Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa
File:                     A89C497E6D1911ED9C34360FC4F9AE02.roa (raw, json)
Hash identifier:          QZecKaYBLYT3JXclTT713l0j3wlbFJ4L6rdtm9fLrr0=
Subject key identifier:   B6:57:82:D7:AB:77:2D:11:E8:93:4F:A0:2A:B0:06:E7:1D:43:8E:C2
Certificate issuer:       /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
Certificate serial:       0269
Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 05:59:58 +0000
ROA not before:           Mon 02 Feb 2026 05:59:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150447
IP address blocks:        103.17.148.0/23 maxlen: 23
                          103.17.148.0/24 maxlen: 24
                          103.17.149.0/24 maxlen: 24
                          125.253.128.0/24 maxlen: 24
                          125.253.129.0/24 maxlen: 24
                          125.253.130.0/24 maxlen: 24
                          125.253.131.0/24 maxlen: 24
                          2001:df1:5bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl
                          rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
        Validity
            Not Before: Feb  2 05:59:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69803d5e-8c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:7d:33:b6:63:45:8e:12:5e:74:41:04:09:
                    f6:21:47:36:7f:4d:7a:d8:34:9b:b9:67:58:68:62:
                    60:10:78:8f:b1:b6:37:06:48:7c:c7:48:ea:f2:c6:
                    07:45:3c:fc:97:b0:09:1b:0e:38:84:bc:9a:9b:14:
                    fa:0c:99:9e:8d:50:ea:5b:90:82:6f:6a:76:bb:fc:
                    3b:f4:98:0c:89:43:d4:2b:43:71:77:fe:36:03:c7:
                    24:ba:d8:e1:20:97:d3:bd:0c:dc:11:70:03:56:25:
                    b2:b1:09:35:62:dc:ce:d7:b4:c1:a6:f9:6e:b8:e9:
                    09:27:3a:48:17:0d:e2:10:f7:43:4b:ac:75:7a:ea:
                    c8:8a:6c:91:dc:72:14:42:54:ab:eb:d3:d5:2b:69:
                    38:43:38:52:75:8d:9c:9c:b9:89:2c:a0:5d:40:d2:
                    ec:14:44:25:16:87:aa:27:14:d0:28:63:93:a7:94:
                    7d:8d:01:ad:3b:ad:f7:7d:ed:f0:52:b1:31:29:be:
                    8e:75:22:3f:0f:38:d3:d3:99:bc:43:f0:c4:53:61:
                    df:70:06:b4:6d:37:47:ab:18:41:0d:05:b4:b8:8f:
                    71:32:d2:12:88:d3:8c:54:af:40:9b:41:d3:0c:cc:
                    58:b6:28:6d:30:20:98:27:ba:85:c4:e5:64:9f:2b:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:57:82:D7:AB:77:2D:11:E8:93:4F:A0:2A:B0:06:E7:1D:43:8E:C2
            X509v3 Authority Key Identifier:
                keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.148.0/23
                  125.253.128.0/22
                IPv6:
                  2001:df1:5bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:f5:ad:fc:9d:5e:ae:28:fc:bb:ef:dd:6a:d7:72:09:f6:97:
         90:18:fb:0e:a7:79:f9:05:43:c3:1e:ad:2c:c0:b9:84:cc:81:
         a8:3a:27:de:82:84:be:17:dc:ec:95:28:7d:55:68:f1:e6:46:
         05:c7:f5:9b:70:58:ae:11:18:c2:e7:84:c7:89:ba:45:32:93:
         b8:5b:87:28:c0:32:d1:bb:4f:19:e5:d1:fb:1e:32:a2:6b:76:
         42:26:56:81:4a:0e:34:00:79:d8:91:6b:22:2e:55:0e:f7:ff:
         75:14:59:47:b4:d1:b0:88:da:df:26:ca:72:94:c9:b6:ab:42:
         aa:80:b2:ff:70:40:23:a3:73:1c:b8:f3:8a:b6:95:e0:f4:34:
         a2:7e:db:9a:3a:37:b3:83:be:66:25:90:77:c2:d1:3e:74:cf:
         f3:5d:fc:50:ae:d2:45:03:c4:65:06:cf:20:05:8a:bd:98:69:
         c5:04:13:c4:4a:8f:34:88:96:51:69:74:c1:42:e9:f6:71:7d:
         5b:18:ff:31:98:b0:53:42:94:d0:ae:b7:ac:52:69:01:57:a0:
         34:1f:57:47:32:3d:64:b3:3f:bc:09:e3:9f:70:0d:e6:0b:96:
         ff:7b:4c:45:c0:06:b9:e3:f7:55:36:d3:b2:e8:5e:a0:f4:a7:
         e6:6d:fe:25
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
M0Y0NzgxMTAvBgNVBAUTKDU2OEY3NjVDQ0FCNDJDNTIzMDc5OEU2OEZCQzM3QzhB
QTQ5RjVGNDQwHhcNMjYwMjAyMDU1OTU4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgwM2Q1ZS04YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBl9M7ZjRY4SXnRBBAn2IUc2f0162DSbuWdYaGJgEHiPsbY3Bkh8x0jq8sYH
RTz8l7AJGw44hLyamxT6DJmejVDqW5CCb2p2u/w79JgMiUPUK0Nxd/42A8ckutjh
IJfTvQzcEXADViWysQk1YtzO17TBpvluuOkJJzpIFw3iEPdDS6x1eurIimyR3HIU
QlSr69PVK2k4QzhSdY2cnLmJLKBdQNLsFEQlFoeqJxTQKGOTp5R9jQGtO633fe3w
UrExKb6OdSI/DzjT05m8Q/DEU2HfcAa0bTdHqxhBDQW0uI9xMtISiNOMVK9Am0HT
DMxYtihtMCCYJ7qFxOVknytZeQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLZXgter
dy0R6JNPoCqwBucdQ47CMB8GA1UdIwQYMBaAFFaPdlzKtCxSMHmOaPvDfIqkn19E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjQ3OC80OTlBOTE1RTZE
MTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExGSXdlWTVvLThOOGlxU2ZY
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZvOTJYTXEwTEZJd2VZNW8tOE44aXFTZlgwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Y0NzgvNDk5QTkxNUU2RDE2MTFFREJFMTIwNTBDQzRGOUFFMDIvQTg5QzQ5N0U2
RDE5MTFFRDlDMzQzNjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBAFnEZQDBAJ9/YAwDwQCAAIwCQMHACABDfFbwDANBgkqhkiG
9w0BAQsFAAOCAQEALPWt/J1erij8u+/datdyCfaXkBj7Dqd5+QVDwx6tLMC5hMyB
qDon3oKEvhfc7JUofVVo8eZGBcf1m3BYrhEYwueEx4m6RTKTuFuHKMAy0btPGeXR
+x4yomt2QiZWgUoONAB52JFrIi5VDvf/dRRZR7TRsIja3ybKcpTJtqtCqoCy/3BA
I6NzHLjziraV4PQ0on7bmjo3s4O+ZiWQd8LRPnTP8138UK7SRQPEZQbPIAWKvZhp
xQQTxEqPNIiWUWl0wULp9nF9Wxj/MZiwU0KU0K63rFJpAVegNB9XRzI9ZLM/vAnj
n3AN5guW/3tMRcAGueP3VTbTsuheoPSn5m3+JQ==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:54 2026 by rpki-client