Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/79666614E79311EC81D3720BC4F9AE02.roa
File:                     79666614E79311EC81D3720BC4F9AE02.roa (raw, json)
Hash identifier:          jhZZxFEEMFnDMdL9xcm/NwGafpK/m4hFUOsmVbn5vkw=
Subject key identifier:   77:FC:3B:76:D4:EB:9F:AB:26:DA:33:10:4C:0F:8D:95:C6:B5:B0:D9
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E13
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/79666614E79311EC81D3720BC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 18:14:54 +0000
ROA not before:           Wed 04 Feb 2026 18:14:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139009
IP address blocks:        103.133.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Feb  4 18:14:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69838c9e-c830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:fa:37:dd:ef:72:1d:fe:3a:82:d1:ed:53:
                    10:e8:2f:18:28:1d:a3:8e:a1:2a:39:13:f4:4f:28:
                    6a:59:0e:e0:72:e0:be:c6:1c:aa:b3:05:3d:e1:1b:
                    eb:83:78:5a:e6:f5:d0:29:ed:59:93:a3:6d:8c:13:
                    4e:a1:98:11:ee:99:8c:4a:f3:73:04:8b:6a:9e:e8:
                    3a:27:ea:5b:75:aa:a9:72:b0:a4:d9:07:dd:53:77:
                    fc:65:36:d4:ae:3e:7e:a5:48:95:42:fa:4d:fc:41:
                    93:91:7a:57:95:f6:63:af:8c:e4:5a:35:c4:4e:3d:
                    cc:f6:af:cf:ec:f0:74:b8:c2:f2:ff:58:6d:71:69:
                    6c:0b:ee:0d:94:7c:d1:c1:ea:a5:32:78:9a:95:03:
                    f2:32:f4:91:6b:94:4d:f6:92:2e:0e:4f:68:26:97:
                    81:5e:b5:4d:2f:91:40:d4:83:86:9d:ef:fa:09:70:
                    4a:9c:59:a4:99:47:91:b4:46:74:0c:d2:8d:79:69:
                    9b:27:b8:14:8f:6a:50:e1:b1:0d:a4:b4:93:52:1a:
                    75:03:94:18:98:36:c2:d0:46:b8:dc:a9:ec:b3:f7:
                    74:bc:1e:41:2d:77:a4:fe:c1:08:62:69:5f:36:8a:
                    ef:c4:3a:47:b3:8e:d8:c1:96:c8:53:83:bc:23:cf:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FC:3B:76:D4:EB:9F:AB:26:DA:33:10:4C:0F:8D:95:C6:B5:B0:D9
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/79666614E79311EC81D3720BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:56:f8:8d:75:d1:ad:ef:1f:20:12:2b:d8:5f:be:f5:97:
         4b:b4:18:59:a5:0f:f2:ff:a9:c6:0c:0a:b5:35:75:6f:7b:12:
         38:60:c1:3c:60:45:48:95:4f:24:b2:80:8d:70:cf:08:c9:99:
         d4:e0:6b:28:3d:65:98:72:3f:8b:5f:0d:d2:2a:43:16:3d:b6:
         24:d8:aa:de:50:10:38:4a:2a:63:76:c6:f2:80:14:b8:d5:bb:
         e2:04:de:0a:7b:e2:f7:24:ea:50:0b:fc:0c:a0:aa:f8:d3:8a:
         cd:d3:7c:a5:54:4d:a2:17:fb:17:b4:bb:aa:d2:47:8e:25:5a:
         8a:34:b8:18:b7:64:4e:b3:dd:ff:e9:49:5c:5c:28:10:82:d6:
         90:7d:cd:e7:b6:b8:dc:59:f7:8a:ee:0a:91:c2:7d:84:19:a0:
         fd:c6:81:f1:57:33:f5:87:ff:c7:46:cc:0b:ca:41:d6:81:a7:
         c7:41:03:ae:f1:c1:7d:1b:c2:4f:48:07:a1:b2:79:68:68:b7:
         e4:d6:56:25:fb:38:61:fb:ca:c3:9e:a3:8e:39:d9:a4:c4:4e:
         dd:32:ec:ed:8d:28:0c:72:f9:fa:f8:a2:a9:03:c5:d3:db:67:
         c0:39:fb:78:92:3f:20:1f:6d:e6:c2:33:ea:57:cd:33:80:df:
         e7:36:15:70
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4
OTFFNEY0NEUwHhcNMjYwMjA0MTgxNDU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgzOGM5ZS1jODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDf6N93vch3+OoLR7VMQ6C8YKB2jjqEqORP0TyhqWQ7gcuC+xhyqswU94Rvr
g3ha5vXQKe1Zk6NtjBNOoZgR7pmMSvNzBItqnug6J+pbdaqpcrCk2QfdU3f8ZTbU
rj5+pUiVQvpN/EGTkXpXlfZjr4zkWjXETj3M9q/P7PB0uMLy/1htcWlsC+4NlHzR
weqlMnialQPyMvSRa5RN9pIuDk9oJpeBXrVNL5FA1IOGne/6CXBKnFmkmUeRtEZ0
DNKNeWmbJ7gUj2pQ4bENpLSTUhp1A5QYmDbC0Ea43Knss/d0vB5BLXek/sEIYmlf
NorvxDpHs47YwZbIU4O8I8/qAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHf8O3bU
65+rJtozEEwPjZXGtbDZMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB
MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUyQUMvNjQxNzEzMTZDQTMyMTFFOThCRkNEMzUyQzRGOUFFMDIvNzk2NjY2MTRF
NzkzMTFFQzgxRDM3MjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhc4wDQYJKoZIhvcNAQELBQADggEBADvDVviNddGt7x8g
EivYX771l0u0GFmlD/L/qcYMCrU1dW97EjhgwTxgRUiVTySygI1wzwjJmdTgayg9
ZZhyP4tfDdIqQxY9tiTYqt5QEDhKKmN2xvKAFLjVu+IE3gp74vck6lAL/AygqvjT
is3TfKVUTaIX+xe0u6rSR44lWoo0uBi3ZE6z3f/pSVxcKBCC1pB9zee2uNxZ94ru
CpHCfYQZoP3GgfFXM/WH/8dGzAvKQdaBp8dBA67xwX0bwk9IB6GyeWhot+TWViX7
OGH7ysOeo4452aTETt0y7O2NKAxy+fr4oqkDxdPbZ8A5+3iSPyAfbebCM+pXzTOA
3+c2FXA=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:11:21 2026 by rpki-client