Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/BA4083F84CEF11F0A46DCE81C4F9AE02.roa
File:                     BA4083F84CEF11F0A46DCE81C4F9AE02.roa (raw, json)
Hash identifier:          aa49jh+rK+CUpW0B3PdIJVUql0vI6nRTsE47pMCsMMo=
Subject key identifier:   07:2F:E0:66:B1:BB:CA:D4:49:2E:32:73:36:B2:0F:C7:2D:82:0C:9C
Certificate issuer:       /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial:       07F2
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/BA4083F84CEF11F0A46DCE81C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 21:18:39 +0000
ROA not before:           Mon 02 Feb 2026 21:18:39 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134371
IP address blocks:        103.129.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
                          rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
        Validity
            Not Before: Feb  2 21:18:39 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698114af-25f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:12:f0:91:4d:f9:80:16:36:cb:ec:a2:13:
                    86:b7:1e:76:3b:86:3c:4b:e6:2c:06:01:57:41:0f:
                    3d:af:a0:46:4d:07:df:6c:54:48:03:eb:24:54:90:
                    72:7f:db:49:1e:ff:c2:1b:75:53:ef:c5:a6:e2:da:
                    3c:95:6d:78:a9:c2:17:25:d2:18:69:84:fb:70:4a:
                    01:15:44:59:c7:f6:8e:4c:5a:0b:c1:cd:bb:df:f3:
                    62:f2:ed:a3:76:a8:cf:bd:b7:66:0b:6e:ce:cc:12:
                    ae:3f:da:4f:29:61:ea:5f:5f:89:31:58:ec:8e:6e:
                    aa:2e:22:5d:86:45:03:8a:bc:c4:a2:0a:12:f1:3a:
                    2c:f2:20:59:39:d2:72:97:ac:66:bc:fb:f0:ff:83:
                    ae:57:ed:16:bc:b2:2b:35:01:7e:e1:5b:a1:13:a5:
                    e1:77:ee:34:bc:4e:8d:b2:78:89:04:5d:a8:bc:94:
                    1a:10:28:28:91:92:94:5e:1f:a3:56:59:9f:ac:81:
                    a1:5a:65:00:03:84:c7:fc:d0:91:ad:0f:d2:01:5e:
                    a8:6e:03:63:f7:47:c1:ba:05:ab:5f:d4:4f:6e:ce:
                    89:39:1c:07:05:6f:0d:55:b7:61:34:88:f1:39:a8:
                    42:2c:4d:2d:e9:39:97:d9:ab:c9:0e:9d:b9:f3:25:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2F:E0:66:B1:BB:CA:D4:49:2E:32:73:36:B2:0F:C7:2D:82:0C:9C
            X509v3 Authority Key Identifier:
                keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/BA4083F84CEF11F0A46DCE81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:84:9b:30:ef:dd:09:0c:0a:18:74:3e:3a:13:35:6a:cb:b3:
         80:dd:71:1c:55:f2:d3:2c:b6:eb:b1:33:2f:8c:5d:ef:3c:d1:
         4c:37:a8:c3:1d:85:c9:b2:7e:a6:62:fa:80:ed:5e:3c:66:a0:
         c4:ed:ca:0a:ed:b4:7d:83:76:16:3d:46:f0:a1:fc:a9:be:7d:
         27:f9:3d:be:2a:0f:d2:ff:c2:99:b5:80:fe:17:31:78:75:bc:
         87:43:f8:e1:35:0b:bd:25:fc:b9:b4:2c:5d:12:cc:51:be:48:
         ab:72:42:a7:ae:63:e0:09:50:99:f0:1a:40:b5:97:f2:aa:d8:
         cc:44:a5:d7:34:32:f6:ad:f4:d3:a0:a0:95:f6:ce:e5:79:e0:
         e3:fe:5e:0e:93:7e:a0:de:4b:41:c8:d3:ba:7a:aa:3c:5c:68:
         bf:b2:ef:68:8b:fa:c9:b2:5c:9a:6d:1f:6f:13:89:f1:4b:0d:
         07:5f:c8:24:03:a1:30:37:17:82:1d:77:7f:42:2b:ce:cd:b0:
         6f:c1:9f:18:d7:8c:9d:db:e3:0b:01:18:9b:c4:0b:09:97:76:
         0e:73:57:0d:86:e2:0c:ec:ec:82:fd:1b:dc:d7:57:43:68:10:
         e4:c6:f3:2b:2c:8d:b1:5f:1f:67:ae:92:07:96:1a:2d:32:7f:
         b0:9a:27:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3
Q0YxRjU5REYwHhcNMjYwMjAyMjExODM5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxMTRhZi0yNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMsS8JFN+YAWNsvsohOGtx52O4Y8S+YsBgFXQQ89r6BGTQffbFRIA+skVJBy
f9tJHv/CG3VT78Wm4to8lW14qcIXJdIYaYT7cEoBFURZx/aOTFoLwc273/Ni8u2j
dqjPvbdmC27OzBKuP9pPKWHqX1+JMVjsjm6qLiJdhkUDirzEogoS8Tos8iBZOdJy
l6xmvPvw/4OuV+0WvLIrNQF+4VuhE6Xhd+40vE6NsniJBF2ovJQaECgokZKUXh+j
VlmfrIGhWmUAA4TH/NCRrQ/SAV6obgNj90fBugWrX9RPbs6JORwHBW8NVbdhNIjx
OahCLE0t6TmX2avJDp258yXNKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAcv4Gax
u8rUSS4yczayD8ctggycMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1
QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODcxQzIvREU2MTY2Njg1NUE5MTFFQjk5QUZEQTVEQzRGOUFFMDIvQkE0MDgzRjg0
Q0VGMTFGMEE0NkRDRTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngdEwDQYJKoZIhvcNAQELBQADggEBAIOEmzDv3QkMChh0
PjoTNWrLs4DdcRxV8tMstuuxMy+MXe880Uw3qMMdhcmyfqZi+oDtXjxmoMTtygrt
tH2DdhY9RvCh/Km+fSf5Pb4qD9L/wpm1gP4XMXh1vIdD+OE1C70l/Lm0LF0SzFG+
SKtyQqeuY+AJUJnwGkC1l/Kq2MxEpdc0Mvat9NOgoJX2zuV54OP+Xg6TfqDeS0HI
07p6qjxcaL+y72iL+smyXJptH28TifFLDQdfyCQDoTA3F4Idd39CK87NsG/BnxjX
jJ3b4wsBGJvECwmXdg5zVw2G4gzs7IL9G9zXV0NoEOTG8yssjbFfH2eukgeWGi0y
f7CaJ2c=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:49:29 2026 by rpki-client