Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/ADAEBBD6161F11EE9C6E4529C4F9AE02.roa
File:                     ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (raw, json)
Hash identifier:          Qk/JlIAL6wA57P2W93JDwHNqVzrKgz17qn9GNc4497E=
Subject key identifier:   85:D7:3F:BF:58:FE:B9:A1:D6:B1:5B:DF:DF:B7:AA:DE:E5:A4:68:63
Certificate issuer:       /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial:       0210
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/ADAEBBD6161F11EE9C6E4529C4F9AE02.roa
Signing time:             Wed 11 Feb 2026 02:22:52 +0000
ROA not before:           Wed 11 Feb 2026 02:22:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     24305
IP address blocks:        103.215.15.0/24 maxlen: 24
                          202.0.75.0/24 maxlen: 24
                          203.8.161.0/24 maxlen: 24
                          203.26.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
        Validity
            Not Before: Feb 11 02:22:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698be7fc-8cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:97:a3:ce:fe:0d:72:ab:a3:9e:5a:d5:f8:
                    9c:16:0d:27:81:ae:13:21:77:2e:b4:0b:66:7e:da:
                    f8:e6:41:85:b1:d7:11:23:d4:27:69:8c:fe:8e:a9:
                    23:c4:a8:97:21:e7:21:68:10:42:d8:98:fb:e2:84:
                    a5:4e:4b:d6:cd:4a:4c:09:af:9e:c6:ca:d1:9a:e1:
                    e4:89:5d:6f:a7:e5:99:24:a6:eb:25:20:b2:1c:4c:
                    82:8b:1a:a5:00:a4:9f:15:05:dd:69:de:2c:7d:db:
                    df:c7:27:6a:80:e5:77:f6:91:d7:a0:b4:ef:f3:32:
                    3b:cb:d0:36:24:4f:9b:4f:a0:88:b0:8b:da:58:5b:
                    6d:e0:fb:25:b3:6f:8a:f9:14:e8:0a:dc:81:8b:00:
                    85:38:77:2a:a5:bf:e4:97:ae:32:c6:fa:35:d0:53:
                    03:9a:47:e9:dd:d2:30:a5:fc:9d:7f:7f:7b:e7:0e:
                    1a:0a:f2:03:e2:bf:d9:aa:97:d3:ad:32:ed:a9:85:
                    10:bd:32:ea:bf:01:56:6e:d7:ef:70:58:b3:a6:6c:
                    95:6e:21:07:ff:90:f4:c7:b2:a2:c4:97:63:c0:43:
                    f1:ef:c2:87:0c:20:5f:84:0d:10:54:66:9d:f4:db:
                    10:29:de:62:19:91:cf:8c:61:89:5b:ea:32:58:42:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:3F:BF:58:FE:B9:A1:D6:B1:5B:DF:DF:B7:AA:DE:E5:A4:68:63
            X509v3 Authority Key Identifier:
                keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/ADAEBBD6161F11EE9C6E4529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.15.0/24
                  202.0.75.0/24
                  203.8.161.0/24
                  203.26.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c7:80:9e:b3:00:49:23:54:8f:16:70:73:9c:04:81:90:90:
         a5:0f:d6:42:7e:fb:bf:36:a5:f1:08:83:6e:35:e0:04:a5:16:
         8e:88:43:e6:bd:26:e8:98:3f:6b:b4:72:db:27:e0:a0:95:14:
         bc:2f:88:8c:23:99:6d:d1:c5:cd:e1:b3:29:93:6f:f9:7b:69:
         b1:6b:5a:1d:ef:2f:d4:f5:5e:d5:d6:d6:7e:81:84:91:51:09:
         da:6e:c8:ad:1c:16:1e:81:a8:69:98:98:eb:8d:64:dd:b1:47:
         ca:22:4a:51:10:bc:19:97:55:d7:df:64:f0:b2:0c:dc:89:44:
         bc:d3:9d:a0:77:2a:37:16:1c:89:9d:8e:45:98:c9:27:dc:a2:
         b9:44:95:cf:13:93:d1:39:18:6b:04:33:6b:4a:bb:a4:78:76:
         ee:aa:b5:6b:89:f2:84:0c:da:c6:de:a1:d1:80:29:60:03:a8:
         75:4a:80:2c:82:4b:b5:fc:c9:0b:be:8d:22:79:f2:75:0b:54:
         4e:3a:e4:eb:7a:07:46:6d:bb:68:97:d3:53:df:90:87:1f:c4:
         63:85:69:47:99:49:7e:1b:88:2a:bf:b0:fc:fb:0f:73:19:39:
         bd:8e:ef:29:85:f5:61:d9:51:83:82:a9:42:f5:15:99:29:33:
         cb:9a:f7:e6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
M0M5MUExMTAvBgNVBAUTKEFCODc4OUM3MEM3NDJFQUY5NTlGNDZBMUI5NzRFNTQ1
NEMwQUZGQUYwHhcNMjYwMjExMDIyMjUyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThiZTdmYy04Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytaXo87+DXKro55a1ficFg0nga4TIXcutAtmftr45kGFsdcRI9QnaYz+jqkj
xKiXIechaBBC2Jj74oSlTkvWzUpMCa+exsrRmuHkiV1vp+WZJKbrJSCyHEyCixql
AKSfFQXdad4sfdvfxydqgOV39pHXoLTv8zI7y9A2JE+bT6CIsIvaWFtt4Psls2+K
+RToCtyBiwCFOHcqpb/kl64yxvo10FMDmkfp3dIwpfydf3975w4aCvID4r/ZqpfT
rTLtqYUQvTLqvwFWbtfvcFizpmyVbiEH/5D0x7KixJdjwEPx78KHDCBfhA0QVGad
9NsQKd5iGZHPjGGJW+oyWEIDDwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFIXXP79Y
/rmh1rFb39+3qt7lpGhjMB8GA1UdIwQYMBaAFKuHiccMdC6vlZ9Gobl05UVMCv+v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxQS82MUU3MEQ4NjE2
MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExxLVZuMGFodVhUbFJVd0tf
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0ZUp4d3gwTHEtVm4wYWh1WFRsUlV3S182OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0M5MUEvNjFFNzBEODYxNjE4MTFFRTgwQjk0MTRFQzRGOUFFMDIvQURBRUJCRDYx
NjFGMTFFRTlDNkU0NTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABn1w8DBADKAEsDBADLCKEDBADLGk8wDQYJKoZIhvcNAQEL
BQADggEBAKvHgJ6zAEkjVI8WcHOcBIGQkKUP1kJ++782pfEIg2414ASlFo6IQ+a9
JuiYP2u0ctsn4KCVFLwviIwjmW3Rxc3hsymTb/l7abFrWh3vL9T1XtXW1n6BhJFR
CdpuyK0cFh6BqGmYmOuNZN2xR8oiSlEQvBmXVdffZPCyDNyJRLzTnaB3KjcWHImd
jkWYySfcorlElc8Tk9E5GGsEM2tKu6R4du6qtWuJ8oQM2sbeodGAKWADqHVKgCyC
S7X8yQu+jSJ58nULVE465Ot6B0Ztu2iX01PfkIcfxGOFaUeZSX4biCq/sPz7D3MZ
Ob2O7ymF9WHZUYOCqUL1FZkpM8ua9+Y=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:32 2026 by rpki-client