Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
File:                     22639692E6FC11EEB3BCD10EC4F9AE02.roa (raw, json)
Hash identifier:          scvIWP77Dxx2pnNVjzHe/pRPe7w91/W8yTlJFoFg89g=
Subject key identifier:   DB:DB:13:B1:84:0C:F9:4C:E6:3C:2F:5A:1C:2F:AE:B3:F7:AA:70:18
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E12
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 18:14:53 +0000
ROA not before:           Wed 04 Feb 2026 18:14:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138581
IP address blocks:        103.133.204.0/22 maxlen: 23
                          103.133.205.0/24 maxlen: 24
                          2404:5340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3602 (0xe12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Feb  4 18:14:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69838c9c-84cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:de:76:91:cf:f1:24:a0:45:26:cb:cb:99:9a:
                    b2:fb:9b:17:d2:45:a6:86:fd:8f:56:52:c9:7d:31:
                    c9:0a:f1:d5:f8:51:2b:46:be:e2:75:fb:d6:8b:c9:
                    32:eb:c1:3a:ae:1b:fd:cf:da:f2:e6:ff:37:6a:1f:
                    4d:e0:ca:00:74:41:ae:cc:92:fb:46:c1:33:f9:f2:
                    28:de:fd:44:de:4b:a8:57:2e:26:dc:c2:74:91:e1:
                    87:8f:c2:57:08:17:30:91:d2:c9:fb:09:f2:94:8e:
                    85:92:53:d0:cc:30:ad:cf:b8:0a:6e:35:55:b9:94:
                    e0:a7:65:49:94:73:11:06:9a:23:15:c0:c0:0c:9c:
                    93:0c:11:f3:66:af:84:01:4d:bf:3b:64:76:40:c4:
                    fc:32:8b:e2:7f:04:37:47:54:69:9a:36:54:f3:db:
                    d2:e7:5c:d5:84:94:e5:98:0e:43:49:ff:64:bf:d9:
                    b6:37:3b:94:63:32:eb:cc:ff:ae:b4:28:1e:c3:bc:
                    c4:40:cf:d2:91:ad:44:e3:9b:fb:23:ba:68:48:40:
                    f1:8c:6f:48:fd:da:d2:b9:31:29:2b:be:58:6e:b1:
                    9e:55:d8:99:c4:e5:64:61:1e:c4:95:d2:f3:21:80:
                    31:58:86:b1:a2:65:8f:16:65:7b:28:cd:e2:89:b2:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:13:B1:84:0C:F9:4C:E6:3C:2F:5A:1C:2F:AE:B3:F7:AA:70:18
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/22639692E6FC11EEB3BCD10EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.204.0/22
                IPv6:
                  2404:5340::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:87:9f:f4:be:05:c0:ee:b6:2c:bb:93:d0:1c:ff:62:86:e9:
         d1:21:d2:61:3d:26:54:e6:14:19:e5:31:ba:57:1b:3d:9e:67:
         7a:1f:34:36:11:26:f1:0b:45:f9:c3:12:ef:5e:83:6f:07:ca:
         1c:e3:cd:1c:6d:89:0f:bb:72:ee:ff:b8:7d:ec:b8:4b:15:84:
         3b:fc:6d:d9:63:06:f4:9d:1d:6e:e6:8f:e3:78:1f:cc:11:73:
         19:0e:04:ac:ee:51:b8:75:06:15:08:9f:54:bf:0b:e6:f5:fe:
         4c:58:2f:38:82:55:5e:fd:81:21:6f:d6:b1:bf:f8:20:4c:a6:
         83:09:c5:0c:9f:fb:61:ad:f0:33:7e:45:20:5e:86:ca:b7:8f:
         4f:6e:21:b2:e5:0c:18:2f:58:20:8d:9c:c0:32:ea:8a:68:d3:
         b1:a1:e0:fd:72:da:f1:9a:62:db:46:78:55:b4:f7:ee:14:f4:
         de:be:63:6e:ea:f3:e3:e9:d3:83:68:81:8e:e0:68:66:2b:60:
         85:09:fb:f2:dc:52:80:0a:2a:41:a2:f8:14:fc:19:c1:c4:18:
         58:90:a4:b7:dc:bd:e0:a1:f5:05:ed:6e:2c:e1:8b:7c:c9:97:
         ab:16:1a:d9:3c:4f:0d:1e:17:ac:0f:69:43:77:52:97:b3:94:
         c6:0a:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:47 2026 by rpki-client