Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
File:                     22D8137A51A711EBAAAB6410C4F9AE02.roa (raw, json)
Hash identifier:          tBfM93FKPo01g3EnlUkojxzMSEB+jk1tOP6IV1x0rXw=
Subject key identifier:   1C:2F:02:D9:A6:7D:95:3F:DC:38:49:D1:CB:B4:EB:44:E3:70:56:68
Certificate issuer:       /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial:       0760
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 21:18:30 +0000
ROA not before:           Mon 02 Feb 2026 21:18:30 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132372
IP address blocks:        103.161.132.0/24 maxlen: 24
                          103.161.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
                          rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
        Validity
            Not Before: Feb  2 21:18:30 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698114a6-5ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:65:ec:cc:14:31:86:c3:39:7e:23:a7:82:
                    4c:f8:47:52:4c:57:b3:b1:70:23:34:07:be:6f:38:
                    34:e5:f2:5d:91:a6:d2:bd:31:5a:d0:ca:01:64:e0:
                    ec:30:fd:eb:56:76:cb:78:75:03:76:4f:82:9e:53:
                    6b:41:75:b1:e3:6c:9c:7c:24:b1:76:c0:07:13:95:
                    7e:7a:17:42:3f:01:1a:a5:c2:4b:02:4b:2a:08:55:
                    09:a9:76:c4:ca:31:b2:df:db:1b:70:ea:05:b8:ee:
                    da:71:ed:f6:ba:ec:c2:e9:de:75:a5:e3:a9:ff:5d:
                    f7:cc:27:eb:b2:b1:cf:84:c9:3f:a8:a3:bf:07:6e:
                    60:39:6e:9a:58:38:86:80:70:43:31:33:e9:28:85:
                    42:26:b3:f2:68:7b:8d:ed:3a:13:9b:fa:2a:f7:ca:
                    14:b3:e4:fa:9c:d5:7a:28:83:81:64:09:32:4d:99:
                    c8:8c:90:aa:87:7c:3f:88:73:ac:b1:85:96:87:bf:
                    29:2e:74:e5:87:f3:86:42:37:c2:9e:e8:96:26:a4:
                    36:79:07:47:e4:81:d7:df:c4:07:75:ac:1f:76:57:
                    dc:4f:61:29:eb:9b:46:e6:95:3d:8b:eb:66:7e:33:
                    70:b7:77:8d:cb:aa:d9:a6:76:10:d9:20:ec:d9:79:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2F:02:D9:A6:7D:95:3F:DC:38:49:D1:CB:B4:EB:44:E3:70:56:68
            X509v3 Authority Key Identifier:
                keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:7b:e5:42:9a:07:33:89:58:ec:97:1f:82:9d:95:b7:8a:ce:
         ba:15:1a:c1:44:1c:ab:ae:6c:08:45:b2:93:c7:dc:8f:12:6c:
         51:bf:76:a1:ac:19:39:84:7f:ac:b2:2e:ca:9e:fb:66:13:bd:
         3a:81:95:fb:8e:6c:a8:e9:12:a0:12:fb:d8:db:9c:c4:5d:1a:
         cc:0d:ff:08:4d:a4:13:43:6e:80:64:f8:28:64:f0:5f:41:14:
         99:97:a0:60:1c:35:ae:7e:86:c2:c2:0b:6e:c9:bb:5f:a9:ed:
         91:68:89:ad:a4:eb:26:0f:4c:d8:2b:3a:a3:68:ec:3a:f5:f3:
         ab:53:67:c4:58:cf:e1:f8:40:ea:ec:8e:d3:8b:57:94:45:a6:
         22:27:6e:a6:35:01:09:2a:5e:04:e1:c5:b1:52:64:d4:7e:50:
         14:6d:02:91:e7:89:0a:eb:4f:50:3e:d3:76:33:17:c7:83:c7:
         75:fb:87:71:6a:fa:fc:c7:24:69:3e:f1:b9:4f:61:45:59:9f:
         38:17:80:5d:f8:61:63:4c:c9:9d:39:08:00:19:80:95:0e:4d:
         7d:9d:40:9b:02:70:5a:04:c8:08:93:27:f7:7d:46:10:53:16:
         d0:00:f4:25:79:62:90:53:9e:0b:21:0e:38:37:19:58:c9:f3:
         94:10:15:fb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0
QjQ2OThERDMwHhcNMjYwMjAyMjExODMwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxMTRhNi01Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjk1l7MwUMYbDOX4jp4JM+EdSTFezsXAjNAe+bzg05fJdkabSvTFa0MoBZODs
MP3rVnbLeHUDdk+CnlNrQXWx42ycfCSxdsAHE5V+ehdCPwEapcJLAksqCFUJqXbE
yjGy39sbcOoFuO7ace32uuzC6d51peOp/133zCfrsrHPhMk/qKO/B25gOW6aWDiG
gHBDMTPpKIVCJrPyaHuN7ToTm/oq98oUs+T6nNV6KIOBZAkyTZnIjJCqh3w/iHOs
sYWWh78pLnTlh/OGQjfCnuiWJqQ2eQdH5IHX38QHdawfdlfcT2Ep65tG5pU9i+tm
fjNwt3eNy6rZpnYQ2SDs2XkiNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBwvAtmm
fZU/3DhJ0cu060TjcFZoMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx
QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlBNkMvM0I4NDkzQjQ1MUE1MTFFQkI0QUYwNDBFQzRGOUFFMDIvMjJEODEzN0E1
MUE3MTFFQkFBQUI2NDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnoYQwDQYJKoZIhvcNAQELBQADggEBAEp75UKaBzOJWOyX
H4KdlbeKzroVGsFEHKuubAhFspPH3I8SbFG/dqGsGTmEf6yyLsqe+2YTvTqBlfuO
bKjpEqAS+9jbnMRdGswN/whNpBNDboBk+Chk8F9BFJmXoGAcNa5+hsLCC27Ju1+p
7ZFoia2k6yYPTNgrOqNo7Dr186tTZ8RYz+H4QOrsjtOLV5RFpiInbqY1AQkqXgTh
xbFSZNR+UBRtApHniQrrT1A+03YzF8eDx3X7h3Fq+vzHJGk+8blPYUVZnzgXgF34
YWNMyZ05CAAZgJUOTX2dQJsCcFoEyAiTJ/d9RhBTFtAA9CV5YpBTngshDjg3GVjJ
85QQFfs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:40:14 2026 by rpki-client