Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
File:                     7C321BDEA55711EFB8317F6BC4F9AE02.roa (raw, json)
Hash identifier:          YGKzvkCPG1oIlWg6hEMbePX9VWaOws6ZD8ARPoVjPfY=
Subject key identifier:   8A:2E:C4:7A:9A:E4:D7:09:81:3E:FB:A1:54:3F:8E:27:10:68:32:79
Certificate issuer:       /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
Certificate serial:       E4
Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
Signing time:             Tue 27 Jan 2026 05:27:55 +0000
ROA not before:           Tue 27 Jan 2026 05:27:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139899
IP address blocks:        103.146.226.0/23 maxlen: 23
                          2001:df2:7280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl
                          rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319
        Validity
            Not Before: Jan 27 05:27:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69784cdb-e1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:87:1f:17:1e:af:f6:b8:94:9d:4f:ad:ae:
                    e2:31:0e:f0:55:c8:c7:12:dc:a2:18:6a:14:a9:6c:
                    d0:74:94:1e:c6:06:c1:fd:68:aa:34:09:b2:30:1b:
                    21:b7:e5:ab:72:b5:6a:ed:9f:a6:bb:d7:62:2f:ca:
                    69:51:6e:fb:18:27:c2:e1:3a:18:78:0e:cf:f6:3c:
                    c2:bb:95:6e:cf:50:d2:a7:3e:a5:8f:33:5e:3e:76:
                    cf:cc:e4:65:64:3f:6c:bd:5b:79:0e:ec:41:c5:b4:
                    a1:de:45:c1:8f:cb:ac:f5:3d:48:b5:0d:83:aa:a7:
                    d5:2f:88:33:32:27:03:71:cc:aa:ec:a4:83:73:5d:
                    a3:2b:29:ff:f4:1d:76:ce:b7:e6:ce:8c:de:df:a0:
                    40:0a:f4:c5:9a:22:bf:ff:4e:fc:b9:b7:5d:cc:3c:
                    30:04:09:91:b6:69:9b:2f:65:e8:0c:f1:10:0b:2b:
                    87:0b:23:d7:6b:1b:a4:6a:75:cf:1e:99:52:39:18:
                    5c:39:d3:82:45:6f:94:5e:78:45:1f:e4:55:b2:10:
                    cf:57:d6:8c:8e:ab:8c:4f:73:fe:17:ac:ed:bb:4d:
                    50:49:6e:90:d7:08:12:85:fa:dd:83:2c:03:65:34:
                    71:8e:5d:23:d9:81:37:fc:fc:39:69:80:4a:a5:48:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:C4:7A:9A:E4:D7:09:81:3E:FB:A1:54:3F:8E:27:10:68:32:79
            X509v3 Authority Key Identifier:
                keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/7C321BDEA55711EFB8317F6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.226.0/23
                IPv6:
                  2001:df2:7280::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:b0:20:16:c5:77:87:f3:f2:f4:03:a5:a7:f2:4c:97:db:
         24:ad:ef:90:e5:1c:94:f8:0a:87:ae:a8:da:54:2b:6a:b0:c3:
         ff:25:2c:0f:3b:1f:26:68:66:31:7b:e0:6f:c0:5d:a5:ea:7d:
         a6:e5:38:eb:15:cf:b4:8a:19:f7:9e:6d:fe:43:a6:1e:e4:23:
         2e:fe:fe:aa:f5:68:aa:19:e1:fa:11:07:e2:45:e5:01:85:d8:
         e5:e5:89:64:6c:fa:db:1e:cc:d6:e4:7e:46:6a:0e:8b:61:bb:
         02:e6:7d:c6:95:13:02:d8:a6:b6:b3:8c:67:9b:9b:bb:04:b3:
         68:99:89:5b:f3:35:1e:5b:00:15:41:03:ae:0d:68:a2:a8:f0:
         2e:cc:c2:fb:89:80:7c:19:07:d9:4f:07:14:6b:fd:0e:3f:68:
         b7:73:36:b9:eb:26:66:5a:7e:98:32:bc:5c:93:cf:19:bf:7e:
         3f:e3:66:c0:f0:19:8b:9c:e6:21:8c:10:fe:e4:e5:b9:ef:aa:
         2c:51:65:43:6b:ca:66:42:a5:72:c4:a1:e9:44:a6:dd:23:03:
         56:92:26:a8:a3:05:14:4b:c4:2a:2d:e9:06:22:f9:94:81:81:
         fd:a9:a0:32:ea:77:88:db:c1:84:d6:79:a1:21:32:59:58:92:
         13:68:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:45 2026 by rpki-client