Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
File:                     28741DDC85CD11ECA5E28171C4F9AE02.roa (raw, json)
Hash identifier:          SnjZWJ42ptlIBHMqXV7W12dMBrl45trsihby1Z4A+go=
Subject key identifier:   07:D3:F9:D1:B9:3B:27:C5:F8:D3:2A:C9:8B:09:FE:62:CF:22:8F:1D
Certificate issuer:       /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial:       049B
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 00:20:22 +0000
ROA not before:           Sat 31 Jan 2026 00:20:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140607
IP address blocks:        103.177.240.0/24 maxlen: 24
                          103.177.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
                          rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
        Validity
            Not Before: Jan 31 00:20:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=697d4ac6-106f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:38:97:d9:93:b2:66:e8:62:37:ba:3d:0c:74:
                    4f:26:05:0d:e6:ca:76:75:ed:90:3c:63:89:c8:14:
                    f6:5f:ce:8f:41:48:34:04:17:e9:24:1b:3a:ae:07:
                    d8:d1:9e:82:d3:76:76:77:6f:6f:a6:6e:f7:93:a9:
                    02:9e:40:b9:4c:ef:d9:21:06:48:ba:b8:82:ac:e6:
                    10:be:5c:d2:63:f0:cf:77:d0:46:87:13:0f:28:b8:
                    d3:c5:6f:f2:3c:92:ed:da:bc:33:68:61:c8:78:71:
                    46:74:c0:2a:b2:c2:16:34:f0:eb:4d:e3:35:e5:1d:
                    b8:9d:71:4b:ea:b6:6b:96:9c:62:19:c1:72:6f:3c:
                    3d:26:84:af:c6:0d:19:89:f1:6f:67:f5:e6:70:bf:
                    8d:47:4a:a7:5f:a2:cc:3b:00:1a:12:82:6c:79:44:
                    56:11:03:f4:21:23:75:48:cc:a6:dc:88:07:18:f6:
                    28:69:55:7f:55:57:ce:52:1a:cd:07:10:7e:ea:85:
                    f2:d6:15:f7:c8:d0:99:a8:7c:ea:99:0f:1f:c2:1a:
                    2a:c9:38:87:97:77:6d:ff:a3:73:a1:11:ac:cf:95:
                    b1:5f:db:e0:00:7f:4e:60:6d:f8:5f:fc:43:53:51:
                    c7:83:34:71:f3:d2:ab:c4:21:80:53:25:3c:30:1b:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:F9:D1:B9:3B:27:C5:F8:D3:2A:C9:8B:09:FE:62:CF:22:8F:1D
            X509v3 Authority Key Identifier:
                keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/28741DDC85CD11ECA5E28171C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:40:76:8f:32:b0:ff:a3:05:4c:ac:47:b7:e5:51:6f:5d:
         c8:d6:e3:44:f0:59:f1:c6:77:3e:5e:ff:b6:cb:84:32:91:bc:
         e1:07:53:94:fa:96:15:e9:2c:fc:3a:eb:8c:6e:a0:75:da:a3:
         4d:78:75:6f:9c:ab:94:9c:e1:ca:5c:ad:fa:90:f7:fc:f3:6c:
         05:fe:08:4f:cb:a2:c7:27:47:2d:27:3f:55:8a:18:41:cb:11:
         7a:7e:8f:e4:15:57:91:9f:1e:c3:ba:a5:05:63:f7:c7:02:dd:
         73:a0:c9:13:ab:e7:46:9c:96:5f:99:e3:83:f8:1e:10:30:d3:
         48:db:67:28:bf:d8:5a:21:71:fa:23:20:23:c5:74:42:9f:2e:
         25:d8:ea:26:e3:ce:ab:fa:50:16:d5:56:07:e6:4a:3c:eb:94:
         72:37:64:c6:5c:83:fc:d5:ca:95:40:c3:77:0b:87:e7:d5:b7:
         c6:5a:db:ec:95:1f:c2:bf:c4:ad:03:cc:52:76:9c:21:64:aa:
         8d:09:38:70:79:f5:56:a9:16:4a:69:ec:67:82:00:8a:90:8c:
         52:55:55:87:1a:bd:f7:f3:8b:57:49:4d:f5:67:20:99:5e:b8:
         52:b6:fa:4a:b9:70:12:31:a1:4f:07:d9:10:53:15:9a:38:e0:
         b5:53:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:15 2026 by rpki-client