Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/C124669A0CD811F1BF03794C353D8C67.roa
File:                     C124669A0CD811F1BF03794C353D8C67.roa (raw, json)
Hash identifier:          aIl83ybzKIn2ULcvRaf2tve8Bv4UhBX/fARZRSyiDG0=
Subject key identifier:   4B:FB:4A:74:08:1D:60:EC:95:47:85:91:B9:88:D2:B6:F6:11:DD:05
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       02D7
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/C124669A0CD811F1BF03794C353D8C67.roa
Signing time:             Wed 18 Feb 2026 14:47:32 +0000
ROA not before:           Wed 18 Feb 2026 14:47:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151352
IP address blocks:        103.1.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Feb 18 14:47:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6995d104-b10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:60:01:6a:2b:39:aa:5c:81:5c:27:69:b7:
                    97:e8:ae:43:45:5b:32:23:a2:a1:1c:cb:3f:73:a6:
                    bf:aa:ab:b8:20:92:d3:81:cb:97:cf:36:8d:39:29:
                    63:aa:a2:af:b7:2b:b1:f8:bf:6e:51:c0:ce:bc:b2:
                    39:f9:06:1f:14:4d:99:4d:56:21:ce:b7:c1:dd:ff:
                    3e:87:ef:a4:9f:06:1c:12:dd:54:9b:37:0c:bc:9b:
                    be:2d:7f:e3:ca:2e:f3:6f:6a:93:75:bb:49:f7:96:
                    e6:62:ed:5a:ad:99:2b:2f:f2:d7:95:fc:d4:54:1a:
                    7c:67:6b:99:f8:58:1f:cf:3a:79:64:ab:c8:2f:74:
                    de:70:8e:f3:80:4a:dc:4f:d0:ff:c4:48:69:98:2e:
                    f7:42:0e:4e:ee:c8:2b:7c:09:d8:73:61:d6:e4:42:
                    5e:18:07:12:14:2f:81:9c:73:d6:cf:f9:a8:40:10:
                    2a:81:e0:4e:4c:52:6d:07:54:f1:c1:c2:18:13:63:
                    47:10:ee:ae:47:4f:c0:18:2f:d7:2a:2c:c3:ff:67:
                    b9:6c:16:de:15:c1:00:e8:c5:4b:38:0d:80:95:db:
                    2b:25:d3:40:bd:fa:e7:8d:99:3f:ba:17:de:66:e9:
                    02:dc:fb:25:ee:af:ee:3d:c9:9a:28:03:61:60:82:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FB:4A:74:08:1D:60:EC:95:47:85:91:B9:88:D2:B6:F6:11:DD:05
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/C124669A0CD811F1BF03794C353D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:89:d7:50:5a:7e:ec:a5:88:f7:b9:58:33:95:21:71:11:74:
         dc:4e:d1:4e:c2:6d:cf:40:b5:8c:cf:51:f2:b7:aa:bf:b1:d5:
         c6:1b:16:32:cf:21:56:8f:75:ac:cf:e4:6e:03:90:34:15:32:
         3a:89:7d:6a:77:8f:17:9e:2b:47:b8:8d:23:30:e6:af:64:39:
         9b:a2:54:05:cf:7b:cf:89:36:d9:79:f9:7a:fb:43:73:5b:cc:
         65:a3:cf:91:58:00:11:91:8e:81:42:9e:e1:b6:d2:a7:db:18:
         8d:56:08:52:fa:00:3d:f4:57:61:75:ba:c3:19:55:de:f6:ed:
         73:78:e6:21:63:db:5f:c6:28:83:a6:2b:80:2d:a5:29:a0:79:
         e7:97:57:ce:23:28:dc:a8:4d:4c:bd:7a:76:a2:87:a8:3c:41:
         78:27:59:20:fa:84:f5:7c:9b:a7:99:ef:6d:6e:6d:bd:81:09:
         84:91:83:d2:d8:a2:f1:e7:0b:fa:c6:1b:9d:a0:cb:46:f6:7c:
         71:9d:c0:81:fb:6a:7e:9b:86:1b:3e:04:c9:a0:d6:27:fb:8e:
         8a:09:96:db:9f:0d:94:d5:78:09:fd:3c:b3:91:b9:3d:63:08:
         19:22:20:65:83:35:a4:7f:14:4e:09:51:37:97:b3:c3:6b:3e:
         a6:88:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:50 2026 by rpki-client