Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/8137CEBC07E911F18CE8BD7B223D8C67.roa
File:                     8137CEBC07E911F18CE8BD7B223D8C67.roa (raw, json)
Hash identifier:          4M4si7s4MWxpIkrRGIn35NlkEDEBccsS7n4LwfgAoT4=
Subject key identifier:   E4:6B:F8:88:F1:10:A9:7A:5D:69:FC:20:FE:3A:C3:D0:21:6B:39:46
Certificate issuer:       /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial:       0BD2
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/8137CEBC07E911F18CE8BD7B223D8C67.roa
Signing time:             Thu 12 Feb 2026 08:04:50 +0000
ROA not before:           Thu 12 Feb 2026 08:04:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     40605
IP address blocks:        103.246.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
                          rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
        Validity
            Not Before: Feb 12 08:04:50 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=698d89a2-3088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:5e:22:a8:b7:41:95:09:a4:96:c6:a5:01:
                    bc:75:f5:75:f8:47:19:44:09:5e:be:40:53:5f:a1:
                    30:9d:49:14:cf:eb:4f:f7:2c:95:57:ef:27:e8:77:
                    4b:70:c9:fb:8c:1f:3d:cc:31:89:cf:6a:9f:03:2a:
                    92:4f:7c:00:20:5e:29:7d:55:aa:c3:ec:7b:fd:a2:
                    20:d0:22:a2:1a:e1:af:84:c9:67:14:bc:41:8d:dc:
                    f6:fb:df:db:5c:43:8e:8a:94:0a:4d:d8:93:a6:6e:
                    67:4a:1e:bb:cb:b5:50:78:be:1c:b7:dd:ca:de:34:
                    af:82:23:07:62:1b:3f:5f:05:4f:c2:51:34:c3:11:
                    19:33:84:32:10:b1:cf:5e:82:bf:80:38:d1:6e:69:
                    bb:40:ed:b2:37:b5:2f:97:1f:5a:2a:06:0f:21:cb:
                    68:98:67:15:a4:08:be:a0:11:4c:73:e9:44:c6:89:
                    6e:13:8f:b0:39:9d:71:07:73:80:99:f2:4b:b6:6d:
                    13:3b:06:c8:19:4b:c4:46:9a:9d:ed:55:86:d4:e0:
                    ba:ca:75:ca:32:97:11:dc:1b:d1:60:62:df:39:eb:
                    34:7a:3d:a5:80:8f:dd:95:7e:2b:f2:1e:ce:e0:a6:
                    1e:67:e6:6c:d0:34:7d:3d:44:33:9b:0c:a8:5f:5a:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:F8:88:F1:10:A9:7A:5D:69:FC:20:FE:3A:C3:D0:21:6B:39:46
            X509v3 Authority Key Identifier:
                keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/8137CEBC07E911F18CE8BD7B223D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:36:04:8c:c1:b9:95:74:44:98:bb:73:d9:c6:c8:8b:17:
         3a:46:40:75:d8:ed:6f:e3:3f:37:06:59:dc:f6:c0:0c:a2:04:
         da:45:a3:84:87:fe:fa:0a:35:f0:89:50:fb:df:cc:bc:ba:16:
         e4:1c:34:2b:69:4b:77:43:53:50:dd:5a:c7:f6:25:ba:8e:e1:
         8b:f8:4e:d8:39:b8:0d:ad:12:a7:43:17:70:09:28:64:81:9e:
         b5:4e:a3:c4:eb:a8:99:7b:30:15:a4:7a:e7:08:f8:5f:4b:e1:
         fb:b3:41:a9:7b:63:72:8e:d7:fe:c0:12:75:bb:31:f8:5f:eb:
         97:58:f9:40:8e:96:64:b6:69:2f:eb:db:78:8d:da:c0:d2:61:
         b0:1c:43:38:eb:f2:bd:af:cb:de:2d:d0:38:1e:c9:e9:71:af:
         f4:42:1f:32:9a:19:b5:f0:2a:25:aa:ea:99:96:62:4d:33:57:
         ea:96:91:6d:1a:86:8c:ce:c0:57:59:d9:3f:2b:92:1a:79:b0:
         65:4c:eb:08:7f:30:8b:40:20:62:fb:b6:13:6f:52:54:a2:35:
         a2:4e:fa:cd:76:31:c7:ff:94:59:a6:98:e9:03:6a:0e:36:30:
         45:74:d1:6c:97:59:49:9e:5c:64:94:ab:89:2e:c0:c8:9c:78:
         fd:ce:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:38:01 2026 by rpki-client