Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
File:                     7E8E2302014811F1B68E82C6516F56BC.roa (raw, json)
Hash identifier:          PpTz7PT3/8BC6vIB93OQFUoqFNDqC+yYt08VYo4Fd6E=
Subject key identifier:   EE:59:A3:5C:C0:4E:77:5E:96:8E:5B:4E:9A:12:EB:BA:70:FC:EC:E9
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       035E
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
Signing time:             Tue 03 Feb 2026 21:37:10 +0000
ROA not before:           Tue 03 Feb 2026 21:37:10 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152600
IP address blocks:        203.98.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: Feb  3 21:37:10 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69826a86-3e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:32:42:47:73:22:1e:7a:5b:92:71:90:97:
                    03:2b:1a:42:91:cb:23:38:72:db:a8:5f:8f:1e:23:
                    12:dc:64:14:73:4a:e1:8a:83:d4:bf:b3:43:3d:ba:
                    05:f8:1f:b0:89:b7:0e:de:a3:41:57:df:1a:ff:6b:
                    c2:65:8e:4d:af:be:b7:00:38:84:f0:24:42:f3:a8:
                    44:68:dc:74:8a:b8:37:40:6c:e6:b4:24:34:a9:2d:
                    8f:50:b6:b2:ba:07:e9:1c:2a:7e:b6:2c:63:48:b1:
                    26:8f:6a:a8:06:6f:55:16:bf:33:53:cc:2e:05:10:
                    c5:31:1f:cc:bf:d7:01:94:c4:48:b7:fe:9a:4a:6f:
                    86:e8:dd:d0:53:44:b0:d8:78:59:5c:ce:b8:02:b7:
                    9b:36:bd:92:0f:2d:53:e0:34:6d:9b:1e:1b:4a:30:
                    43:a8:33:82:6a:6e:29:cd:9e:b0:56:42:76:17:cd:
                    1c:4c:dc:b6:2b:d2:3a:17:bb:e8:ed:b0:23:18:29:
                    4e:ca:6b:cc:1a:5e:34:27:e7:9e:78:b6:cf:1d:1f:
                    9e:48:65:10:24:04:64:20:9a:88:cd:15:4f:6a:29:
                    9c:0f:3b:67:0a:b3:b7:14:60:5e:48:b0:c9:77:6f:
                    cc:fa:55:76:36:c9:5e:82:e2:8c:d5:08:61:b4:4c:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:59:A3:5C:C0:4E:77:5E:96:8E:5B:4E:9A:12:EB:BA:70:FC:EC:E9
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:51:0d:be:fb:8c:1d:43:9d:6a:75:c0:b8:32:79:65:cd:
         e8:d3:42:60:16:f4:44:d1:31:6c:3b:c6:b6:f5:ec:66:ce:2f:
         3d:32:97:f3:ea:d5:40:b1:1e:8b:79:72:86:01:fd:f3:fe:18:
         2e:90:96:fd:02:7a:79:af:a6:22:d8:8c:bb:1f:a8:28:9f:97:
         0d:c6:e8:a2:d4:4a:93:55:3e:23:c2:92:34:75:af:6b:69:8c:
         c5:30:8c:fa:5e:c0:19:80:d3:1c:57:6c:0e:0f:7f:33:84:56:
         ae:b3:66:7c:3b:3d:f8:8e:49:27:97:a5:42:a3:e4:d8:96:6f:
         30:e2:b1:23:ba:23:f2:23:36:23:34:16:a4:33:5a:6c:28:df:
         93:27:0a:04:b7:62:ab:57:c3:84:de:47:ce:20:91:3c:06:38:
         81:82:a3:68:f7:69:ac:54:47:ad:23:e0:fc:a7:58:44:47:b0:
         b2:45:e1:ea:62:2d:c8:2c:66:ed:2c:e6:9f:12:a3:f8:60:66:
         c3:9d:d0:07:97:b6:c5:ce:ea:b3:83:cb:8b:8c:ea:54:61:a5:
         12:43:d6:23:f1:07:a3:0e:b0:0d:53:e6:5f:f8:49:eb:2d:48:
         c8:a2:bc:38:df:38:6c:84:25:97:7c:3f:9e:b1:4f:b1:5f:c9:
         84:09:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:50 2026 by rpki-client