Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/6D83AA1CBF5711EEAB9A037FC4F9AE02.roa
File:                     6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (raw, json)
Hash identifier:          QEqXCZO71g89xAws0EI1426P/0xCGMffBcrX67glaR8=
Subject key identifier:   3C:19:72:A6:B7:6A:87:77:A4:0D:17:CA:9F:B6:36:E8:65:8F:F3:FB
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E11
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/6D83AA1CBF5711EEAB9A037FC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 18:14:52 +0000
ROA not before:           Wed 04 Feb 2026 18:14:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134371
IP address blocks:        103.133.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3601 (0xe11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Feb  4 18:14:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69838c9b-c4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:a4:36:cb:67:aa:81:0e:dd:67:8c:52:fb:
                    a5:3a:92:6f:a6:38:49:f3:84:f4:18:26:f2:04:74:
                    f2:06:de:16:70:97:ac:88:51:9d:63:5d:a0:46:58:
                    bc:59:ea:54:21:2c:3b:d0:a2:58:c1:dd:47:13:1c:
                    58:da:ad:5a:1b:f9:4e:a8:90:7b:21:f1:b3:23:34:
                    3b:d7:6a:8e:9f:7f:41:b7:02:c3:31:c6:2d:4d:15:
                    c9:11:25:6e:4d:45:13:ea:1c:32:9a:6a:4d:58:19:
                    c7:4b:04:12:00:06:05:85:9b:45:9d:2b:58:87:66:
                    b9:df:57:62:01:53:d6:55:2d:a2:ea:79:2b:45:73:
                    3b:c3:81:d2:88:fd:46:b9:40:f4:21:31:15:fe:3e:
                    26:c0:f1:c9:4c:dd:af:74:db:9f:da:d9:f7:06:5e:
                    93:08:be:4b:eb:25:bf:47:4e:26:64:d0:4c:60:76:
                    c6:79:0c:78:84:ed:39:19:5b:be:82:94:5e:0a:47:
                    96:05:14:8c:c4:cd:ac:7a:84:a4:45:88:33:65:aa:
                    f5:b7:dd:30:81:57:de:66:f1:62:99:8b:01:7f:30:
                    77:a6:59:6a:2b:16:f8:24:fc:6e:92:bf:53:1c:ec:
                    24:aa:64:9f:c4:ca:99:e4:65:d5:5b:c7:d6:ad:6b:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:19:72:A6:B7:6A:87:77:A4:0D:17:CA:9F:B6:36:E8:65:8F:F3:FB
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/6D83AA1CBF5711EEAB9A037FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f6:9d:55:82:91:3e:6d:61:eb:a3:b1:6a:b4:91:4a:96:16:
         d2:29:35:24:a9:f6:39:36:99:f1:a9:f8:17:a1:18:10:59:cd:
         85:9a:b5:b1:17:ab:8c:6a:07:2e:aa:23:e3:1b:65:02:fb:41:
         0b:92:dd:bc:c3:c4:e3:c8:39:3c:bd:13:24:00:00:20:12:29:
         77:d2:fd:2f:cb:97:9b:3c:4b:ff:16:57:7b:86:7e:2d:99:e0:
         d5:cb:41:3c:55:90:82:73:7c:21:2d:e1:ad:f6:7e:ba:f0:f5:
         08:de:05:be:4c:45:29:d6:27:d0:6c:47:0a:a4:80:7f:eb:00:
         60:12:3b:50:ca:7c:cc:2c:28:ed:dd:7d:00:72:50:05:10:50:
         d1:c3:52:29:79:5d:10:9f:3f:48:35:2b:e0:77:af:58:7d:81:
         60:cf:c6:ec:65:30:d6:38:42:fe:b7:fc:a9:08:95:3a:71:e9:
         6c:ed:a5:25:66:89:0a:f3:d7:45:0d:82:48:dd:0a:f4:d9:65:
         c0:8d:62:be:b3:6f:1c:60:a3:4f:57:0d:c5:25:57:60:e9:d8:
         9a:af:de:35:89:ee:4a:5f:d0:5c:aa:d4:82:34:08:4b:d3:e2:
         86:90:c9:61:b4:79:4e:ae:61:e3:90:c9:4a:b1:da:cf:37:b9:
         6c:e5:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:07 2026 by rpki-client