Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa
File:                     58D5764A683311ECB9C17757C4F9AE02.roa (raw, json)
Hash identifier:          B89plsbzpJPq8s829DD1iasXmMCvgKmuBXymcNPJP00=
Subject key identifier:   52:21:1C:06:DE:38:4F:4B:6F:20:2A:BF:55:ED:F9:56:F2:E8:E7:D9
Certificate issuer:       /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
Certificate serial:       3539
Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa
Signing time:             Thu 12 Feb 2026 15:10:28 +0000
ROA not before:           Thu 12 Feb 2026 15:10:28 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     17480
IP address blocks:        43.255.236.0/22 maxlen: 22
                          103.23.52.0/22 maxlen: 22
                          113.21.96.0/20 maxlen: 20
                          113.21.112.0/20 maxlen: 20
                          202.171.64.0/20 maxlen: 20
                          203.147.64.0/20 maxlen: 20
                          203.147.80.0/21 maxlen: 21
                          220.156.160.0/20 maxlen: 20
                          2401:c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl
                          rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13625 (0x3539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC
        Validity
            Not Before: Feb 12 15:10:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698ded64-da0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:cb:47:0f:b4:68:cf:54:64:cb:f8:04:6c:
                    3a:fb:ce:ab:6c:7c:02:2a:59:dd:72:b9:a9:15:52:
                    1b:14:b5:af:dc:78:98:ce:34:c3:87:0b:83:74:da:
                    95:45:d4:69:89:3e:6b:4d:dd:39:b8:af:e0:45:bd:
                    b0:59:0c:4f:b9:8f:f4:6e:9e:8b:e3:76:fc:f3:30:
                    33:6a:92:18:e0:5f:9a:b2:c5:ef:0d:ea:f2:b4:18:
                    31:71:a4:6a:56:e2:1c:5b:4d:d8:cd:c8:e8:e8:d1:
                    49:3a:e5:67:60:dd:83:0e:d5:c2:cd:cb:ae:34:50:
                    29:1e:67:3a:1a:66:7d:b7:33:d0:2b:86:ba:8e:50:
                    89:f2:fb:a9:3f:5e:89:0f:5c:8c:0d:d3:5f:66:3a:
                    63:23:d2:45:82:3c:06:0b:f2:74:41:96:df:52:99:
                    2e:b3:8c:e2:75:07:2d:02:91:63:69:57:a9:fe:81:
                    74:b1:cc:9d:c1:1c:5b:d5:ef:cb:1c:83:4c:bf:2d:
                    c8:fb:ee:5b:f2:bf:c3:97:22:a8:89:4c:b1:0a:a5:
                    a2:fa:47:1d:03:0f:28:29:7c:f3:4d:18:fe:24:f4:
                    a1:25:c8:3b:07:3f:2b:6e:a2:f1:8f:5e:63:a2:30:
                    77:72:e6:51:2d:a2:9d:72:5a:72:a2:86:c5:a4:d7:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:1C:06:DE:38:4F:4B:6F:20:2A:BF:55:ED:F9:56:F2:E8:E7:D9
            X509v3 Authority Key Identifier:
                keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/58D5764A683311ECB9C17757C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.236.0/22
                  103.23.52.0/22
                  113.21.96.0/19
                  202.171.64.0/20
                  203.147.64.0-203.147.87.255
                  220.156.160.0/20
                IPv6:
                  2401:c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:19:31:b6:2a:c9:76:d2:c4:63:cc:80:08:5b:13:74:78:89:
         5c:7e:64:df:0a:ac:19:da:d7:32:07:e9:fe:bb:e9:72:e0:e5:
         c1:7c:20:63:35:c1:98:fb:a2:9b:4e:7d:67:da:84:f0:1a:9f:
         2f:1c:8d:99:2c:f2:61:75:d1:ab:96:32:35:0c:5a:33:0b:3c:
         a3:50:4b:6c:11:f0:4c:c5:0b:de:b6:96:51:0f:2e:26:94:3b:
         af:67:c2:7a:45:2a:44:51:da:64:02:20:66:1b:e8:17:c7:21:
         4f:05:37:43:fe:f1:9b:72:f6:09:07:13:68:e3:f7:8d:ed:be:
         95:24:4d:51:52:08:cd:50:89:20:ce:06:02:7d:95:a8:f4:ef:
         7e:ae:16:a8:31:85:16:f9:9d:83:94:e7:ee:a0:d6:43:97:d3:
         99:40:36:9f:99:cb:b6:4a:f2:d0:14:e9:93:f9:53:4d:42:de:
         0c:2d:26:d5:23:fe:a7:dd:b0:d3:6a:a3:15:e8:64:f0:e6:68:
         3d:7f:0f:2e:7a:08:62:ed:9f:7e:87:2f:9c:79:dc:87:29:4c:
         0b:d4:a8:92:92:14:4d:23:18:70:81:85:5d:34:12:4b:87:5b:
         66:db:b2:50:91:43:7b:46:f2:2d:93:4c:19:bd:64:78:da:1c:
         15:f6:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:08 2026 by rpki-client