Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/0A03942001B311F1BDE34C726D6F56BC.roa
File:                     0A03942001B311F1BDE34C726D6F56BC.roa (raw, json)
Hash identifier:          vnWU1mWb+i0E/bntkMY5zIuJ2E9zqlEO5QP5NKRbGKE=
Subject key identifier:   D6:16:4C:8D:F2:69:8E:02:1C:8A:5B:D8:D9:1E:97:3B:DA:0A:CF:FB
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       0254
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/0A03942001B311F1BDE34C726D6F56BC.roa
Signing time:             Wed 04 Feb 2026 10:19:50 +0000
ROA not before:           Wed 04 Feb 2026 10:19:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        203.25.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Feb  4 10:19:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69831d46-6a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:80:91:9d:a5:33:96:c0:e3:d2:f4:95:f3:f5:
                    78:c2:12:1f:84:79:56:e3:7f:96:80:36:e1:fe:96:
                    3a:f2:05:f1:df:8d:05:1a:54:d2:83:78:7d:cc:d3:
                    d0:1e:42:10:7e:b8:ac:25:af:ff:da:5e:4b:be:8f:
                    f4:ab:df:4f:95:a2:20:f7:82:ea:e1:74:ef:96:37:
                    36:99:ed:fe:c3:a9:c5:37:52:b3:b3:e7:26:47:98:
                    37:82:7e:dc:9b:6f:36:18:55:54:fd:f8:0d:17:24:
                    73:70:a7:c9:0d:39:ca:74:fd:c2:24:94:1e:5a:5f:
                    b0:34:ec:1c:3f:0c:b1:37:99:5f:5d:88:61:33:82:
                    54:5e:02:cb:a9:99:0a:74:75:85:f9:58:6a:bc:7c:
                    c9:8f:ec:29:10:05:9f:0f:b0:e2:c0:0f:2d:f3:ed:
                    ef:7a:64:81:a0:4d:8b:76:50:7f:31:9d:1e:a6:1b:
                    24:85:72:4f:f2:8e:53:91:4c:6f:ce:9e:95:17:2e:
                    7a:53:db:ed:96:73:01:fc:00:73:94:8b:cb:c0:c5:
                    e7:cf:9d:d0:82:72:49:46:65:b8:bc:2b:7c:29:71:
                    20:7d:2d:3a:72:c4:78:19:f3:cc:4e:e1:13:c4:16:
                    88:a3:79:51:6c:9a:04:ac:c4:1a:87:35:37:21:a5:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:4C:8D:F2:69:8E:02:1C:8A:5B:D8:D9:1E:97:3B:DA:0A:CF:FB
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/0A03942001B311F1BDE34C726D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:89:80:0e:9d:b8:e1:66:c3:c8:eb:b2:24:93:f6:d3:fd:
         ff:be:28:5c:1b:02:2f:da:5b:6f:cb:7e:6d:46:af:a2:8d:95:
         69:4a:a1:a8:7d:95:b1:15:1c:7b:b7:03:4c:76:32:3f:6d:df:
         57:3d:22:f1:fe:3d:94:cd:48:38:0c:53:a3:b0:6d:64:d4:09:
         66:b3:e4:cc:f6:2d:68:ec:1f:12:ab:6b:9d:17:5d:86:80:18:
         45:c0:51:9a:40:23:71:77:82:84:d8:d6:92:45:e7:b3:e0:d0:
         ef:f4:6b:fd:0d:9f:7f:76:92:ff:9e:90:91:f1:25:b3:2c:ef:
         52:d4:5a:8a:7a:9a:bf:4e:9e:0d:e6:96:d5:50:6b:77:40:aa:
         5e:f5:67:98:9e:d2:b4:96:2d:10:6c:40:4e:b9:03:05:40:21:
         5d:40:38:5b:02:1d:b6:de:b6:91:62:12:dd:a1:3a:93:a9:91:
         c8:74:2c:3b:93:54:da:48:84:e9:25:bb:a0:ff:16:f7:94:30:
         91:10:c6:8f:55:4c:1b:da:f8:e2:b9:68:d1:fa:dc:22:d1:ab:
         ab:2b:93:b0:d7:39:18:ea:e2:09:0d:d9:da:7d:88:f3:34:9b:
         24:8c:a8:ae:20:5a:a0:8f:1e:4c:60:e1:2a:9b:fc:a3:91:0b:
         fe:e3:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:14 2026 by rpki-client