Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/2F9BA582021311F19CF662E3456F56BC.roa
File:                     2F9BA582021311F19CF662E3456F56BC.roa (raw, json)
Hash identifier:          DjpS3lDiwWpw86XORzsyG2q1lCE4vaHh5gGABCyUSuU=
Subject key identifier:   3E:94:5B:E7:9A:7D:48:4F:49:EE:C3:A1:60:23:0C:E1:FD:6D:BD:E7
Certificate issuer:       /CN=A9154C6E/serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
Certificate serial:       02
Authority key identifier: 48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/2F9BA582021311F19CF662E3456F56BC.roa
Signing time:             Wed 04 Feb 2026 21:48:05 +0000
ROA not before:           Wed 04 Feb 2026 21:48:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        103.242.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154C6E, serialNumber=48BDD533593B207FB7229F18521A258F23294FF6
        Validity
            Not Before: Feb  4 21:48:05 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6983be95-56d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:ba:02:84:71:ad:7e:53:cf:45:4d:4a:64:
                    a3:78:8a:e3:f3:b7:b6:be:c0:6b:9e:65:f7:41:c5:
                    13:02:00:44:98:98:2a:7a:0b:e0:4c:4f:2e:25:08:
                    ef:3c:05:f2:90:90:69:43:6d:9e:57:48:0a:ac:64:
                    89:f3:bb:e8:c1:f2:56:60:b7:33:3f:ef:a3:b4:fd:
                    93:49:48:d6:a7:61:eb:6b:c8:bf:a2:81:bd:37:64:
                    be:bf:66:bd:eb:99:74:95:53:35:71:34:01:fd:e9:
                    64:b4:89:b7:ce:37:7a:65:41:3c:31:d3:c3:c4:02:
                    d5:74:51:b7:43:0b:c9:f4:63:5a:98:01:31:89:e6:
                    43:44:b7:82:41:ae:3d:b0:a9:21:31:eb:e3:1b:dd:
                    d1:af:d7:33:6f:fb:b1:a1:78:e0:bd:c6:bc:e0:0e:
                    74:78:da:5e:9b:08:5b:7c:3e:41:51:e3:37:15:68:
                    f4:fb:55:46:23:55:f6:0e:18:8b:41:e1:fa:2a:6c:
                    9b:cb:af:c6:b8:f1:cc:0f:fd:0e:1f:77:1f:fb:4a:
                    ec:52:bd:69:3a:1f:dc:0f:49:6a:58:ad:e8:01:ed:
                    f2:c4:c1:76:41:c5:66:92:d8:f0:7d:b3:3d:14:02:
                    a4:b2:c5:0d:74:fb:2f:b1:bd:f9:58:8a:69:6d:43:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:94:5B:E7:9A:7D:48:4F:49:EE:C3:A1:60:23:0C:E1:FD:6D:BD:E7
            X509v3 Authority Key Identifier:
                keyid:48:BD:D5:33:59:3B:20:7F:B7:22:9F:18:52:1A:25:8F:23:29:4F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/SL3VM1k7IH-3Ip8YUholjyMpT_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL3VM1k7IH-3Ip8YUholjyMpT_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154C6E/05E46572021211F190B827BA456F56BC/2F9BA582021311F19CF662E3456F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:0f:47:2f:d7:ed:16:11:1e:ad:80:3c:06:26:61:b3:98:c9:
         9d:fc:27:a6:e9:19:fc:72:7f:a2:a8:7c:9e:06:42:46:cc:03:
         a9:36:37:94:f3:b1:56:69:e2:8b:2f:63:f0:08:9f:d5:c3:d0:
         de:b7:68:c5:08:5f:29:16:17:d2:b6:1a:b6:68:43:16:a8:70:
         ba:ec:a2:56:4a:10:a2:2b:6a:1f:ef:ca:ac:d6:83:34:d8:2a:
         2e:fb:bf:3e:e5:1b:2d:23:a5:f2:03:3e:66:f7:32:5f:1c:18:
         bc:a3:cf:cb:59:88:cf:dc:63:64:88:d0:5e:29:75:c5:b7:20:
         46:a4:49:e5:d1:df:12:c9:64:ae:11:10:64:fd:08:87:10:18:
         e3:10:cd:79:ba:5c:f2:23:67:c9:ad:38:0a:db:77:69:6b:88:
         87:f0:af:0a:9f:3f:7c:32:f1:05:fa:a3:1c:b8:7b:e0:28:92:
         6c:68:85:6d:03:e5:90:e8:62:1d:11:6e:e9:e6:53:59:e9:a6:
         40:b6:6a:8e:9b:8f:7a:a0:30:ee:28:47:9f:a9:72:9e:07:c8:
         d7:eb:11:d1:b1:f6:5d:02:18:f7:15:ac:cb:51:99:f8:48:fd:
         ef:b5:6a:58:c6:fe:a3:02:c8:a8:7d:7d:9f:c1:4e:58:8e:3a:
         61:a0:f1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:39 2026 by rpki-client