Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa
File:                     8F3586B40DF511F18DE23E02043D8C67.roa (raw, json)
Hash identifier:          UaQPKROKo5CR0WKZ9vKVB7kEZfJR6kJK1U+EFr3ZkQY=
Subject key identifier:   40:C4:78:BB:E2:4F:A2:B1:DB:52:A9:B0:9E:AB:95:DB:67:BD:51:16
Certificate issuer:       /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
Certificate serial:       68
Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa
Signing time:             Fri 20 Feb 2026 00:48:50 +0000
ROA not before:           Fri 20 Feb 2026 00:48:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.111.80.0/24 maxlen: 24
                          103.111.81.0/24 maxlen: 24
                          103.111.82.0/24 maxlen: 24
                          103.111.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 22:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E
        Validity
            Not Before: Feb 20 00:48:50 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6997af72-7408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:bb:a4:93:ee:16:6a:c7:7f:a0:be:42:eb:
                    17:59:0d:59:7a:ab:7c:4c:67:bb:9c:71:58:c0:71:
                    34:63:d5:0d:a7:e7:06:97:b8:d2:ed:d3:39:45:79:
                    97:26:e8:57:4b:15:3b:28:3f:39:2e:a9:f2:dc:97:
                    4f:d8:78:f3:8a:a9:d8:d9:68:98:c3:de:e9:ed:4a:
                    fd:0b:9e:f3:41:a8:9f:7c:b0:55:91:89:27:72:b8:
                    14:84:82:84:99:ad:53:71:81:7a:5f:54:a2:f6:4c:
                    e9:83:98:9e:fb:7c:82:4b:c1:18:ef:ef:ce:00:63:
                    8b:50:2c:b6:b7:88:63:d6:e9:5c:ce:f4:55:62:78:
                    ad:65:86:7b:73:e2:e9:8f:d6:5a:b2:7f:30:fd:22:
                    f9:0c:93:6f:35:88:07:4a:b5:cb:0d:af:2e:0e:95:
                    4d:12:a3:6d:70:31:4f:89:ed:2c:1b:78:31:a2:44:
                    a9:26:27:4c:95:e4:fd:31:3e:d6:28:cb:e6:7f:77:
                    15:d0:2b:25:b5:61:3b:db:24:00:9f:a5:06:8e:85:
                    76:1e:9b:c0:75:00:d5:c0:74:1b:33:cf:c8:32:cc:
                    32:e3:8c:62:ac:67:d7:c9:d3:28:71:de:72:8a:cb:
                    8e:9a:46:e5:6e:1d:95:d9:b1:33:9e:4d:c7:20:5d:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C4:78:BB:E2:4F:A2:B1:DB:52:A9:B0:9E:AB:95:DB:67:BD:51:16
            X509v3 Authority Key Identifier:
                keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:2e:9e:f2:be:dd:4a:35:bb:66:23:c7:96:56:0f:71:f0:ad:
         1a:fe:44:71:3e:90:1e:d8:fc:34:dd:92:92:e7:34:ab:a9:85:
         dc:14:82:92:0c:19:51:59:af:65:f9:67:cc:19:b9:eb:53:87:
         da:8b:36:af:9b:59:f0:d8:a2:71:29:47:f7:60:22:aa:9c:89:
         9b:9f:ed:35:ab:24:74:89:72:70:9b:f1:6a:c0:9e:59:c6:e2:
         cf:ce:c0:98:7f:c7:e1:9d:b7:89:06:a4:52:01:85:21:01:3e:
         25:4e:13:7b:03:8f:c6:0c:f3:e3:3f:fb:99:f2:4b:91:56:60:
         e4:ab:0e:c5:94:36:c7:92:e2:57:07:3c:85:df:fd:a4:f4:2a:
         ca:e6:04:75:b8:81:ef:e8:9d:53:4f:05:6e:03:fa:bb:a0:b0:
         83:3f:3c:90:b5:be:17:90:85:58:02:82:d5:ee:79:a6:45:26:
         c4:ac:dd:93:ef:45:56:93:a0:49:fa:4b:d9:ba:89:0e:7a:99:
         e6:e5:0c:2e:a3:29:6a:ab:09:31:24:63:b9:43:18:5c:83:f5:
         26:00:d8:87:36:6c:f7:4d:23:f6:57:6b:7f:b6:e7:86:86:aa:
         53:bc:b8:e0:25:24:96:c6:1e:d1:b0:61:64:4d:bb:b6:6d:96:
         02:41:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:42:02 2026 by rpki-client