Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
File:                     FC03153ADBDD11F0AA14A9C858641951.roa (raw, json)
Hash identifier:          6BnaIOPaP4m+6dT6t7frvHQx+SiM/PSsQvcI4Do8Xbg=
Subject key identifier:   5A:5E:DD:A4:C2:FE:43:37:21:1D:93:EF:F6:B4:95:BF:FD:3C:51:47
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       05C8
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
Signing time:             Tue 17 Feb 2026 17:20:28 +0000
ROA not before:           Tue 17 Feb 2026 17:20:28 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     138926
IP address blocks:        103.170.178.0/24 maxlen: 24
                          103.170.179.0/24 maxlen: 24
                          2402:41a0::/32 maxlen: 32
                          2402:41a0::/48 maxlen: 48
                          2402:41a0:1::/48 maxlen: 48
                          2402:41a0:2::/48 maxlen: 48
                          2402:41a0:3::/48 maxlen: 48
                          2402:41a0:4::/48 maxlen: 48
                          2402:41a0:5::/48 maxlen: 48
                          2402:41a0:9::/48 maxlen: 48
                          2402:41a0:170::/48 maxlen: 48
                          2402:41a0:171::/48 maxlen: 48
                          2402:41a0:172::/48 maxlen: 48
                          2402:41a0:173::/48 maxlen: 48
                          2402:41a0:174::/48 maxlen: 48
                          2402:41a0:175::/48 maxlen: 48
                          2402:41a0:176::/48 maxlen: 48
                          2402:41a0:177::/48 maxlen: 48
                          2402:41a0:178::/48 maxlen: 48
                          2402:41a0:179::/48 maxlen: 48
                          2402:41a0:2380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Feb 17 17:20:28 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6994a35c-7e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:15:54:6d:ce:5d:a3:69:29:0a:41:8e:f1:
                    16:aa:69:7a:c9:41:80:59:cf:b6:b8:c2:38:49:b1:
                    28:0b:b1:08:af:db:e5:d3:6d:80:c6:a7:74:9c:65:
                    bf:c1:f0:e3:26:5d:04:2b:7c:c5:29:ff:20:9d:7f:
                    24:98:47:44:e3:00:2e:f3:f3:62:97:d6:4e:0d:92:
                    72:88:35:84:96:2c:4a:98:71:e6:f8:f8:65:75:57:
                    30:d7:39:a6:99:f5:14:db:92:1c:fd:c3:68:eb:1a:
                    4e:ea:ee:35:06:34:b6:11:cf:5d:9d:be:52:21:0e:
                    3b:22:80:5f:00:61:ea:b3:3f:13:8b:a4:c7:03:71:
                    d9:52:79:a6:88:21:f4:cb:28:7c:3b:3b:f0:3b:a3:
                    60:ea:c9:90:1d:af:85:fe:58:df:5a:19:95:10:4d:
                    41:e5:5b:b7:5b:63:42:2e:c0:56:41:27:3c:5a:52:
                    8b:1b:f9:97:77:af:d2:e2:42:26:05:10:77:c4:bf:
                    91:68:a2:63:46:d7:5e:86:b2:d4:66:41:d5:dd:3d:
                    ae:39:cc:93:4d:8c:bc:c5:7a:79:5d:91:9b:c9:20:
                    5d:44:ce:0a:e6:80:19:5d:32:40:dc:9f:73:a2:4c:
                    0f:cf:48:94:a0:ba:73:d3:fd:1b:7e:7b:71:97:a1:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:DD:A4:C2:FE:43:37:21:1D:93:EF:F6:B4:95:BF:FD:3C:51:47
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/FC03153ADBDD11F0AA14A9C858641951.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.178.0/23
                IPv6:
                  2402:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:7a:23:c9:2d:49:48:ae:0a:bf:93:65:e6:3b:76:6e:7d:7a:
         42:ca:7b:25:19:91:06:35:a8:45:e9:65:53:b9:31:64:43:97:
         24:f1:90:6f:cb:47:a8:9c:39:9d:9c:df:fe:73:c7:ab:ce:5c:
         46:97:74:f6:c4:cb:c0:6f:92:a4:6d:b0:36:06:d8:ae:79:37:
         fc:64:c3:6e:89:5d:a9:03:80:bc:99:32:be:09:60:cc:82:62:
         07:29:0e:a6:5a:a4:f8:06:01:ce:53:77:62:a8:ab:09:a5:a1:
         eb:a3:25:76:24:cf:c4:07:a8:82:a7:dc:2a:33:6c:4f:28:08:
         2e:21:48:5b:34:43:ca:20:a2:de:c8:34:aa:b2:94:f3:0f:48:
         c4:df:3d:4c:3a:36:63:e5:21:05:c0:0d:8e:50:41:60:6a:98:
         33:11:a6:5f:fe:77:0f:0e:df:df:ad:a7:c0:10:46:e7:1c:b4:
         b8:72:bb:19:6f:fa:5f:34:fe:ca:01:28:ca:bd:77:7c:49:84:
         58:04:85:2a:f7:8c:b5:e2:35:d3:06:69:4a:76:35:cf:4d:50:
         0d:73:1d:cf:72:17:a3:2f:cc:47:0c:ff:98:b2:fb:bb:c2:fb:
         84:1c:18:17:24:9c:b2:67:8e:84:02:68:51:d2:3d:ea:63:c9:
         35:a9:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:31:56 2026 by rpki-client