Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa
File:                     63F5A844A07211EBB1E80A0BC4F9AE02.roa (raw, json)
Hash identifier:          Evlk2OPf9l/SkzwAyJ+12JtdaVMe2Rpcvor/ebWEOIM=
Subject key identifier:   D7:76:73:5F:DD:B6:E2:9F:2A:32:B2:57:88:FC:94:1E:3A:F6:9B:45
Certificate issuer:       /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial:       0697
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa
Signing time:             Fri 30 Jan 2026 22:19:04 +0000
ROA not before:           Fri 30 Jan 2026 22:19:04 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     59355
IP address blocks:        103.147.232.0/23 maxlen: 23
                          103.147.232.0/24 maxlen: 24
                          103.147.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
                          rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
        Validity
            Not Before: Jan 30 22:19:04 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697d2e58-481a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:f3:93:84:a4:a2:58:4c:c6:f2:b8:a1:39:
                    ed:47:bf:0f:a2:ad:cb:d4:5a:ef:75:06:c5:d1:62:
                    60:5f:f6:59:99:8f:17:a8:e1:b3:17:aa:c1:21:57:
                    e9:c7:a3:17:01:55:9f:d5:39:9f:f4:d0:78:aa:1a:
                    62:4f:de:1a:8c:19:d6:5d:95:fd:13:33:27:f7:2a:
                    27:38:2d:e1:3b:f5:c3:9f:27:13:ab:05:bf:57:61:
                    ae:c6:ae:64:ed:f8:86:46:55:a7:41:63:63:59:c5:
                    05:cd:28:55:d2:3a:9a:e5:65:75:08:00:b2:97:6d:
                    c4:9b:49:e7:fd:32:28:96:3a:a2:fb:97:00:1c:db:
                    df:a4:d3:04:db:56:74:ad:a4:17:cb:65:70:cf:59:
                    5d:69:ef:8e:f3:81:ca:dc:33:6f:51:91:14:c0:95:
                    2a:49:e6:c3:45:44:fd:b1:3b:d8:87:ea:19:5f:7d:
                    82:de:71:01:d2:e3:dc:7c:2f:48:76:2c:e2:3e:c0:
                    30:1b:a3:8b:6e:37:ba:8b:20:e0:a8:9e:0b:e6:34:
                    85:74:65:42:4b:b9:62:73:0a:97:07:4b:bb:52:df:
                    bc:37:c2:f0:4a:e7:e4:97:42:46:2a:95:e5:98:a1:
                    a3:ea:76:6a:31:62:6c:cc:22:1c:62:c2:01:25:2e:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:73:5F:DD:B6:E2:9F:2A:32:B2:57:88:FC:94:1E:3A:F6:9B:45
            X509v3 Authority Key Identifier:
                keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:72:05:88:2b:0b:8b:15:b3:8c:b9:12:37:0a:d1:3b:a4:
         2a:04:cf:f9:77:b1:a3:ae:81:31:72:d5:8c:6b:5b:c3:19:8d:
         5c:0e:de:ac:dc:72:31:9b:2f:06:da:f2:10:a8:c8:6a:68:43:
         60:7b:ce:0e:f2:4f:d3:ad:49:08:54:10:20:c8:2b:8f:1e:07:
         14:cb:b6:1c:64:43:31:4b:d5:fe:46:78:7a:6a:71:38:96:80:
         08:87:fc:6f:90:67:da:6a:8e:76:bb:58:6e:7f:c1:ea:b5:e2:
         eb:91:d5:22:ba:8b:44:45:3c:8e:66:9a:91:9e:31:db:4c:e8:
         80:ba:04:56:f9:8a:28:d2:64:d2:7c:67:3f:b0:dd:2c:3c:b3:
         53:46:c0:4e:00:b9:a6:ce:64:a8:02:c6:93:5f:f1:58:af:e3:
         8f:c8:de:f9:5b:c0:ec:bc:1b:48:90:d8:99:77:37:62:92:0b:
         10:78:7f:fc:72:a8:39:04:aa:bf:5a:7e:0d:c9:47:ac:10:87:
         77:0c:61:db:85:e9:cf:02:fb:1f:82:d6:86:d6:25:9c:ad:b5:
         76:7d:b2:be:ce:24:62:50:18:1b:93:72:2a:d6:23:63:e4:7d:
         bb:dc:aa:21:59:a5:6a:98:ce:46:12:d2:8e:97:08:18:53:e4:
         a9:47:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:38:20 2026 by rpki-client