Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa
File:                     BFD9F81CFFEB11F085398A1A766F56BC.roa (raw, json)
Hash identifier:          nay00zvaYojMbXAfW+NehMGP+B+DbKBPKXxgjVM2Z6A=
Subject key identifier:   91:06:1F:EC:92:3D:31:10:05:6D:EB:AA:6D:D3:0F:22:2E:62:BA:0B
Certificate issuer:       /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
Certificate serial:       10CE
Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa
Signing time:             Mon 02 Feb 2026 04:00:45 +0000
ROA not before:           Mon 02 Feb 2026 04:00:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135589
IP address blocks:        103.13.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl
                          rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4302 (0x10ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572
        Validity
            Not Before: Feb  2 04:00:45 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6980216d-968c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:43:55:2c:fc:0a:2b:47:78:d5:2e:26:0f:
                    b1:a4:ff:c6:ec:69:51:80:65:e1:84:5c:da:00:0b:
                    82:9b:a5:b2:d9:54:63:40:03:0e:ad:f9:b8:19:26:
                    fe:27:8a:d2:9b:66:8d:47:bd:f6:6f:a0:4b:99:1c:
                    a5:d6:f5:87:b3:68:32:17:e9:ed:1f:3c:9c:c2:90:
                    51:ed:4e:1d:f6:c9:20:37:54:f4:5d:d6:44:18:48:
                    af:f1:cd:28:1b:2e:13:b8:ce:ad:d1:7b:13:e0:34:
                    bb:6e:dd:8d:1b:c4:a2:f1:d1:a6:b1:5c:41:d8:85:
                    dd:f3:52:8c:82:71:e6:e2:d6:cf:bd:af:4e:77:98:
                    fa:d9:6f:e6:76:a1:a6:4f:a5:01:34:61:6c:2d:27:
                    d2:89:bb:3d:9a:2f:b5:9c:61:49:af:5d:d3:19:c2:
                    57:63:e6:cb:0f:43:97:24:b8:89:07:ea:d9:5e:4e:
                    c9:a3:7d:c8:8e:6c:78:45:25:8f:bc:34:de:42:b1:
                    21:43:d9:17:f7:2f:0a:0a:5e:4f:52:e3:54:ba:31:
                    46:98:fd:9e:d4:87:70:8c:99:3e:ba:ec:54:6c:d9:
                    55:d7:ac:cd:17:ac:ab:66:e6:05:95:9d:6e:67:06:
                    8c:c0:33:1e:8e:41:d9:74:4b:d7:a0:5e:7f:e0:e8:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:1F:EC:92:3D:31:10:05:6D:EB:AA:6D:D3:0F:22:2E:62:BA:0B
            X509v3 Authority Key Identifier:
                keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/BFD9F81CFFEB11F085398A1A766F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:da:a7:9e:88:a8:f7:6d:76:79:1f:45:36:d3:6b:77:28:37:
         d7:7c:81:b9:1b:82:a1:49:64:bf:91:ef:11:de:93:34:d1:d9:
         ce:50:ea:3a:c2:6f:f7:2e:b3:0f:b1:1d:f0:a9:c0:34:0f:f0:
         bb:5a:44:f5:51:32:c4:3a:ec:e3:3b:28:58:25:4c:33:08:22:
         ca:73:5d:fc:05:80:d1:b6:a3:b6:93:8e:0c:c0:12:d2:89:12:
         89:03:51:de:cd:97:ef:3e:55:61:12:93:2a:84:cc:f4:04:f4:
         8a:91:37:96:7d:15:90:bd:5c:48:3c:b8:27:aa:eb:e3:49:b6:
         c0:05:0b:c0:a9:07:7f:af:c2:e5:ec:b1:a1:28:99:0d:ba:24:
         f8:86:ff:f9:7a:0c:2e:2c:81:15:93:51:eb:be:bd:aa:83:c0:
         ca:1b:94:8b:7f:f7:a5:77:28:c9:8f:59:d2:1c:03:c9:3f:d8:
         5e:14:7e:47:5d:47:7a:ba:08:3b:0c:88:61:1d:0e:0a:89:4b:
         15:16:37:13:68:16:1e:0f:30:19:8f:9a:53:81:aa:95:0a:02:
         e1:32:b7:b3:12:6c:ce:75:90:fd:01:bb:0e:7a:32:02:ac:19:
         fd:eb:b6:0b:d6:e0:f7:46:ef:11:48:69:82:81:f1:8b:05:4a:
         7c:1c:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:18 2026 by rpki-client