Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
File:                     DFCE0CFC387311EBA0AC593EC4F9AE02.roa (raw, json)
Hash identifier:          V1DI/9mBxy1BlPs2TT3yx8NsXkHJzBliTwoAN9ceLj0=
Subject key identifier:   9E:3E:75:EA:BA:E4:2C:1B:F6:24:E5:B7:F4:51:BE:1F:E0:2F:D0:8A
Certificate issuer:       /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
Certificate serial:       079F
Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
Signing time:             Fri 30 Jan 2026 21:18:36 +0000
ROA not before:           Fri 30 Jan 2026 21:18:36 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     141447
IP address blocks:        103.159.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl
                          rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2
        Validity
            Not Before: Jan 30 21:18:36 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697d202c-1847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:c6:14:e8:62:8f:4e:65:64:f9:58:3a:a3:
                    76:1b:d3:5a:16:77:8f:7b:6e:20:d5:75:97:21:ac:
                    59:fc:c2:bc:21:7a:3f:76:ee:19:1e:d7:3b:03:c2:
                    dd:96:96:44:77:f6:70:8e:79:5a:1a:f5:af:6e:19:
                    2c:cc:93:3e:cd:b9:60:a7:b4:a7:06:a8:dc:3e:56:
                    02:3e:3c:0d:46:dc:b6:63:ed:1f:91:4c:8b:b1:e0:
                    72:8c:9e:41:b1:7f:89:ff:90:f9:d7:85:ac:11:1e:
                    3f:0f:ed:6b:5e:99:b6:f1:50:22:57:e2:43:53:b1:
                    33:10:04:73:dd:d7:6a:28:43:7b:f8:ae:44:e0:f9:
                    33:8f:74:46:33:e3:64:1a:32:90:8e:99:bb:fd:d6:
                    e1:6c:19:6c:fa:f1:d3:65:89:d1:76:b7:c9:bb:8a:
                    fa:48:76:5f:76:84:61:6c:71:84:b9:27:32:12:58:
                    f1:62:65:ed:fa:0e:e0:e3:d6:63:62:b2:17:1d:69:
                    c9:8b:b5:8b:36:11:3c:bf:c5:7e:47:7d:dc:3a:c5:
                    3c:d8:76:0f:93:2a:5f:e2:98:e6:cd:c2:cf:70:0e:
                    fd:93:81:ec:02:14:88:92:f2:d7:c2:73:dc:cd:60:
                    f4:77:08:d1:f5:b6:23:fb:5c:cf:06:15:83:c5:d4:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:75:EA:BA:E4:2C:1B:F6:24:E5:B7:F4:51:BE:1F:E0:2F:D0:8A
            X509v3 Authority Key Identifier:
                keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/DFCE0CFC387311EBA0AC593EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b7:e3:90:4f:0c:69:b6:4a:33:05:d6:47:cb:f0:d9:c3:b2:
         7a:d7:db:93:16:28:79:68:64:14:df:b5:f7:b7:92:6a:ef:30:
         c1:68:fa:95:ba:55:1c:65:68:72:da:7a:aa:a1:ad:cf:6e:d9:
         75:c9:fd:b9:b8:7a:82:9d:d1:cb:fc:7c:c0:59:cc:2f:ea:ec:
         2d:c0:0d:a6:6f:17:a2:20:5a:c5:17:5d:90:71:5e:c2:94:a6:
         bb:03:8d:24:c5:bb:23:0e:35:dc:11:98:63:4c:60:36:2c:d2:
         8c:d6:e6:32:ed:c3:c7:97:fe:74:28:99:72:45:e6:45:11:be:
         99:1f:b4:89:4a:ff:d4:1a:18:ad:8f:f0:bc:27:57:a9:1a:3c:
         19:67:c5:28:13:8f:10:8f:a6:50:ba:98:87:13:c5:72:10:85:
         9a:0a:0f:a1:05:d0:98:e9:21:36:58:08:51:b3:77:41:86:57:
         8b:9d:a8:e0:5b:12:be:75:76:a1:20:0c:83:75:98:60:95:7c:
         92:b4:99:43:14:9d:71:10:84:63:44:f0:42:fb:82:16:30:33:
         2b:02:21:de:c1:82:d1:2c:5a:30:73:20:f9:e8:81:98:5e:1c:
         5e:ce:7e:49:1f:45:0e:0f:c2:b3:36:38:0a:ce:ba:ae:be:57:
         8f:83:13:9b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjE4OUIxMTAvBgNVBAUTKEZEMkE5RDVFRkFCOTExMUIwQTVBMzAxM0YzNEMyQ0JE
QUZEMDFGQzIwHhcNMjYwMTMwMjExODM2WhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkMjAyYy0xODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyETGFOhij05lZPlYOqN2G9NaFnePe24g1XWXIaxZ/MK8IXo/du4ZHtc7A8Ld
lpZEd/ZwjnlaGvWvbhkszJM+zblgp7SnBqjcPlYCPjwNRty2Y+0fkUyLseByjJ5B
sX+J/5D514WsER4/D+1rXpm28VAiV+JDU7EzEARz3ddqKEN7+K5E4Pkzj3RGM+Nk
GjKQjpm7/dbhbBls+vHTZYnRdrfJu4r6SHZfdoRhbHGEuScyEljxYmXt+g7g49Zj
YrIXHWnJi7WLNhE8v8V+R33cOsU82HYPkypf4pjmzcLPcA79k4HsAhSIkvLXwnPc
zWD0dwjR9bYj+1zPBhWDxdSY7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ4+deq6
5Cwb9iTlt/RRvh/gL9CKMB8GA1UdIwQYMBaAFP0qnV76uREbClowE/NMLL2v0B/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTg5Qi8zMjhCREQ0MDM4
NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVSc0tXakFUODB3c3ZhX1FI
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19TcWRYdnE1RVJzS1dqQVQ4MHdzdmFfUUg4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjE4OUIvMzI4QkRENDAzODcyMTFFQjk5N0FBMjNBQzRGOUFFMDIvREZDRTBDRkMz
ODczMTFFQkEwQUM1OTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnn6MwDQYJKoZIhvcNAQELBQADggEBAGi345BPDGm2SjMF
1kfL8NnDsnrX25MWKHloZBTftfe3kmrvMMFo+pW6VRxlaHLaeqqhrc9u2XXJ/bm4
eoKd0cv8fMBZzC/q7C3ADaZvF6IgWsUXXZBxXsKUprsDjSTFuyMONdwRmGNMYDYs
0ozW5jLtw8eX/nQomXJF5kURvpkftIlK/9QaGK2P8LwnV6kaPBlnxSgTjxCPplC6
mIcTxXIQhZoKD6EF0JjpITZYCFGzd0GGV4udqOBbEr51dqEgDIN1mGCVfJK0mUMU
nXEQhGNE8EL7ghYwMysCId7BgtEsWjBzIPnogZheHF7OfkkfRQ4PwrM2OArOuq6+
V4+DE5s=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:15 2026 by rpki-client