Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa
File:                     1D171A58C76211EC95B63648C4F9AE02.roa (raw, json)
Hash identifier:          F0S15cw+jaynWqIGufdsuY1fwhWKiubFPlEVsSQvHrc=
Subject key identifier:   2E:04:A6:C5:7E:74:55:DA:03:74:29:8B:34:D5:11:D3:F0:8B:03:98
Certificate issuer:       /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial:       03F4
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa
Signing time:             Wed 11 Feb 2026 00:20:56 +0000
ROA not before:           Wed 11 Feb 2026 00:20:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136237
IP address blocks:        103.84.136.0/22 maxlen: 24
                          2400:a040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
                          rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
        Validity
            Not Before: Feb 11 00:20:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698bcb68-110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:cd:63:b2:27:f1:2e:6c:57:0e:91:02:a2:
                    ff:9b:26:f6:0c:12:ae:51:6c:bd:9e:58:e2:88:cd:
                    5f:e0:50:de:88:e6:a2:f2:80:7b:94:97:aa:25:53:
                    11:b4:46:dc:f8:69:df:37:d3:a6:96:18:a2:77:a5:
                    b7:fc:34:3e:f3:9a:92:c5:bd:59:9d:2c:21:23:b0:
                    4a:81:71:48:86:a7:55:4a:cb:87:1b:39:05:f2:bf:
                    ca:cb:03:02:47:32:1f:87:78:38:17:e6:eb:55:e4:
                    ac:35:e2:51:53:c8:6e:62:ee:3a:ad:7a:64:87:cb:
                    60:59:f5:25:f8:29:35:11:f9:e9:de:90:65:d1:19:
                    da:1d:57:82:e9:6f:91:5b:66:fc:89:5b:0e:c8:d8:
                    94:d8:44:81:03:2b:f1:3a:f9:40:1a:13:ee:ae:d1:
                    70:99:ab:cf:06:3b:c4:1e:d9:b8:44:ba:bd:2a:09:
                    46:19:f8:ae:97:60:42:53:6f:b2:a1:fc:b1:f6:f0:
                    f7:33:6b:a9:59:50:fc:99:f0:02:8e:1e:9b:c4:60:
                    8d:a1:79:d1:0d:ae:d2:cc:bb:6a:fd:15:f8:47:f2:
                    cc:f6:6f:9b:67:05:83:2d:16:f8:e9:1e:ba:87:1d:
                    b4:c8:88:10:78:bd:c4:84:9b:68:64:16:be:f8:e6:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:04:A6:C5:7E:74:55:DA:03:74:29:8B:34:D5:11:D3:F0:8B:03:98
            X509v3 Authority Key Identifier:
                keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/1D171A58C76211EC95B63648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.136.0/22
                IPv6:
                  2400:a040::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:b5:33:c0:7d:47:04:72:01:73:cf:9a:03:94:45:32:68:
         86:ab:fc:46:06:e7:e8:77:cf:23:d9:82:dd:ef:b1:6b:22:d1:
         fa:cd:74:71:2e:27:c0:82:8c:bd:c4:0d:3a:03:dc:95:48:f6:
         15:35:b5:f8:b8:e7:81:1c:82:2a:8a:8a:dd:f7:23:cd:87:ec:
         fb:99:c0:f5:5b:fd:e2:22:24:dd:60:dc:3a:88:66:1d:71:67:
         1c:f4:30:ab:ac:b6:c1:e2:77:4b:40:b1:ea:8e:ff:d1:b4:4c:
         f1:f9:5c:89:b0:cd:dd:b2:00:50:03:c0:30:45:4c:6d:12:bb:
         58:7d:52:03:4c:25:e0:c5:8a:61:dd:cf:20:4b:30:ef:e6:7d:
         c5:38:88:5f:86:82:aa:b0:82:b9:bc:86:0b:70:10:5a:36:ec:
         95:7b:ab:fc:03:22:d2:31:60:4c:bf:1f:04:2b:22:12:de:db:
         45:f7:88:46:3d:51:bf:a2:98:94:9e:6a:90:a9:c6:00:51:dc:
         e1:82:6a:3e:84:9f:74:22:e0:8b:87:2e:c4:cd:6e:f7:e5:01:
         bc:ba:34:a2:2a:70:69:62:7d:c3:1f:55:06:a7:ec:0a:11:47:
         b3:09:a9:cc:bb:dd:05:b7:92:a9:f9:4e:7d:a9:47:62:35:17:
         6a:4f:d6:44
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy
QkIyMDdBNkQwHhcNMjYwMjExMDAyMDU2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThiY2I2OC0xMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0XNY7In8S5sVw6RAqL/myb2DBKuUWy9nljiiM1f4FDeiOai8oB7lJeqJVMR
tEbc+GnfN9Omlhiid6W3/DQ+85qSxb1ZnSwhI7BKgXFIhqdVSsuHGzkF8r/KywMC
RzIfh3g4F+brVeSsNeJRU8huYu46rXpkh8tgWfUl+Ck1Efnp3pBl0RnaHVeC6W+R
W2b8iVsOyNiU2ESBAyvxOvlAGhPurtFwmavPBjvEHtm4RLq9KglGGfiul2BCU2+y
ofyx9vD3M2upWVD8mfACjh6bxGCNoXnRDa7SzLtq/RX4R/LM9m+bZwWDLRb46R66
hx20yIgQeL3EhJtoZBa++Oba5wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC4EpsV+
dFXaA3QpizTVEdPwiwOYMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy
RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTMzMzkvNDUyNjc5NzBCMkZBMTFFQ0I1NzRDRTdGQzRGOUFFMDIvMUQxNzFBNThD
NzYyMTFFQzk1QjYzNjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnVIgwDQQCAAIwBwMFACQAoEAwDQYJKoZIhvcNAQELBQAD
ggEBAFxdtTPAfUcEcgFzz5oDlEUyaIar/EYG5+h3zyPZgt3vsWsi0frNdHEuJ8CC
jL3EDToD3JVI9hU1tfi454EcgiqKit33I82H7PuZwPVb/eIiJN1g3DqIZh1xZxz0
MKustsHid0tAseqO/9G0TPH5XImwzd2yAFADwDBFTG0Su1h9UgNMJeDFimHdzyBL
MO/mfcU4iF+Ggqqwgrm8hgtwEFo27JV7q/wDItIxYEy/HwQrIhLe20X3iEY9Ub+i
mJSeapCpxgBR3OGCaj6En3Qi4IuHLsTNbvflAby6NKIqcGlifcMfVQan7AoRR7MJ
qcy73QW3kqn5Tn2pR2I1F2pP1kQ=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:31:59 2026 by rpki-client