Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa
File:                     BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (raw, json)
Hash identifier:          IuH5kcHoFsLnyWqZvnPLZ41QjQrRVTRKSN253nyPkhI=
Subject key identifier:   33:C9:03:66:3C:39:4C:2E:21:FB:DF:A9:2B:70:C1:F6:2F:57:F7:72
Certificate issuer:       /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
Certificate serial:       0404
Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa
Signing time:             Fri 09 Jan 2026 11:42:32 +0000
ROA not before:           Fri 09 Jan 2026 11:42:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141732
IP address blocks:        103.162.234.0/23 maxlen: 24
                          2407:1e40::/32 maxlen: 32
                          2407:1e40:4::/46 maxlen: 46
                          2407:1e40:5::/48 maxlen: 48
                          2407:1e40:8::/46 maxlen: 46
                          2407:1e40:200::/48 maxlen: 48
                          2407:1e40:300::/48 maxlen: 48
                          2407:1e40:400::/48 maxlen: 48
                          2407:1e40:500::/48 maxlen: 48
                          2407:1e40:600::/48 maxlen: 48
                          2407:1e40:fce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl
                          rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
        Validity
            Not Before: Jan  9 11:42:32 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6960e9a8-dea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:93:4a:17:46:9c:03:89:1c:55:17:2e:d5:
                    d3:a4:14:81:fe:7c:09:c2:54:62:0d:69:d6:a1:f7:
                    a3:95:fd:a2:52:f5:78:d4:4a:c1:f2:c9:29:a9:22:
                    bd:a8:46:86:93:f1:c4:74:b1:a8:8f:cb:ee:68:6e:
                    62:a2:7f:09:4b:a7:3a:45:2d:f2:90:d4:3f:48:c0:
                    1e:45:3c:f1:3f:a6:62:7b:37:c4:29:59:99:3c:53:
                    40:4d:9d:51:78:36:8b:67:10:44:53:e1:34:b4:75:
                    3e:b3:d2:49:0a:35:aa:c3:9d:9c:d3:59:1b:01:6b:
                    57:bd:3f:eb:50:06:5f:fa:f4:b6:8b:d9:53:5d:dc:
                    3b:98:a5:da:86:58:d8:93:ac:ea:bd:ed:45:2a:11:
                    7f:ae:24:f1:e4:82:67:2b:ba:5b:4e:a8:17:96:0a:
                    c8:3c:d0:fe:12:6b:1e:59:ea:92:cb:fb:67:e1:eb:
                    af:07:d0:8e:af:3a:b4:e4:4f:00:6f:8a:6b:8e:05:
                    69:37:ad:21:ef:53:9a:91:6d:a4:c9:10:4f:f3:e7:
                    32:4c:78:65:26:7b:dd:64:95:ee:57:c8:29:44:7b:
                    bb:5d:6f:84:d5:0e:e6:db:bc:0f:42:85:ff:9b:59:
                    bf:60:1a:98:85:fe:1b:4c:1c:7e:0a:dd:46:b4:5b:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C9:03:66:3C:39:4C:2E:21:FB:DF:A9:2B:70:C1:F6:2F:57:F7:72
            X509v3 Authority Key Identifier:
                keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.234.0/23
                IPv6:
                  2407:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ba:fc:08:ee:a5:d9:f0:5e:2c:f6:72:c4:bf:58:d7:ea:db:
         9b:59:f9:17:2d:1a:17:3e:17:75:20:27:49:7e:4e:74:c8:0f:
         38:2f:84:ea:d9:ae:94:29:23:f6:f2:ca:c5:3e:29:36:d5:c8:
         fd:98:25:a5:05:e1:c5:ff:38:c6:f8:0c:c5:c7:09:b5:55:c2:
         a5:1a:b5:14:c4:34:f9:67:37:9c:13:26:ed:51:68:8b:46:ee:
         c8:61:eb:0a:20:df:15:b3:36:f4:30:d0:35:ec:04:ae:f5:3e:
         73:6f:7b:31:82:d6:d7:33:21:c2:c4:d9:e8:c7:4b:41:c3:92:
         71:56:52:ea:bd:a4:a0:ee:b1:04:86:4d:c0:13:4e:50:ed:3f:
         7d:30:2d:27:46:dd:70:e4:7a:0c:27:c0:08:dd:4b:b2:5c:83:
         cb:23:00:5c:a2:0a:ce:58:0a:a7:62:a3:f0:b3:dc:8a:d3:f4:
         61:35:e8:c3:d3:cf:e3:e5:2b:91:14:5f:46:ab:c4:c2:e1:03:
         f7:ab:5e:4f:2a:5d:97:ac:07:b1:71:66:fa:ce:03:2e:1a:fe:
         5d:c6:41:47:8a:e6:15:b8:1d:ee:52:61:a6:7d:47:e8:18:1b:
         ec:2b:59:4e:dc:c7:14:ef:77:fb:33:28:5a:5b:42:6f:9d:31:
         cc:13:d8:57
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0
REE0NkE3QTgwHhcNMjYwMTA5MTE0MjMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTYwZTlhOC1kZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOyTShdGnAOJHFUXLtXTpBSB/nwJwlRiDWnWofejlf2iUvV41ErB8skpqSK9
qEaGk/HEdLGoj8vuaG5ion8JS6c6RS3ykNQ/SMAeRTzxP6ZiezfEKVmZPFNATZ1R
eDaLZxBEU+E0tHU+s9JJCjWqw52c01kbAWtXvT/rUAZf+vS2i9lTXdw7mKXahljY
k6zqve1FKhF/riTx5IJnK7pbTqgXlgrIPND+EmseWeqSy/tn4euvB9COrzq05E8A
b4prjgVpN60h71OakW2kyRBP8+cyTHhlJnvdZJXuV8gpRHu7XW+E1Q7m27wPQoX/
m1m/YBqYhf4bTBx+Ct1GtFt+/QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDPJA2Y8
OUwuIfvfqStwwfYvV/dyMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw
RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjEwQjkvRDEzQkVBQUFBMEZCMTFFQ0E1RDFERjVCQzRGOUFFMDIvQkNEMEY2QjBB
MEZGMTFFQzkyNEQ0NDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnouowDQQCAAIwBwMFACQHHkAwDQYJKoZIhvcNAQELBQAD
ggEBAIy6/AjupdnwXiz2csS/WNfq25tZ+RctGhc+F3UgJ0l+TnTIDzgvhOrZrpQp
I/byysU+KTbVyP2YJaUF4cX/OMb4DMXHCbVVwqUatRTENPlnN5wTJu1RaItG7shh
6wog3xWzNvQw0DXsBK71PnNvezGC1tczIcLE2ejHS0HDknFWUuq9pKDusQSGTcAT
TlDtP30wLSdG3XDkegwnwAjdS7Jcg8sjAFyiCs5YCqdio/Cz3IrT9GE16MPTz+Pl
K5EUX0arxMLhA/erXk8qXZesB7FxZvrOAy4a/l3GQUeK5hW4He5SYaZ9R+gYG+wr
WU7cxxTvd/szKFpbQm+dMcwT2Fc=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:11 2026 by rpki-client