Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
File:                     AFED106A9E1511ECA4B98E73C4F9AE02.roa (raw, json)
Hash identifier:          6iE3D4tpVboANWIFKviVDEINazhj7qUPOFothoaPIOA=
Subject key identifier:   B1:59:DD:BD:CB:2A:8C:5B:B1:64:E1:1E:FE:03:50:B2:1B:DF:14:C8
Certificate issuer:       /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial:       041A
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 10:20:58 +0000
ROA not before:           Thu 05 Feb 2026 10:20:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149494
IP address blocks:        103.181.50.0/24 maxlen: 24
                          2001:df0:6840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
                          rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
        Validity
            Not Before: Feb  5 10:20:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69846f0a-6db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:fd:b6:fe:b7:0c:4d:b9:df:d8:d2:4c:a5:
                    6d:92:03:50:fb:10:a5:64:3a:c1:ce:e7:6a:21:8b:
                    45:76:c7:e8:c6:95:b5:58:1f:27:56:7b:a7:13:6f:
                    48:c1:74:bd:75:49:1f:e3:9b:7b:c2:6f:d2:0e:f2:
                    4c:73:b8:01:66:be:07:7d:35:22:b6:31:01:8b:06:
                    90:96:8a:4e:ee:ad:06:56:df:5c:90:1a:d3:ac:06:
                    2f:38:1c:90:50:e3:8c:53:ee:91:24:8f:07:0c:f2:
                    92:83:c5:9c:33:f5:f5:36:d7:ca:db:80:8c:3a:e0:
                    cc:37:47:35:db:3b:4e:49:a9:9d:75:a9:15:e3:67:
                    16:aa:69:13:aa:2b:02:c8:84:67:11:07:be:cd:87:
                    ab:00:c8:bd:78:02:16:56:a0:fa:8d:b5:86:9c:f2:
                    50:08:22:2e:9c:20:2c:72:a2:8e:9e:4e:61:39:f7:
                    36:30:7a:5c:89:f5:db:be:e2:d6:ea:ec:5f:f6:d9:
                    87:e9:af:6a:c9:e1:43:80:e1:c4:34:d5:08:1e:39:
                    f4:c1:6c:0c:0f:c1:23:2d:7d:d2:c8:fb:3e:48:97:
                    ef:72:a8:a6:76:ae:71:8b:6f:d0:d4:b8:e5:33:b5:
                    24:92:98:38:da:0d:b2:9d:fe:93:e8:bb:ea:1b:e8:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:DD:BD:CB:2A:8C:5B:B1:64:E1:1E:FE:03:50:B2:1B:DF:14:C8
            X509v3 Authority Key Identifier:
                keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.50.0/24
                IPv6:
                  2001:df0:6840::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:c4:82:e0:a7:f3:a1:ff:5a:37:2d:65:07:05:ce:6e:de:
         5c:55:b9:04:5e:a0:5b:30:2b:f0:d9:b2:f0:b7:40:b8:f1:cb:
         4e:2b:fa:14:53:51:07:0a:7e:a4:26:19:ce:28:4e:25:3c:76:
         79:94:28:62:0b:9d:87:42:ea:71:df:1c:f8:b8:2d:e3:db:86:
         a4:60:88:8b:ac:48:cd:cb:b5:5d:9a:39:22:58:c6:73:c1:e4:
         28:46:84:bc:e0:3c:2e:e0:24:a4:ac:d6:71:0c:da:64:8d:0f:
         fe:0d:23:0a:36:71:bb:9a:3c:df:14:2d:9b:2d:ac:86:9c:a8:
         6a:08:02:50:5a:db:b4:1d:83:8f:b0:6b:3a:e5:07:81:ee:a5:
         06:56:e9:91:d6:f1:3b:7d:d8:14:89:64:24:9f:9c:18:cc:c3:
         2e:33:3c:9b:cc:ec:bc:36:00:ef:ad:37:2e:d1:5d:77:f9:5b:
         03:47:e7:31:06:51:da:97:3b:d3:95:be:f7:cf:0f:e8:b9:c0:
         96:23:e0:0d:1d:f4:1d:70:9b:70:9a:47:2c:1f:43:25:50:51:
         a7:97:b2:ab:f1:78:9d:ac:bc:bb:fa:00:00:90:6b:a0:97:a0:
         ec:af:0f:43:89:b5:59:fb:ef:20:95:f7:d5:18:08:b3:77:86:
         74:4c:1c:b6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx
QTQzMkY0REIwHhcNMjYwMjA1MTAyMDU4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg0NmYwYS02ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvn9tv63DE2539jSTKVtkgNQ+xClZDrBzudqIYtFdsfoxpW1WB8nVnunE29I
wXS9dUkf45t7wm/SDvJMc7gBZr4HfTUitjEBiwaQlopO7q0GVt9ckBrTrAYvOByQ
UOOMU+6RJI8HDPKSg8WcM/X1NtfK24CMOuDMN0c12ztOSamddakV42cWqmkTqisC
yIRnEQe+zYerAMi9eAIWVqD6jbWGnPJQCCIunCAscqKOnk5hOfc2MHpcifXbvuLW
6uxf9tmH6a9qyeFDgOHENNUIHjn0wWwMD8EjLX3SyPs+SJfvcqimdq5xi2/Q1Ljl
M7Ukkpg42g2ynf6T6LvqG+geUQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLFZ3b3L
KoxbsWThHv4DULIb3xTIMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF
MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QThGOEEvNzIxOTVBRDQ5RTEzMTFFQ0IwOTFDRTcyQzRGOUFFMDIvQUZFRDEwNkE5
RTE1MTFFQ0E0Qjk4RTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABntTIwDwQCAAIwCQMHACABDfBoQDANBgkqhkiG9w0BAQsF
AAOCAQEAk5vEguCn86H/WjctZQcFzm7eXFW5BF6gWzAr8Nmy8LdAuPHLTiv6FFNR
Bwp+pCYZzihOJTx2eZQoYgudh0Lqcd8c+Lgt49uGpGCIi6xIzcu1XZo5IljGc8Hk
KEaEvOA8LuAkpKzWcQzaZI0P/g0jCjZxu5o83xQtmy2shpyoaggCUFrbtB2Dj7Br
OuUHge6lBlbpkdbxO33YFIlkJJ+cGMzDLjM8m8zsvDYA7603LtFdd/lbA0fnMQZR
2pc705W+988P6LnAliPgDR30HXCbcJpHLB9DJVBRp5eyq/F4nay8u/oAAJBroJeg
7K8PQ4m1WfvvIJX31RgIs3eGdEwctg==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:10 2026 by rpki-client