:e3:57:87:93:57:24:24:a9:c9:95:92:35:15:78:6c:89:
         be:c3:9f:f8:06:9f:21:91:22:18:ca:1f:65:31:0c:97:1d:cf:
         e9:bf:3f:c0:23:2f:bc:f3:cc:61:b2:27:c0:f9:a4:93:d5:5a:
         b4:f4:e3:a4:d4:e8:86:dc:36:3c:5a:90:ee:24:b5:81:8a:15:
         5b:95:4d:2c:d7:e5:36:e5:12:70:87:5c:6f:81:2d:ab:f7:f4:
         89:01:5b:e4:11:1f:2d:a4:58:7d:e9:14:fe:fa:9d:9d:39:4e:
         d0:37:f6:9b:22:d4:d5:e8:b9:25:90:81:27:21:e3:fc:6c:89:
         e8:0f:5f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:36 2026 by rpki-client