Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/B88A958007B611F1BF9DF7EA143D8C67.roa
File:                     B88A958007B611F1BF9DF7EA143D8C67.roa (raw, json)
Hash identifier:          MypZozje9jZXB1eaQ0+B7Oks+wJWUOenzt3vK3jLfu8=
Subject key identifier:   2C:EE:80:B7:7D:AE:E8:B0:73:31:85:75:39:CC:4C:61:6F:BB:0E:5F
Certificate issuer:       /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial:       014D
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/B88A958007B611F1BF9DF7EA143D8C67.roa
Signing time:             Thu 12 Feb 2026 02:01:19 +0000
ROA not before:           Thu 12 Feb 2026 02:01:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38473
IP address blocks:        202.20.102.0/24 maxlen: 24
                          202.20.103.0/24 maxlen: 24
                          202.20.104.0/24 maxlen: 24
                          2001:df0:77::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
        Validity
            Not Before: Feb 12 02:01:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=698d346e-2a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:59:a7:86:10:e8:54:84:c0:43:36:46:a6:
                    d5:8a:9b:91:f0:ae:8d:c9:dd:c5:85:fc:be:72:b5:
                    e9:11:b6:07:ba:eb:87:7a:d4:2d:bd:8e:c5:f6:6c:
                    61:2d:fb:25:b5:41:cc:b5:9a:97:88:8d:5d:4c:8d:
                    3b:87:6f:8c:f1:30:8e:89:a7:22:c5:78:99:20:f7:
                    09:0b:5a:8b:b4:39:58:59:b7:1a:0f:51:80:fa:8b:
                    b9:0c:65:1e:b8:36:9e:5b:ee:fa:be:ac:3a:45:d9:
                    e0:f0:1b:e2:b7:fd:f1:52:ee:16:61:38:c8:11:71:
                    d0:cd:62:da:84:63:f3:4f:3f:ff:7b:d4:0d:06:33:
                    f2:9f:1e:09:78:95:08:a6:71:92:8a:db:4b:12:cd:
                    32:08:fd:fd:60:d1:b9:f2:d4:81:9e:00:3b:79:cf:
                    7b:3b:07:ee:23:c8:51:ad:95:9f:81:09:08:3b:4b:
                    ba:20:e7:51:45:99:7c:6a:9a:f2:c6:3e:70:f8:c4:
                    cf:62:e0:50:e7:e6:55:51:e4:b8:12:de:2a:fa:30:
                    39:20:56:2c:86:5f:57:79:df:29:18:bb:22:64:15:
                    32:3a:bb:11:19:a3:ac:09:76:df:94:82:5b:13:f7:
                    d1:e3:45:5a:c8:77:90:0f:45:3d:8f:5b:ba:a9:d3:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:80:B7:7D:AE:E8:B0:73:31:85:75:39:CC:4C:61:6F:BB:0E:5F
            X509v3 Authority Key Identifier:
                keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/B88A958007B611F1BF9DF7EA143D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.20.102.0-202.20.104.255
                IPv6:
                  2001:df0:77::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:75:b3:af:19:9d:f5:80:a8:90:63:42:a2:03:c9:de:bd:
         5b:a9:e2:60:d2:ac:77:6f:40:d6:45:51:5b:9f:b9:31:4b:fe:
         e7:08:d7:b5:6b:cc:cc:07:b1:9b:03:c7:f3:f3:ad:2e:b7:34:
         e9:18:56:ff:49:98:3f:15:9f:50:eb:2c:d4:f7:c8:84:7f:14:
         75:c0:de:eb:02:fa:c1:1d:5c:5c:64:4f:3b:aa:42:8a:8e:8c:
         ee:76:0c:57:18:68:54:87:50:66:e6:ce:c1:98:c7:e7:62:7b:
         38:f8:cc:bc:15:b5:07:03:cb:3d:63:3a:83:9b:f1:6f:50:b7:
         db:c2:5d:b1:97:aa:3b:73:a2:f3:67:5b:dc:a9:d5:99:76:c8:
         4f:28:1c:e0:29:a4:7e:19:11:44:3f:82:cf:de:5b:11:90:b0:
         cb:95:62:40:17:36:ef:86:8d:ae:79:8d:91:1d:bd:ae:05:e1:
         bb:48:bd:9b:5b:9a:f4:a6:f7:3d:b6:77:a6:7a:12:8a:60:2b:
         fe:46:e2:ec:c1:ea:f3:df:b5:46:5f:58:6c:62:bd:aa:a3:d5:
         c5:98:91:4a:af:4d:7f:e1:b8:1b:e3:cc:58:45:e2:43:45:bc:
         2d:43:64:c4:4c:02:b1:05:2e:b1:50:4c:13:22:05:12:39:d5:
         f7:b3:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:54 2026 by rpki-client