Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/8C78A208009911F18C66F2A2636F56BC.roa
File:                     8C78A208009911F18C66F2A2636F56BC.roa (raw, json)
Hash identifier:          v6MDwo0gsjgOAYC5ktjybOobuDwqvI9uXRAxJzr7wSk=
Subject key identifier:   AC:A9:E0:51:5C:42:15:2C:DF:93:6F:57:8C:E2:F2:C4:47:18:48:F4
Certificate issuer:       /CN=A91937EA/serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
Certificate serial:       071D
Authority key identifier: 09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/8C78A208009911F18C66F2A2636F56BC.roa
Signing time:             Tue 03 Feb 2026 00:44:51 +0000
ROA not before:           Tue 03 Feb 2026 00:44:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136802
IP address blocks:        103.96.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl
                          rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91937EA, serialNumber=0911E99AADF664F039929CABBB4874A3A161CAAD
        Validity
            Not Before: Feb  3 00:44:51 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69814503-98e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:26:1c:ed:44:27:92:16:87:31:8c:5a:e9:
                    1e:6e:f1:4e:67:1a:82:ad:92:19:64:ea:b8:82:87:
                    dc:f7:6b:0e:6a:76:dc:22:14:b7:b8:12:98:2a:91:
                    69:ca:17:ac:f0:6a:9d:61:7f:7c:aa:f5:9d:7f:19:
                    94:41:57:bb:bf:05:5a:65:25:e2:67:b4:b5:54:03:
                    be:12:29:6b:6a:e4:ae:4c:0b:f1:c8:c6:f7:cb:3a:
                    cc:f3:49:c6:aa:64:ba:7e:97:f9:ee:8d:81:cf:b8:
                    68:ad:3e:44:17:26:a2:cf:7a:da:5c:fc:a0:27:46:
                    fa:fb:83:ee:e7:22:e3:23:8f:1f:86:a6:9f:50:04:
                    c8:fd:77:d2:9a:1f:59:00:e1:aa:85:2f:3f:fd:a2:
                    f0:db:ff:1f:09:9f:30:a0:a9:09:59:d0:1e:44:97:
                    7e:09:66:03:15:16:36:74:50:dd:cf:16:30:e1:5d:
                    70:63:46:8f:6e:69:1c:21:57:d5:0e:c6:b5:c2:f6:
                    6f:6d:b7:db:19:14:f0:a0:ad:27:5c:35:ca:53:d9:
                    9c:40:45:dc:cb:ed:8f:08:74:0c:b7:67:15:eb:40:
                    84:e2:c0:4c:99:49:ce:64:23:b0:dc:98:9e:79:f6:
                    38:53:93:cf:d8:78:23:91:c8:fa:7f:36:c2:f7:04:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A9:E0:51:5C:42:15:2C:DF:93:6F:57:8C:E2:F2:C4:47:18:48:F4
            X509v3 Authority Key Identifier:
                keyid:09:11:E9:9A:AD:F6:64:F0:39:92:9C:AB:BB:48:74:A3:A1:61:CA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/CRHpmq32ZPA5kpyru0h0o6Fhyq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRHpmq32ZPA5kpyru0h0o6Fhyq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937EA/1E9656306A5911EBA3641C3DC4F9AE02/8C78A208009911F18C66F2A2636F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:42:e3:9c:0a:81:eb:46:54:d7:4f:91:3d:63:d8:cf:c1:
         12:f6:15:e3:86:7f:f9:1a:60:5a:d7:0c:66:51:ac:db:1e:12:
         26:a6:97:cf:8f:56:1e:e7:30:5e:d2:d0:ad:d1:b6:bd:ab:19:
         a1:5d:ab:56:de:cc:9c:9b:0d:b5:80:0c:32:3d:75:ee:ff:2f:
         ea:bc:84:cd:a6:94:60:60:77:a4:7f:5a:3d:a9:b2:f9:c3:dd:
         10:04:28:73:2f:1b:88:96:c4:0a:30:49:27:11:0f:07:b1:a6:
         ff:38:3b:29:00:91:08:46:8a:9d:69:9a:5f:44:38:aa:20:5c:
         45:8f:c3:a5:5c:66:04:1c:31:3e:f9:2d:a7:9b:ea:25:b1:68:
         59:9f:ca:8d:ad:62:d7:41:d7:c1:9e:08:13:b7:35:3e:20:95:
         40:56:8f:01:b6:6a:b8:fd:bc:99:f8:03:71:57:9b:3f:65:15:
         c7:ef:53:2e:c2:5d:10:af:8e:ca:45:43:39:7d:13:5e:e5:c9:
         b7:e9:a9:0b:1f:9d:35:27:71:2f:48:c5:35:28:4c:13:29:b3:
         9f:16:5d:26:b8:35:8a:2f:9e:93:c5:99:e3:ed:42:46:41:87:
         77:d2:2b:c2:ce:d6:01:dc:03:e3:31:88:c7:9e:f2:0e:27:29:
         76:35:b4:02
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM3RUExMTAvBgNVBAUTKDA5MTFFOTlBQURGNjY0RjAzOTkyOUNBQkJCNDg3NEEz
QTE2MUNBQUQwHhcNMjYwMjAzMDA0NDUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxNDUwMy05OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMEmHO1EJ5IWhzGMWukebvFOZxqCrZIZZOq4gofc92sOanbcIhS3uBKYKpFp
yhes8GqdYX98qvWdfxmUQVe7vwVaZSXiZ7S1VAO+EilrauSuTAvxyMb3yzrM80nG
qmS6fpf57o2Bz7horT5EFyaiz3raXPygJ0b6+4Pu5yLjI48fhqafUATI/XfSmh9Z
AOGqhS8//aLw2/8fCZ8woKkJWdAeRJd+CWYDFRY2dFDdzxYw4V1wY0aPbmkcIVfV
Dsa1wvZvbbfbGRTwoK0nXDXKU9mcQEXcy+2PCHQMt2cV60CE4sBMmUnOZCOw3Jie
efY4U5PP2Hgjkcj6fzbC9wQD9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKyp4FFc
QhUs35NvV4zi8sRHGEj0MB8GA1UdIwQYMBaAFAkR6Zqt9mTwOZKcq7tIdKOhYcqt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzdFQS8xRTk2NTYzMDZB
NTkxMUVCQTM2NDFDM0RDNEY5QUUwMi9DUkhwbXEzMlpQQTVrcHlydTBoMG82Rmh5
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NSSHBtcTMyWlBBNWtweXJ1MGgwbzZGaHlxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTM3RUEvMUU5NjU2MzA2QTU5MTFFQkEzNjQxQzNEQzRGOUFFMDIvOEM3OEEyMDgw
MDk5MTFGMThDNjZGMkEyNjM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnYIYwDQYJKoZIhvcNAQELBQADggEBAI4AQuOcCoHrRlTX
T5E9Y9jPwRL2FeOGf/kaYFrXDGZRrNseEiaml8+PVh7nMF7S0K3Rtr2rGaFdq1be
zJybDbWADDI9de7/L+q8hM2mlGBgd6R/Wj2psvnD3RAEKHMvG4iWxAowSScRDwex
pv84OykAkQhGip1pml9EOKogXEWPw6VcZgQcMT75Laeb6iWxaFmfyo2tYtdB18Ge
CBO3NT4glUBWjwG2arj9vJn4A3FXmz9lFcfvUy7CXRCvjspFQzl9E17lybfpqQsf
nTUncS9IxTUoTBMps58WXSa4NYovnpPFmePtQkZBh3fSK8LO1gHcA+MxiMee8g4n
KXY1tAI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:57 2026 by rpki-client