Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/EB8C9B546EE911ED8F07B022C4F9AE02.roa
File:                     EB8C9B546EE911ED8F07B022C4F9AE02.roa (raw, json)
Hash identifier:          SPhefyMCy54NrJBBaZQ3gOJXpce+jtxSLdt2uoVKWJw=
Subject key identifier:   AD:00:3C:7C:52:A7:82:F4:7B:99:A6:7D:00:07:9F:2D:C0:F9:B9:E7
Certificate issuer:       /CN=A91736BD/serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
Certificate serial:       0257
Authority key identifier: 53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/EB8C9B546EE911ED8F07B022C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 01:21:55 +0000
ROA not before:           Sat 31 Jan 2026 01:21:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     63919
IP address blocks:        103.44.24.0/24 maxlen: 24
                          103.44.25.0/24 maxlen: 24
                          103.67.177.0/24 maxlen: 24
                          103.204.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl
                          rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736BD, serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2
        Validity
            Not Before: Jan 31 01:21:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697d5933-f87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:79:5a:10:dc:71:7b:a3:47:36:73:2e:e7:
                    ad:12:ba:4d:c7:50:d8:63:3d:78:1f:2b:42:e9:7f:
                    23:95:3e:bb:e2:3e:2b:5c:54:9d:e4:27:a6:da:02:
                    6d:1b:67:32:6c:e1:3f:34:d7:94:fb:70:34:cc:6c:
                    46:04:69:fb:35:02:a8:d5:4f:35:41:f5:26:e6:46:
                    0f:9a:93:a1:04:91:22:95:2e:50:9b:ef:c5:3b:b7:
                    f5:7b:4c:29:dc:bd:9c:6d:ce:ff:54:81:1f:06:57:
                    26:df:42:5d:ac:70:6f:18:f5:20:53:53:1f:61:f1:
                    46:79:76:9a:cf:e2:1f:54:f7:e7:55:5d:e8:0b:f6:
                    f9:4c:59:d5:a9:ca:6b:df:c6:b8:a1:69:7d:d0:8d:
                    eb:8c:ee:df:f5:77:94:73:04:eb:1f:64:ac:ae:39:
                    51:12:9e:02:9f:36:28:34:79:ef:7c:25:56:cb:e0:
                    cf:44:8f:66:47:4c:b9:64:33:a2:dc:bb:28:66:fd:
                    f7:04:4e:34:8c:c4:a1:3a:4a:77:21:c3:f4:fd:3d:
                    4d:c4:07:58:77:5c:1d:40:47:e5:55:bf:46:0f:c1:
                    52:11:a8:af:75:88:49:e6:b3:e6:e3:fd:b4:fc:6d:
                    66:b0:8d:ca:02:15:03:05:78:87:3e:dc:15:82:aa:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:00:3C:7C:52:A7:82:F4:7B:99:A6:7D:00:07:9F:2D:C0:F9:B9:E7
            X509v3 Authority Key Identifier:
                keyid:53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/EB8C9B546EE911ED8F07B022C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.24.0/23
                  103.67.177.0/24
                  103.204.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:62:ba:b7:24:dc:40:56:93:1b:34:90:6b:4e:de:73:e2:ad:
         49:6b:67:bf:38:fe:02:b4:bd:2e:c6:c3:1c:cf:ac:a9:de:de:
         18:a0:4c:8a:1a:d9:9a:2f:34:e3:bf:ae:95:f3:cb:dc:ff:f1:
         37:9c:b4:61:1c:5a:be:cc:8c:dd:b3:ad:67:c0:11:af:8d:85:
         66:88:ee:29:4e:6b:19:a7:d6:e4:58:a8:ef:09:99:5c:a7:35:
         82:d9:41:8e:9c:cb:ba:47:61:e2:2d:90:71:d3:12:f7:a9:54:
         9b:26:5e:dc:b8:24:a6:23:d6:3f:b9:16:5f:8d:9b:1a:ab:3a:
         54:75:39:17:ea:b2:ad:ef:05:3e:93:16:32:c8:23:94:7d:5f:
         ff:2a:11:f0:0e:fa:c5:21:c9:7e:84:81:99:3f:76:b7:60:d7:
         62:69:7e:91:5c:3e:b3:ba:e2:22:26:b6:b3:33:b6:c0:ef:f0:
         5f:81:45:6f:55:9e:91:fe:a6:1c:6d:a4:a3:2f:18:bd:0d:78:
         09:97:6f:b9:93:1f:e9:aa:fa:76:d1:1a:3e:e1:8c:8e:f5:e5:
         d8:d4:ab:c8:36:e2:ec:2a:30:a6:5a:69:ed:a8:b2:bf:c8:15:
         ee:7e:0a:6a:23:51:e0:7a:31:77:39:c8:e8:05:51:9b:11:c3:
         dc:88:ab:d4
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NzM2QkQxMTAvBgNVBAUTKDUzRTJFMTM0NTI0NTdERjIxRUYyNUNCQTNCMjYxMEQw
MTJBOTA2RDIwHhcNMjYwMTMxMDEyMTU1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkNTkzMy1mODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjBF5WhDccXujRzZzLuetErpNx1DYYz14HytC6X8jlT674j4rXFSd5Cem2gJt
G2cybOE/NNeU+3A0zGxGBGn7NQKo1U81QfUm5kYPmpOhBJEilS5Qm+/FO7f1e0wp
3L2cbc7/VIEfBlcm30JdrHBvGPUgU1MfYfFGeXaaz+IfVPfnVV3oC/b5TFnVqcpr
38a4oWl90I3rjO7f9XeUcwTrH2SsrjlREp4CnzYoNHnvfCVWy+DPRI9mR0y5ZDOi
3LsoZv33BE40jMShOkp3IcP0/T1NxAdYd1wdQEflVb9GD8FSEaivdYhJ5rPm4/20
/G1msI3KAhUDBXiHPtwVgqpPNwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFK0APHxS
p4L0e5mmfQAHny3A+bnnMB8GA1UdIwQYMBaAFFPi4TRSRX3yHvJcujsmENASqQbS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzZCRC8yMkM2MjFBODZF
RTUxMUVEQjlDNDUzODVDNEY5QUUwMi9VLUxoTkZKRmZmSWU4bHk2T3lZUTBCS3BC
dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UtTGhORkpGZmZJZThseTZPeVlRMEJLcEJ0SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzM2QkQvMjJDNjIxQTg2RUU1MTFFREI5QzQ1Mzg1QzRGOUFFMDIvRUI4QzlCNTQ2
RUU5MTFFRDhGMDdCMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAFnLBgDBABnQ7EDBABnzNswDQYJKoZIhvcNAQELBQADggEB
AEliurck3EBWkxs0kGtO3nPirUlrZ784/gK0vS7GwxzPrKne3higTIoa2ZovNOO/
rpXzy9z/8TectGEcWr7MjN2zrWfAEa+NhWaI7ilOaxmn1uRYqO8JmVynNYLZQY6c
y7pHYeItkHHTEvepVJsmXty4JKYj1j+5Fl+NmxqrOlR1ORfqsq3vBT6TFjLII5R9
X/8qEfAO+sUhyX6EgZk/drdg12JpfpFcPrO64iImtrMztsDv8F+BRW9VnpH+phxt
pKMvGL0NeAmXb7mTH+mq+nbRGj7hjI715djUq8g24uwqMKZaae2osr/IFe5+Cmoj
UeB6MXc5yOgFUZsRw9yIq9Q=
-----END CERTIFICATE-----
Generated at Fri Feb 20 03:49:55 2026 by rpki-client