Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/42B2A584790C11F0BFDABE73C4F9AE02.roa
File:                     42B2A584790C11F0BFDABE73C4F9AE02.roa (raw, json)
Hash identifier:          19ktDSsGJCBnx1vvZAT3eOQKuF6C2eRCTg3IjPMhs2w=
Subject key identifier:   5B:DD:73:87:58:2B:B8:E8:68:95:B4:4F:FB:23:D7:CA:6F:86:48:EF
Certificate issuer:       /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
Certificate serial:       72
Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/42B2A584790C11F0BFDABE73C4F9AE02.roa
Signing time:             Wed 18 Feb 2026 19:16:38 +0000
ROA not before:           Wed 18 Feb 2026 19:16:37 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140071
IP address blocks:        103.148.26.0/23 maxlen: 24
                          2001:df2:b980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl
                          rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF
        Validity
            Not Before: Feb 18 19:16:37 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69961015-30d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:7e:a9:50:20:ed:03:b2:5f:c2:84:f7:66:
                    b3:ce:46:a2:b7:0d:d8:9d:1a:fa:61:fd:4c:c0:c3:
                    99:fd:0a:a4:cd:da:5e:e6:df:11:1c:79:8d:91:de:
                    37:e7:5f:99:5d:5e:ea:56:ba:7d:11:2f:a3:ce:e6:
                    ca:63:96:0b:7f:73:aa:11:fe:78:13:b2:65:e2:5b:
                    80:2c:b0:2f:52:8a:ef:96:a8:32:1b:26:7b:f4:81:
                    a4:71:19:06:7d:09:7f:7d:fa:5b:af:a9:df:ee:34:
                    3d:1a:81:ab:07:ee:05:e3:06:bb:76:89:a9:e8:a8:
                    10:69:32:f2:93:86:0e:5a:4d:96:02:52:ea:bc:89:
                    f2:e0:06:c7:de:77:16:40:03:cc:ba:30:bc:8d:d1:
                    70:3c:c7:a1:49:4d:c9:31:4e:55:e9:59:5c:79:27:
                    65:65:ef:08:9c:60:0b:33:ce:5f:0e:cd:dc:b9:cb:
                    e2:8b:0f:f5:41:57:61:03:e4:48:96:58:5c:9f:98:
                    23:84:ca:ec:e1:cd:9c:6c:00:6b:f9:c3:95:92:4c:
                    ee:f4:8d:32:2c:88:74:3c:57:fb:f7:b2:ec:52:6a:
                    c2:d0:49:b5:f2:21:9d:5c:aa:2e:31:13:5b:bd:80:
                    0b:77:96:4a:18:46:9f:67:a7:ae:31:4b:87:c5:e5:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:73:87:58:2B:B8:E8:68:95:B4:4F:FB:23:D7:CA:6F:86:48:EF
            X509v3 Authority Key Identifier:
                keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/42B2A584790C11F0BFDABE73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.26.0/23
                IPv6:
                  2001:df2:b980::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:ba:30:b0:34:b5:7e:8d:73:aa:ae:32:b8:d5:53:db:62:57:
         82:f6:47:26:f4:9e:88:fd:9a:c3:10:f2:d5:c6:61:3f:e2:4d:
         fb:c7:c4:c6:0d:e5:d0:61:1d:e6:fb:9d:cd:5b:69:d4:57:0d:
         d0:85:42:7e:04:90:01:43:9a:e0:75:d4:11:59:a4:3d:84:63:
         89:6f:5a:e7:3d:0a:cb:bd:62:9c:0b:25:48:c3:ed:6d:d2:69:
         ac:72:2f:53:38:6e:2d:b8:59:52:44:bc:9f:33:ee:4a:53:fd:
         12:d5:91:a2:78:26:55:bd:39:bb:f9:ce:dd:84:1f:f2:42:79:
         92:07:8f:2c:50:3f:2d:4f:16:ea:f8:ae:e1:fa:be:e9:7c:2b:
         af:76:6b:e8:c5:17:0f:d3:c9:27:4c:84:15:f0:6e:c1:44:43:
         96:be:cc:57:10:ba:e2:8a:84:a5:71:23:e3:06:b3:29:b2:85:
         01:24:45:0a:c2:f8:39:ac:a3:55:28:e5:a0:fd:94:39:b0:ad:
         e1:ca:0f:8b:14:1e:69:fe:4b:73:dc:a9:e1:b2:31:b2:79:d5:
         00:de:06:ac:ce:2f:5a:09:a1:1b:64:4f:ab:4f:2b:27:c8:6e:
         8e:4e:ad:38:35:ae:7d:6f:04:57:10:37:b1:e8:93:5a:e0:d5:
         09:ce:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:12 2026 by rpki-client