Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa
File:                     9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (raw, json)
Hash identifier:          92xsCLVa8arPNCsgQO3g6tVWdDdiC457i4nwdotF9k0=
Subject key identifier:   F1:12:E0:13:7B:36:35:CF:A5:3D:45:00:BF:E4:75:C1:15:4E:24:38
Certificate issuer:       /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial:       04CB
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa
Signing time:             Mon 26 Jan 2026 05:48:17 +0000
ROA not before:           Mon 26 Jan 2026 05:48:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135413
IP address blocks:        103.173.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
                          rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
        Validity
            Not Before: Jan 26 05:48:17 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69770021-9a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:84:68:31:19:71:6e:b2:5b:3e:9c:a3:8e:
                    50:7f:95:05:df:75:3b:22:63:e4:a0:7e:bb:b3:47:
                    97:20:26:ed:6e:16:e0:40:36:80:0d:11:82:64:4b:
                    1c:b9:a1:73:0b:1a:63:46:c8:47:ae:3b:e1:29:87:
                    1e:63:d9:80:0e:67:06:7a:2d:ff:f9:18:67:24:d9:
                    0c:54:64:d3:0f:58:c4:d4:29:b6:cc:4a:cf:45:41:
                    91:69:aa:7c:ad:ef:d1:8b:9d:07:4c:2a:d8:d2:0d:
                    aa:48:11:f4:35:26:d6:74:86:d9:5b:41:39:14:e8:
                    b4:11:35:c8:b1:9a:cd:d6:30:36:ee:fa:c7:37:04:
                    6b:75:fb:5b:dc:61:e3:28:89:72:fa:1f:ca:8b:e7:
                    b3:c6:16:4f:1c:39:b1:5f:9f:2f:2d:7e:be:75:f2:
                    21:f9:66:fc:c7:93:c9:19:e0:d6:7c:3a:7d:80:e5:
                    9c:9a:2d:a6:57:ed:0f:43:46:fe:82:5b:6c:c8:bb:
                    94:96:d9:21:c2:03:13:6f:51:f4:b1:40:bd:77:e7:
                    1f:d3:67:91:71:80:6d:97:92:21:e4:ab:98:6c:56:
                    f5:e8:ab:d2:ef:c4:73:c4:80:e1:f8:ec:27:4b:fd:
                    5a:9d:44:1c:3a:df:0c:23:ce:fd:e6:87:5e:8b:d9:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:12:E0:13:7B:36:35:CF:A5:3D:45:00:BF:E4:75:C1:15:4E:24:38
            X509v3 Authority Key Identifier:
                keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:56:7c:b8:16:73:e8:63:ba:de:f7:e2:a8:3e:03:6f:34:e3:
         17:72:4a:dc:ed:b2:63:f1:36:0c:f6:9d:35:9a:0d:3b:20:28:
         c7:e8:9f:ee:3e:a9:d2:c8:11:a4:08:04:ff:66:87:9f:f7:db:
         1c:30:a0:08:3c:26:26:37:35:d1:c7:b3:ab:1a:62:97:a7:66:
         e1:07:94:09:20:67:e3:58:ee:b3:74:d8:ee:05:55:87:80:cb:
         87:fb:4d:bb:3c:13:b1:c1:92:19:52:66:c5:fc:f4:d7:e7:bf:
         17:fb:97:68:ac:c1:c7:a9:2c:72:fe:4b:cb:db:d6:37:9d:54:
         f9:92:6a:bb:61:d4:da:85:50:47:4b:26:00:7d:31:73:a1:72:
         26:96:2b:d0:1c:50:d3:de:82:d0:b6:76:b1:d8:c5:f1:d9:54:
         67:dd:ee:ac:fe:7d:a6:02:01:b2:ca:35:0e:1e:b9:2f:b0:d1:
         b9:6a:51:ed:3d:8f:71:6e:41:f4:ed:d4:30:75:58:ef:cf:2a:
         da:45:01:6f:4f:08:79:7e:1e:98:6f:32:fc:5c:cf:35:f9:14:
         a0:a0:ec:67:bc:3c:b9:68:59:78:cb:72:3c:af:6a:e1:0d:89:
         64:56:c6:78:a8:93:84:36:3b:04:18:48:52:78:3c:66:8c:cf:
         6f:d8:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:58 2026 by rpki-client