Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
File:                     C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json)
Hash identifier:          PB7QOYlvRwfsWOXpc6d0385exuRFXi8mvCHTNI8vfms=
Subject key identifier:   11:87:F6:83:06:67:CF:33:02:95:D7:CF:E9:FD:CD:ED:33:BB:8A:D4
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       035C
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 21:33:53 +0000
ROA not before:           Tue 03 Feb 2026 21:33:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140646
IP address blocks:        103.12.36.0/22 maxlen: 22
                          103.12.38.0/24 maxlen: 24
                          103.12.39.0/24 maxlen: 24
                          103.189.212.0/23 maxlen: 23
                          103.189.212.0/24 maxlen: 24
                          103.189.213.0/24 maxlen: 24
                          2400:88e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: Feb  3 21:33:53 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=698269c1-a74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:63:0e:eb:00:44:a7:1e:3e:1b:a5:9e:4b:
                    b8:35:82:d3:e0:a4:18:3a:b0:22:4d:3f:3b:75:3b:
                    4d:3b:22:57:c9:fd:49:10:ff:d4:9b:d8:f0:62:db:
                    95:54:b5:d8:9b:31:23:dd:0b:3d:9e:46:ef:8e:38:
                    b0:6b:e0:ca:f2:fa:67:d7:e1:a1:5e:68:a6:e0:0e:
                    fd:bf:78:ff:78:9a:9f:ff:20:6b:a1:0b:89:eb:3c:
                    8b:1e:7e:02:af:5d:a7:98:85:12:d1:4c:37:e9:2a:
                    e4:ce:03:54:dd:e8:30:c4:3f:d2:22:d0:88:b9:e4:
                    7e:85:a0:c6:ee:2b:b4:1a:05:cc:51:61:70:42:b1:
                    a3:50:d3:6a:9d:0a:16:5a:f3:0d:88:41:37:04:7f:
                    f2:79:25:aa:fe:7a:89:0c:79:d6:a9:5e:70:16:58:
                    6f:28:80:b7:cd:36:0f:d4:11:56:69:f7:bf:2f:fc:
                    2a:20:d6:04:65:e1:b1:16:99:23:42:11:b4:af:8a:
                    7b:ff:d0:85:10:b4:db:61:ce:85:10:11:96:03:8f:
                    2d:80:1a:f8:4a:8b:69:a9:84:2a:3b:6c:3f:14:b8:
                    f7:47:15:ec:e4:38:58:b8:01:ce:f0:76:20:32:7f:
                    8b:b9:af:9c:42:42:3b:7a:95:65:16:4d:3b:c9:00:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:87:F6:83:06:67:CF:33:02:95:D7:CF:E9:FD:CD:ED:33:BB:8A:D4
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.36.0/22
                  103.189.212.0/23
                IPv6:
                  2400:88e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:2f:7e:2d:3a:02:50:e5:3d:70:fc:a9:5d:e3:25:d9:22:5d:
         e8:bf:43:44:40:54:5c:e9:e0:c8:f5:cf:85:dc:06:e7:4f:2e:
         16:9b:0f:c2:9d:83:fb:5e:a0:94:a4:c1:97:ec:fb:c3:c3:ff:
         7b:6f:29:fd:e4:65:fc:6e:42:ca:a8:5c:7f:4a:0e:df:26:7c:
         56:1e:ea:80:06:09:46:36:f3:39:06:1c:cf:b6:66:b7:60:30:
         ee:04:46:3a:6d:22:0f:fb:7a:2a:bd:27:e2:4f:5e:f7:8c:e8:
         81:a6:b9:be:d2:d8:87:95:40:0b:bd:e4:bc:79:d4:c3:6c:b0:
         58:b9:cb:07:aa:d6:fc:60:eb:48:56:50:33:c8:56:b8:72:8a:
         f9:06:aa:9d:48:dc:90:e8:60:ea:c7:f3:3b:0c:ae:a9:f6:b3:
         5a:22:bb:7b:bb:b6:17:e1:e1:0a:b4:43:d6:4b:9a:03:38:32:
         3f:4d:17:b6:ac:37:d8:60:b7:9f:71:fb:d5:ee:55:85:11:02:
         b0:15:47:fc:f3:d5:d6:74:76:40:3d:5b:fd:41:01:03:1c:7b:
         cf:59:e7:40:8b:ea:f6:3e:7b:ae:84:fb:52:11:9c:cf:d7:61:
         52:6d:56:42:9e:5d:01:b7:f1:f2:41:0d:69:43:e2:69:26:d2:
         09:55:bd:c7
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx
QzgxMzJERjEwHhcNMjYwMjAzMjEzMzUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgyNjljMS1hNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5oBjDusARKcePhulnku4NYLT4KQYOrAiTT87dTtNOyJXyf1JEP/Um9jwYtuV
VLXYmzEj3Qs9nkbvjjiwa+DK8vpn1+GhXmim4A79v3j/eJqf/yBroQuJ6zyLHn4C
r12nmIUS0Uw36SrkzgNU3egwxD/SItCIueR+haDG7iu0GgXMUWFwQrGjUNNqnQoW
WvMNiEE3BH/yeSWq/nqJDHnWqV5wFlhvKIC3zTYP1BFWafe/L/wqINYEZeGxFpkj
QhG0r4p7/9CFELTbYc6FEBGWA48tgBr4SotpqYQqO2w/FLj3RxXs5DhYuAHO8HYg
Mn+Lua+cQkI7epVlFk07yQB9JwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBGH9oMG
Z88zApXXz+n9ze0zu4rUMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw
NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTEwM0YvRjhCNEJDRENGMDY2MTFFQ0E1NEMzNzQyQzRGOUFFMDIvQzQ5Mjg4MjBG
MDZDMTFFQzkxNDU5QjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnDCQDBAFnvdQwDQQCAAIwBwMFACQAiOAwDQYJKoZIhvcN
AQELBQADggEBAM0vfi06AlDlPXD8qV3jJdkiXei/Q0RAVFzp4Mj1z4XcBudPLhab
D8Kdg/teoJSkwZfs+8PD/3tvKf3kZfxuQsqoXH9KDt8mfFYe6oAGCUY28zkGHM+2
ZrdgMO4ERjptIg/7eiq9J+JPXveM6IGmub7S2IeVQAu95Lx51MNssFi5yweq1vxg
60hWUDPIVrhyivkGqp1I3JDoYOrH8zsMrqn2s1oiu3u7thfh4Qq0Q9ZLmgM4Mj9N
F7asN9hgt59x+9XuVYURArAVR/zz1dZ0dkA9W/1BAQMce89Z50CL6vY+e66E+1IR
nM/XYVJtVkKeXQG38fJBDWlD4mkm0glVvcc=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:24 2026 by rpki-client