Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
File:                     E562A356702F11EF9806F81FC4F9AE02.roa (raw, json)
Hash identifier:          MadLqrwyRuuTZPs7JjTNOurrggAeH+v0F8SE1H9gv50=
Subject key identifier:   C5:8B:CD:EB:3F:E7:3E:19:11:EB:4D:BE:1C:3D:87:70:43:01:09:25
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       06D6
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
Signing time:             Thu 12 Feb 2026 22:18:54 +0000
ROA not before:           Thu 12 Feb 2026 22:18:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141159
IP address blocks:        103.146.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
                          rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
        Validity
            Not Before: Feb 12 22:18:54 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698e51ce-af50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:a7:36:16:f2:90:53:5b:42:cf:d7:3a:8c:
                    a7:f0:53:bb:fe:a5:77:01:0d:56:c5:83:b4:e7:29:
                    ec:d1:1f:23:a2:c2:df:a0:92:11:23:07:35:80:3b:
                    56:62:fd:02:ea:3f:9a:de:d5:8d:2e:4d:94:49:e7:
                    77:f8:ce:1e:8b:c6:d6:bb:66:e3:61:19:4b:56:c6:
                    db:c1:56:dd:7a:fa:ec:6a:ec:38:f3:d7:65:54:ac:
                    f7:f6:04:97:f2:4a:2a:b8:e5:97:ba:89:9a:81:98:
                    41:47:75:e4:1a:aa:2b:ef:b0:d2:ff:ef:61:8e:2e:
                    3e:54:29:1d:a6:22:b3:89:9e:de:95:df:8a:ee:fa:
                    c1:89:56:7e:1b:8c:2a:11:12:21:c3:34:6d:e8:99:
                    68:61:8c:bc:c0:03:ab:32:60:5a:fb:83:7a:3b:26:
                    b8:4a:4c:4b:44:a7:c6:32:4b:b0:c7:bf:58:69:00:
                    22:7b:d8:fe:e7:fe:93:fe:4a:a3:e5:25:95:e5:dc:
                    52:87:63:21:a5:2a:67:fc:9c:38:3b:f5:d0:13:e5:
                    e6:14:9f:a1:0e:d5:af:6d:80:a3:08:61:06:0e:12:
                    c6:c1:e3:85:67:b9:04:1e:65:88:69:3e:d2:9d:55:
                    8f:45:10:ff:a3:13:71:5a:01:81:7a:f4:57:18:31:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:CD:EB:3F:E7:3E:19:11:EB:4D:BE:1C:3D:87:70:43:01:09:25
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:b7:d2:a2:6c:87:96:64:11:43:87:81:c4:ad:76:6d:68:
         a2:6b:6f:84:68:5c:57:f4:1b:c3:ea:ed:0c:b5:b6:4e:1b:08:
         9f:35:aa:6b:20:f7:60:3c:01:ae:91:09:79:07:7d:ac:ee:94:
         19:7f:d4:60:50:cd:b0:85:47:db:0e:a4:71:94:1b:72:b1:9c:
         44:4e:d7:f3:d1:4c:3c:b3:c9:ed:36:13:02:d4:91:0c:bc:b4:
         f2:90:5b:55:4e:c7:47:8e:69:f3:ec:93:5e:7a:7b:bc:a8:50:
         b9:4c:a3:06:9e:60:22:7f:50:ac:dc:6d:f1:27:56:db:d8:19:
         e5:cc:66:44:0f:b5:07:fa:05:57:cc:a3:d3:7b:ac:c3:14:ae:
         6d:b1:98:1b:f4:1a:71:2d:8c:2d:51:db:83:10:01:cd:01:a3:
         73:d7:bf:9f:14:6f:da:c2:e4:cb:53:d9:3e:80:72:e0:d4:28:
         84:9a:e8:21:03:8a:b5:4d:71:9b:4e:5e:67:e2:b3:49:33:76:
         e1:00:2d:e7:b1:78:77:8e:a1:df:58:81:c7:06:fd:29:a7:03:
         f5:b0:9e:d5:d1:3c:0e:61:08:62:bd:ef:64:18:a3:aa:ad:8a:
         c4:c5:66:73:a5:47:d9:e0:44:5c:19:3f:5d:49:cf:bb:71:87:
         ed:23:e0:45
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0UwMEUxMTAvBgNVBAUTKDI2QThDODRDMjBEMDJBN0ZDNEFFRURFMTU1QzBCMzFC
MDhFRTdCNjcwHhcNMjYwMjEyMjIxODU0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThlNTFjZS1hZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm26nNhbykFNbQs/XOoyn8FO7/qV3AQ1WxYO05yns0R8josLfoJIRIwc1gDtW
Yv0C6j+a3tWNLk2USed3+M4ei8bWu2bjYRlLVsbbwVbdevrsauw489dlVKz39gSX
8koquOWXuomagZhBR3XkGqor77DS/+9hji4+VCkdpiKziZ7eld+K7vrBiVZ+G4wq
ERIhwzRt6JloYYy8wAOrMmBa+4N6Oya4SkxLRKfGMkuwx79YaQAie9j+5/6T/kqj
5SWV5dxSh2MhpSpn/Jw4O/XQE+XmFJ+hDtWvbYCjCGEGDhLGweOFZ7kEHmWIaT7S
nVWPRRD/oxNxWgGBevRXGDFrJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMWLzes/
5z4ZEetNvhw9h3BDAQklMB8GA1UdIwQYMBaAFCaoyEwg0Cp/xK7t4VXAsxsI7ntn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRS9DNkI1N0M4RThD
OTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtuX0VydTNoVmNDekd3anVl
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pxaklUQ0RRS25fRXJ1M2hWY0N6R3dqdWUyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UwMEUvQzZCNTdDOEU4QzkwMTFFQjkxREUwRTdBQzRGOUFFMDIvRTU2MkEzNTY3
MDJGMTFFRjk4MDZGODFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnknwwDQYJKoZIhvcNAQELBQADggEBADWlt9KibIeWZBFD
h4HErXZtaKJrb4RoXFf0G8Pq7Qy1tk4bCJ81qmsg92A8Aa6RCXkHfazulBl/1GBQ
zbCFR9sOpHGUG3KxnERO1/PRTDyzye02EwLUkQy8tPKQW1VOx0eOafPsk156e7yo
ULlMowaeYCJ/UKzcbfEnVtvYGeXMZkQPtQf6BVfMo9N7rMMUrm2xmBv0GnEtjC1R
24MQAc0Bo3PXv58Ub9rC5MtT2T6AcuDUKISa6CEDirVNcZtOXmfis0kzduEALeex
eHeOod9YgccG/SmnA/WwntXRPA5hCGK972QYo6qtisTFZnOlR9ngRFwZP11Jz7tx
h+0j4EU=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:55 2026 by rpki-client