Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa
File:                     678DA8FE59D211EAB77C8C13C4F9AE02.roa (raw, json)
Hash identifier:          75VY0NIqOvCFWbwmPIUGG2OjWCvK1rQk4MNMc1FqNxI=
Subject key identifier:   C2:C9:52:C8:80:A4:58:0F:C8:57:20:A6:1F:A4:97:60:25:B0:67:4D
Certificate issuer:       /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial:       23B1
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 16:13:17 +0000
ROA not before:           Fri 30 Jan 2026 16:13:17 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55943
IP address blocks:        43.249.176.0/22 maxlen: 23
                          103.4.72.0/22 maxlen: 23
                          113.197.68.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9137 (0x23b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
        Validity
            Not Before: Jan 30 16:13:17 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697cd89d-6691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:01:96:c0:09:7f:d6:a0:88:d4:65:16:b7:
                    9c:4b:cc:34:42:9a:11:d5:be:b3:97:52:0e:a0:d0:
                    91:f9:77:e1:71:fb:49:db:91:4b:22:91:1c:2e:b1:
                    9c:48:9a:a2:32:d1:f7:51:10:50:75:d6:6e:3c:dd:
                    51:4f:8b:a2:bf:af:0c:c4:e9:c1:22:b2:ea:e6:47:
                    08:2c:47:9b:4a:3b:41:85:2f:bf:03:3e:59:84:ad:
                    1f:b2:fc:fe:2d:78:09:13:be:07:eb:ba:4b:7b:9b:
                    30:5f:2c:97:cf:c0:85:bc:6e:23:8d:77:b3:ca:e2:
                    d9:41:ff:e9:3e:38:6c:e6:cf:0e:5f:3e:f6:f0:79:
                    2e:c6:d1:73:b8:b5:fe:90:d2:61:35:33:3f:90:46:
                    57:db:f9:13:a1:3c:dd:ac:c3:39:7c:51:ec:f6:40:
                    bd:dd:e9:8c:fc:8b:6e:65:8f:fc:14:30:4a:99:cb:
                    7b:54:f7:2a:f0:39:e3:89:d5:b8:14:8b:e3:80:e7:
                    46:bb:48:7a:b0:32:43:6d:b3:f4:b7:13:dd:b7:af:
                    76:fb:19:af:16:00:6e:03:24:2d:e9:1e:10:e8:7c:
                    93:e8:3b:d3:fa:ea:c1:48:40:64:54:df:99:b4:4f:
                    44:dc:02:d9:2f:17:24:a6:39:47:dc:cd:c6:12:a9:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C9:52:C8:80:A4:58:0F:C8:57:20:A6:1F:A4:97:60:25:B0:67:4D
            X509v3 Authority Key Identifier:
                keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/678DA8FE59D211EAB77C8C13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.249.176.0/22
                  103.4.72.0/22
                  113.197.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:ef:71:b4:30:69:5b:e5:0c:69:59:eb:68:51:12:76:11:
         ea:09:48:b8:7e:37:8a:26:5f:da:02:46:50:df:d0:f4:6e:ba:
         b0:c7:ac:dd:01:ed:e3:ee:1b:09:3b:18:b1:82:04:29:af:31:
         cb:97:c3:b2:c1:43:8c:49:58:44:e5:21:92:50:34:93:03:a7:
         cc:1f:e9:2c:1c:57:cb:1a:4a:a9:e6:1c:7b:44:f2:bf:4a:ac:
         3c:74:e3:da:29:02:b5:a1:23:cf:ac:ae:49:5a:b5:7c:3f:7c:
         5c:96:6c:33:06:80:f4:5f:1b:ee:44:8a:03:92:03:dc:ff:38:
         8e:b2:f9:e1:fa:9a:60:4b:04:f5:64:3f:ef:8c:4e:74:17:66:
         e8:22:7d:0b:a5:9b:a3:70:7b:82:1c:c8:2f:7a:38:8f:e6:6f:
         40:45:d1:68:db:61:22:48:4c:44:98:b6:a4:ee:de:cd:b3:63:
         38:5a:52:ac:e2:bf:1d:8d:06:a8:c3:20:1e:82:d9:2b:2a:71:
         5a:45:9e:66:d1:c0:1a:71:ca:91:fb:59:76:70:d5:d6:c8:b4:
         ca:bb:dd:07:9d:6f:27:37:2e:19:ea:fd:b6:b5:59:30:c7:f0:
         59:dd:15:08:16:29:b6:ed:b2:8c:8a:28:5c:9b:17:65:85:ff:
         d6:25:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:11:06 2026 by rpki-client