Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa
File:                     502A4A36AAA611EE998EEF3AC4F9AE02.roa (raw, json)
Hash identifier:          f4s13BNPaiOaDx2ORoIboJtAbXcEMGldMWg2agQ6PEg=
Subject key identifier:   24:E7:24:5B:EA:52:13:45:49:72:96:0C:B0:07:17:B4:79:91:DA:5B
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       35C6
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 15:11:33 +0000
ROA not before:           Mon 02 Feb 2026 15:11:33 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     24378
IP address blocks:        203.156.106.0/24 maxlen: 24
                          203.156.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13766 (0x35c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb  2 15:11:33 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6980bea5-949c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:1b:64:d1:6c:c8:63:d1:83:ec:28:bd:5a:
                    56:24:c0:24:da:0a:a6:7a:80:f0:43:ac:fe:52:dc:
                    8d:aa:a9:6a:39:31:91:b7:7a:7c:c9:16:64:02:5f:
                    19:06:49:c9:20:4a:3f:4e:bd:eb:df:28:97:15:c5:
                    f8:82:cb:58:15:eb:7f:d1:db:8e:bd:04:81:db:d8:
                    f2:18:0c:8f:5c:40:f7:14:b5:c3:52:37:8a:d8:00:
                    0c:19:3b:40:73:9d:47:56:4e:81:19:e0:bf:cf:0c:
                    8a:aa:c5:66:97:c3:25:9b:53:8d:97:ac:57:a2:eb:
                    2e:08:58:d3:ea:ff:6c:c9:b7:09:e7:fc:8c:65:35:
                    d5:5f:bc:93:68:0c:08:01:cd:25:9e:bd:b0:20:21:
                    e2:e9:03:74:c8:0d:ec:cf:72:25:a3:4a:9a:f2:14:
                    d9:08:5a:eb:ad:55:7c:23:c5:b0:5f:0a:eb:e6:90:
                    76:69:e8:d4:77:ca:70:26:14:ef:0f:a8:42:69:f4:
                    5d:2f:ac:4d:8f:90:dd:6e:e4:91:c7:04:d4:a4:b3:
                    0b:db:35:d2:f8:45:34:88:a4:01:2b:0a:b9:65:72:
                    f1:f0:c6:4f:55:74:d9:28:49:22:dd:f8:4d:1c:16:
                    3d:52:95:d5:95:54:ab:93:d4:ef:47:1b:a8:2b:14:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E7:24:5B:EA:52:13:45:49:72:96:0C:B0:07:17:B4:79:91:DA:5B
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.156.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:d2:a6:2a:1c:9b:42:1b:a9:4e:4d:ef:22:ad:4c:a0:ba:
         40:25:48:21:70:50:7d:10:a3:82:18:05:7a:39:c4:fe:18:02:
         a8:61:30:88:79:6c:c9:05:bf:8e:59:d4:65:a4:4c:87:de:0c:
         88:da:47:b6:d5:a3:8b:45:4b:e7:2e:42:2c:e2:17:2d:12:8f:
         13:19:4b:15:6f:1b:31:a4:fd:a2:d5:11:3d:e6:33:d5:9a:1f:
         e5:bc:9a:36:b6:14:e3:84:b8:5a:04:f0:1a:97:af:a4:49:5c:
         2f:e6:a0:cb:94:d7:eb:b7:15:7a:ef:d7:f8:79:a9:e8:eb:df:
         fd:e7:97:07:a3:87:a9:fe:ee:a6:05:fc:9f:3f:39:46:5d:c3:
         63:59:e4:e6:6d:93:e7:cf:01:ee:db:9b:66:6a:b0:44:17:58:
         d6:89:81:a4:91:c6:10:2a:51:56:95:e6:7b:b4:e2:16:ff:9f:
         c9:d4:0c:15:f6:eb:fe:c2:09:e1:85:7f:11:99:61:cb:7c:f5:
         75:d6:09:02:61:15:f2:4c:75:dc:92:24:0a:32:81:de:ef:1c:
         90:f1:b4:c2:3a:c8:a8:ab:53:cd:f7:59:91:47:95:f0:26:04:
         29:52:1c:df:6a:6e:94:98:89:12:8a:6a:4a:fe:b6:69:9f:cc:
         0c:47:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:15 2026 by rpki-client