Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/4A5DD9CC091A11F19215EA74393D8C67.roa
File:                     4A5DD9CC091A11F19215EA74393D8C67.roa (raw, json)
Hash identifier:          Vj9x0fS6elO+NMxQrR13XIENeBuvEIJZa2Jdfg6qswA=
Subject key identifier:   A0:E4:00:D4:6A:53:A2:FB:F9:DE:19:C8:D1:FE:3A:21:8B:FB:D9:8D
Certificate issuer:       /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial:       067A
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/4A5DD9CC091A11F19215EA74393D8C67.roa
Signing time:             Fri 13 Feb 2026 20:26:35 +0000
ROA not before:           Fri 13 Feb 2026 20:26:35 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        103.153.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
        Validity
            Not Before: Feb 13 20:26:35 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=698f88fa-9a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:e2:3c:ba:62:3b:23:26:eb:c4:80:db:96:
                    69:57:54:0a:d9:f7:5a:98:b7:9a:fc:b2:53:a5:e0:
                    c4:55:6c:3b:f1:98:28:7a:ae:bd:bc:0e:52:f7:c6:
                    6f:c9:31:1d:0a:b8:4b:fd:21:03:e3:d3:3b:2d:81:
                    71:2c:d5:9a:c9:b0:59:42:eb:8e:26:cf:e7:05:25:
                    e0:65:cf:7a:30:a0:d9:0d:14:32:89:db:8c:61:c3:
                    00:d5:6f:c3:5f:c1:86:e7:78:12:38:fc:d6:8f:2f:
                    b7:70:48:f0:bb:32:7c:97:ac:54:35:5d:a7:fe:79:
                    41:36:61:df:5c:f5:81:7e:90:12:3d:1a:0f:14:60:
                    dc:7d:67:fa:9e:93:8a:0d:6e:a6:c6:34:7e:b4:6f:
                    f1:62:ca:a2:16:e2:48:78:2f:b8:50:c5:24:67:1b:
                    2d:ca:0f:6b:59:ba:7c:ff:30:f1:bf:29:4d:d3:40:
                    bc:15:b4:ac:bf:17:18:c1:45:e3:f2:f2:e7:dd:66:
                    99:51:97:90:2e:51:7f:29:9b:be:00:3e:9d:e8:33:
                    68:45:30:46:2a:59:7f:66:c8:37:3f:23:e8:4d:5f:
                    9d:27:15:ca:a2:7f:6d:6e:57:45:bc:cc:4d:4f:9c:
                    74:ab:a7:3b:e2:49:79:1d:e8:f4:90:0d:b7:b0:6c:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E4:00:D4:6A:53:A2:FB:F9:DE:19:C8:D1:FE:3A:21:8B:FB:D9:8D
            X509v3 Authority Key Identifier:
                keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/4A5DD9CC091A11F19215EA74393D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:73:6a:c5:f6:4b:6b:34:13:46:5f:9e:ef:cf:38:40:f1:
         4e:4e:ab:b0:65:13:03:b9:34:3e:33:e5:22:b7:f8:12:73:fd:
         f9:c3:dd:12:61:33:ab:47:95:6f:46:37:33:43:68:81:b1:48:
         65:93:b7:58:cd:d6:aa:0f:e5:6c:61:1f:52:9b:b7:c9:20:ef:
         da:66:bf:5d:87:e1:09:ae:09:8b:71:b9:35:1c:4c:5a:ea:ff:
         19:d8:a8:b4:ef:9c:05:96:9f:af:9c:24:f8:9a:6b:14:c5:17:
         a7:a9:46:43:27:fe:8c:4b:a5:f2:e4:6e:77:7d:33:de:21:f7:
         25:75:c1:b0:8f:1d:ed:42:84:82:51:7f:f8:b2:41:d2:1f:b6:
         d1:24:68:47:2d:b1:89:02:5c:52:c3:a6:56:7a:5b:5a:60:ae:
         bb:a7:ed:a9:87:89:df:52:0c:27:45:26:fa:9b:44:0e:ae:a3:
         b1:84:02:fe:7b:88:78:f4:22:0d:ef:3f:7b:8e:6f:db:ad:c4:
         65:90:20:1f:46:35:2a:90:36:ae:d7:24:92:41:e4:2e:15:39:
         4d:35:72:b9:d9:ef:9d:da:26:90:f0:9b:05:c2:56:96:c8:c8:
         93:c3:bb:8b:80:1b:b9:81:17:4d:26:bb:03:9c:31:92:a5:cc:
         94:01:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:54 2026 by rpki-client