Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/E4205416B2F111EFBB14DE0FC4F9AE02.roa
File:                     E4205416B2F111EFBB14DE0FC4F9AE02.roa (raw, json)
Hash identifier:          C0MrkHr2sP9K+LSsmIRWd+ilSflhfQILa+8hbGnxwQY=
Subject key identifier:   D4:C2:1F:75:43:6A:31:B1:7A:54:B1:62:60:09:D2:66:06:B9:AC:C1
Certificate issuer:       /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
Certificate serial:       06F4
Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/E4205416B2F111EFBB14DE0FC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 22:18:38 +0000
ROA not before:           Wed 04 Feb 2026 22:18:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4594
IP address blocks:        43.225.100.0/22 maxlen: 22
                          43.225.100.0/24 maxlen: 24
                          43.225.101.0/24 maxlen: 24
                          43.225.102.0/24 maxlen: 24
                          43.225.103.0/24 maxlen: 24
                          103.44.61.0/24 maxlen: 24
                          2407:880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl
                          rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D
        Validity
            Not Before: Feb  4 22:18:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983c5be-268e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:7f:ea:d6:0a:e3:81:bf:40:57:bc:83:51:
                    a6:26:42:8c:f6:e3:62:22:ec:f2:49:2d:b0:9a:dd:
                    24:05:07:17:c6:83:d8:e2:1a:60:b3:91:ec:24:97:
                    86:78:cd:e9:14:25:78:1a:56:4c:b0:3f:18:6e:11:
                    07:6a:16:0d:29:7f:6c:cd:a6:3b:b1:7c:87:7d:c0:
                    c8:1b:70:18:d9:24:fc:90:ed:94:4f:e7:62:d5:d8:
                    56:4e:1f:15:83:9a:b6:fc:c8:05:aa:74:ab:d5:2a:
                    e0:d3:b2:a3:2a:fa:cd:e1:b9:2e:1d:05:65:52:36:
                    48:bd:b9:3f:ce:41:d2:c4:c1:9b:e4:41:eb:4a:4e:
                    81:3c:09:71:b7:ed:5e:6b:d4:8e:4f:00:18:99:c6:
                    29:88:88:0e:9a:6d:ce:56:f1:41:80:2d:22:51:7c:
                    6c:78:bc:f6:b4:0a:94:a9:9f:07:34:97:c2:22:c5:
                    e8:16:c8:75:d6:94:69:32:96:15:c1:df:ce:dc:f7:
                    84:ea:ee:de:a7:c1:c3:b8:ef:99:17:40:4d:eb:40:
                    34:7c:8f:e7:a7:da:ed:b3:d1:8b:64:4e:46:d4:c9:
                    9f:51:09:93:ee:d9:88:d4:53:59:6e:ce:a9:5f:1e:
                    1a:0e:4d:80:83:2f:ff:ef:01:97:ed:42:17:03:c1:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:1F:75:43:6A:31:B1:7A:54:B1:62:60:09:D2:66:06:B9:AC:C1
            X509v3 Authority Key Identifier:
                keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/E4205416B2F111EFBB14DE0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.100.0/22
                  103.44.61.0/24
                IPv6:
                  2407:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:55:31:9a:09:1d:a9:27:ad:a0:43:e2:2a:f9:8e:5b:62:6c:
         7f:8f:b5:b6:dc:45:b7:a6:dc:23:95:d4:6c:47:d1:99:b7:63:
         ee:d4:0d:98:99:b8:ab:34:de:59:3b:59:45:21:77:9c:ba:3e:
         11:1a:5f:d7:6e:a0:eb:25:03:5c:27:6b:43:fe:e2:db:ec:89:
         49:20:7e:e2:ab:b5:1b:40:af:d6:cf:b9:36:48:df:f3:e6:83:
         fa:b3:39:8c:aa:fc:16:c3:e8:d7:97:da:1c:7d:ae:1c:ab:36:
         49:b7:2a:6b:5d:08:f6:d4:ae:7d:29:20:83:19:22:61:ed:e6:
         14:e0:d9:02:e2:2b:17:0e:f3:bd:e5:79:58:34:10:c7:12:b3:
         6a:4d:a6:be:b9:85:e1:ee:f7:b6:91:34:a1:dd:0e:bb:d1:e0:
         7e:e0:7a:63:f4:3e:29:38:36:cf:47:89:b5:80:09:8e:e2:5a:
         da:2a:c8:2c:ed:26:a1:aa:b6:c2:55:7b:4c:26:38:ac:ee:d6:
         85:12:6e:5a:fa:9e:11:ac:dc:90:65:f0:2d:b6:37:03:e2:97:
         06:4a:51:ea:f5:7e:6c:6a:97:07:d9:1c:81:d4:10:6d:15:08:
         f9:fc:7a:31:32:3b:f4:9b:af:2f:4f:91:6e:2d:41:c4:f4:da:
         dc:05:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:49 2026 by rpki-client