Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/2D197F6E52E611F087152212C4F9AE02.roa
File:                     2D197F6E52E611F087152212C4F9AE02.roa (raw, json)
Hash identifier:          vjrVxfCq6yZmiCjHsjpd3tMKPB3GBQP577v6rdoacc0=
Subject key identifier:   54:41:68:AD:6B:A7:3D:AF:E3:F6:A7:7C:FC:77:FC:C5:C0:AE:77:0C
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       0599
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/2D197F6E52E611F087152212C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 23:19:35 +0000
ROA not before:           Wed 04 Feb 2026 23:19:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138521
IP address blocks:        103.127.162.0/23 maxlen: 24
                          2404:2440::/32 maxlen: 32
                          2404:2440:a0a0::/48 maxlen: 48
                          2404:2440:abcd::/48 maxlen: 48
                          2404:2440:b0b0::/48 maxlen: 48
                          2404:2440:beef::/48 maxlen: 48
                          2404:2440:c0c0::/48 maxlen: 48
                          2404:2440:cafe::/48 maxlen: 48
                          2404:2440:d0d0::/48 maxlen: 48
                          2404:2440:dada::/48 maxlen: 48
                          2404:2440:e0e0::/48 maxlen: 48
                          2404:2440:eeee::/48 maxlen: 48
                          2404:2440:f0f0::/48 maxlen: 48
                          2404:2440:face::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Feb  4 23:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6983d406-893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:f5:61:6d:02:94:fb:2d:66:13:14:f8:27:
                    9f:4a:da:74:43:14:ac:c1:6a:ea:14:d5:1b:b6:72:
                    80:c5:d7:98:8e:79:bb:59:ff:86:c5:a7:32:b1:76:
                    5a:5b:0e:dc:f1:b9:d7:f6:13:de:05:25:88:7e:ea:
                    ec:53:7d:c0:0b:da:93:19:ae:2d:bd:a7:a6:45:13:
                    86:dc:f5:e4:e7:b6:55:32:27:ab:3c:c2:cc:dd:ab:
                    25:2e:cb:93:70:44:cd:f4:eb:d1:cf:1e:51:e9:a2:
                    23:c6:ac:bd:dd:fe:95:29:1e:4b:5e:9e:f5:64:a7:
                    3b:bb:f6:de:db:b2:f2:4d:6f:8a:b0:b8:b7:73:ac:
                    7d:41:6f:24:18:91:9c:2d:86:84:32:b0:b5:e0:88:
                    97:f5:ed:e8:39:28:59:9e:81:c1:82:b3:f4:36:08:
                    fe:10:c0:d5:84:3e:f4:e9:6e:69:85:d1:7f:c3:47:
                    76:07:03:65:7c:e1:06:31:38:3f:ba:d2:7c:f1:5a:
                    8a:6d:14:fb:3f:0a:17:26:88:14:9b:d9:e9:45:fb:
                    31:ff:5a:e2:ec:ae:bf:c4:6b:96:cb:c6:30:7c:93:
                    12:65:4c:d7:12:8a:fc:0f:18:83:bc:d4:9b:5b:61:
                    d8:f6:98:0e:39:98:8f:48:ff:5d:3d:a8:af:f2:d3:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:68:AD:6B:A7:3D:AF:E3:F6:A7:7C:FC:77:FC:C5:C0:AE:77:0C
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/2D197F6E52E611F087152212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.162.0/23
                IPv6:
                  2404:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:22:bb:26:8e:be:c2:ae:7b:0a:d4:7c:26:56:c8:5d:d7:
         80:7b:a9:8c:83:b2:d4:de:af:f8:0c:1c:c0:ef:d2:2b:89:98:
         e0:42:89:cd:24:89:c8:7b:79:19:18:72:29:45:6c:07:56:eb:
         01:3a:5b:41:86:50:6b:77:d8:e3:53:83:77:9d:50:07:3c:24:
         6f:c2:9e:68:49:fe:70:c7:05:ff:2b:c1:f6:5a:8a:70:9f:e6:
         29:39:8c:20:22:6a:7b:06:c5:27:25:4b:9b:f1:58:83:d4:ea:
         da:da:34:e6:6b:39:78:4d:ac:a7:49:25:2a:52:fa:3f:bf:34:
         04:9e:b7:4e:44:de:17:ed:00:84:9a:2c:1d:97:84:27:ae:8a:
         e3:53:c5:3c:6f:46:38:51:6b:ab:4d:08:01:a4:60:23:c9:de:
         aa:ee:ad:fd:eb:df:b3:c3:3b:8c:ac:45:16:9d:5c:d2:ab:b6:
         33:b7:4c:9b:de:39:a9:1d:3b:97:22:33:50:73:ba:8d:47:54:
         2b:36:3c:c6:02:78:1b:37:19:3a:d5:e4:65:8c:29:d9:48:c3:
         bc:46:d4:79:99:f2:d4:8d:f9:09:ad:3d:a1:6c:c2:c7:fc:78:
         d1:f4:19:7a:e6:dd:8d:5b:19:1e:a0:c2:ce:e0:d9:93:7b:5b:
         0c:41:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:38 2026 by rpki-client