Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
File:                     A74C3132F49211ED8659177BC4F9AE02.roa (raw, json)
Hash identifier:          e7TeYOg8++9wL7xt5kGsnTiSZJy9DdcUS9fLXApknCk=
Subject key identifier:   AE:B6:BF:3F:F7:33:07:94:30:6E:2B:05:2F:D3:8E:E0:60:02:AC:0B
Certificate issuer:       /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
Certificate serial:       020B
Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 02:23:09 +0000
ROA not before:           Tue 03 Feb 2026 02:23:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     59349
IP address blocks:        103.234.168.0/22 maxlen: 24
                          2001:df6:b800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
        Validity
            Not Before: Feb  3 02:23:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69815c0d-37e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:5d:75:ce:bf:46:21:ac:8a:a0:ca:94:1c:
                    11:7e:a5:c7:89:5c:6e:e1:53:01:2f:99:4e:2a:4c:
                    15:4f:33:b8:68:42:7b:2a:e3:4c:59:80:a0:9b:17:
                    2d:08:fb:17:43:b6:b5:f3:b4:f9:ef:f3:98:18:37:
                    60:7c:78:4e:2b:cd:32:82:01:02:35:51:f8:d5:4f:
                    20:1d:4f:f9:a6:a7:bf:d4:b6:bb:6f:62:fc:ba:13:
                    4f:28:f5:34:27:d2:e7:b4:c8:62:91:f0:6e:6d:f4:
                    72:7f:35:f9:20:99:a8:4e:22:78:34:57:57:e4:4d:
                    c8:9e:41:9c:ee:35:6b:35:4f:5c:97:9a:2a:9a:37:
                    ed:0e:73:58:c3:6d:69:8c:d4:92:7e:ac:ff:68:88:
                    5d:69:dc:e7:6e:23:01:ad:2c:3f:64:62:3d:48:f1:
                    01:d0:08:27:ad:c8:0c:39:92:f5:5e:f7:d1:0f:c7:
                    df:17:6f:c3:55:99:8e:a9:d2:7c:57:ec:4a:9b:8a:
                    19:3d:dc:0d:15:91:ff:db:29:41:7d:e5:fb:09:c4:
                    5d:9d:8d:10:c1:2e:e3:e1:41:fd:19:80:7e:5c:85:
                    9c:ff:4d:86:1e:b9:3c:b5:01:44:df:59:1e:a8:28:
                    cf:e9:a5:01:cc:0b:b1:82:f0:f0:29:73:ec:de:9d:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B6:BF:3F:F7:33:07:94:30:6E:2B:05:2F:D3:8E:E0:60:02:AC:0B
            X509v3 Authority Key Identifier:
                keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.168.0/22
                IPv6:
                  2001:df6:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:5f:b7:f9:10:fa:65:a1:13:7e:5e:02:af:92:c4:04:76:aa:
         bc:e4:61:b2:82:b3:d3:bd:b5:75:04:d1:72:bf:10:93:c8:d1:
         bc:dc:52:6b:d1:05:05:ee:6e:95:fd:48:fa:16:06:69:25:c6:
         1f:95:9a:6d:b1:15:da:3d:66:91:61:18:24:47:fc:64:86:f5:
         cb:e5:f4:06:31:00:bd:9d:67:4d:fe:70:75:ad:30:64:a2:ee:
         d5:2a:ab:0c:cf:16:eb:1a:a5:92:30:26:43:17:26:71:dc:cb:
         d6:50:f8:8b:8c:ae:f1:0f:88:2c:17:ac:c8:13:a4:ec:1d:4f:
         73:42:5c:1d:c1:d4:e3:32:f9:3e:4d:8d:8a:56:12:ed:3e:34:
         36:1f:ca:e7:37:dc:58:62:dc:cf:18:06:0b:39:fc:29:8f:c2:
         59:17:70:e3:2d:77:f1:32:89:f3:6d:82:fb:c7:a5:7f:8f:3d:
         5c:5c:c8:e8:0b:78:ce:14:7a:08:10:07:ab:60:fd:d2:03:94:
         ec:cc:69:ae:7a:a9:82:68:6f:b3:65:48:68:e4:88:35:da:a5:
         5f:bf:07:13:aa:45:10:97:03:03:bb:e2:db:fe:b0:ed:73:cc:
         e4:d1:a0:4a:06:37:62:e9:35:48:0f:8d:bf:01:c5:12:1a:97:
         d1:59:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:56 2026 by rpki-client