Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
File:                     4F1694B4C87B11ED981CC523C4F9AE02.roa (raw, json)
Hash identifier:          nptDzFVf7XBlHlemqq+EIINmp7bk1A+qPYc93Z3d5AQ=
Subject key identifier:   A7:57:E5:2D:92:BC:62:EB:E6:03:BA:38:D7:48:EB:6F:00:A5:75:86
Certificate issuer:       /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial:       06F3
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 22:18:37 +0000
ROA not before:           Wed 04 Feb 2026 22:18:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     149840
IP address blocks:        103.44.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
                          rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
        Validity
            Not Before: Feb  4 22:18:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983c5bd-a829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:b0:c5:ca:1c:a6:88:f1:19:37:4b:77:4c:
                    d5:36:2e:2f:f6:0a:2c:82:1f:3a:00:19:c6:a2:8b:
                    c8:7a:32:66:05:d3:80:5f:58:9a:b8:fb:18:d3:4a:
                    0a:fa:71:5e:51:6b:bd:b3:c8:48:f9:03:ee:a0:7d:
                    46:aa:74:0e:93:6e:89:fe:e6:6a:9f:49:e0:67:81:
                    60:55:70:53:05:8a:84:05:27:a8:4c:33:03:f6:b5:
                    63:7f:7f:ac:10:47:48:e2:91:a4:92:18:b5:bf:21:
                    38:2d:bf:c1:3b:ce:f1:2c:d2:0b:c2:1d:73:f9:e7:
                    1f:e5:40:72:01:db:05:53:ab:ff:f5:29:9c:ab:40:
                    52:eb:4a:2e:50:e4:f2:79:6a:50:26:69:c3:b9:2e:
                    8c:3f:ba:b4:62:79:f2:91:c2:70:e5:3a:8d:d3:40:
                    d9:1c:f6:5e:30:e7:dd:c8:38:5a:50:a4:e3:4f:54:
                    5d:b2:64:6d:6c:8c:50:a3:b6:76:d9:79:37:c1:a0:
                    26:80:15:7d:cb:11:8c:90:70:a6:51:1f:e6:ba:97:
                    aa:35:1c:73:14:6a:71:17:10:55:5a:e2:1f:98:87:
                    65:c0:3d:ca:1b:55:da:1a:09:f2:6b:7b:96:db:e5:
                    12:a1:85:59:7a:32:ae:90:7c:18:c2:fa:6a:3b:31:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:E5:2D:92:BC:62:EB:E6:03:BA:38:D7:48:EB:6F:00:A5:75:86
            X509v3 Authority Key Identifier:
                keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/4F1694B4C87B11ED981CC523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:37:5a:95:4d:e6:c2:9b:4a:f1:7d:d6:f9:36:71:35:6a:d0:
         59:f1:07:d4:6f:5e:d6:7a:9a:70:fa:1e:9f:29:c0:ad:9f:4b:
         68:64:bd:80:c0:6c:d2:cc:9b:bf:24:5e:80:d3:af:4d:f5:08:
         9a:52:9f:5f:50:c1:23:88:b4:5b:fa:e3:43:ea:2c:db:71:00:
         a9:0b:01:e5:d6:8c:e5:e2:1d:0e:24:b6:b6:50:2d:59:31:85:
         59:8b:46:0d:c5:12:3c:83:e4:99:16:f3:f1:65:92:b1:7b:6c:
         a3:a5:e6:56:82:28:c4:78:69:18:73:78:e1:94:1d:6d:10:88:
         59:ed:c3:de:c0:81:ea:fc:be:75:71:2c:10:9d:a6:49:57:e7:
         5c:83:eb:ba:84:1f:a5:cb:c0:37:dc:46:7b:69:28:09:e2:9c:
         76:93:8b:42:bf:da:7e:ed:4b:c2:cb:62:ae:0c:fc:c6:00:bb:
         d0:b7:76:44:51:66:a0:2a:0e:aa:85:25:31:b8:52:ee:5f:5b:
         12:e0:44:0f:fc:5c:03:27:5c:4a:77:ad:93:ff:bb:f8:ba:99:
         e7:d8:d1:19:0b:7b:91:de:09:09:63:7b:30:87:1b:16:02:77:
         02:d1:76:b2:24:b2:c5:b3:5b:91:c6:9a:61:56:9f:69:be:44:
         71:85:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:28 2026 by rpki-client