Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa
File:                     61883292ADA511EDB2C68947C4F9AE02.roa (raw, json)
Hash identifier:          z6zWlbEveqG9BlPw0TEzHPXoSXvXqwK3+ZS+V7Gk/co=
Subject key identifier:   DD:99:C4:19:7E:57:62:5A:33:DD:E0:69:72:D7:3B:39:9C:D6:75:4A
Certificate issuer:       /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial:       023E
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa
Signing time:             Wed 11 Feb 2026 02:22:06 +0000
ROA not before:           Wed 11 Feb 2026 02:22:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133480
IP address blocks:        203.17.122.0/24 maxlen: 24
                          203.18.16.0/24 maxlen: 24
                          203.18.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
                          rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
        Validity
            Not Before: Feb 11 02:22:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698be7ce-e35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:f4:33:78:c9:07:6f:68:54:b9:30:94:85:
                    99:23:5a:68:ed:f0:1a:63:53:c2:44:e4:a7:d8:fd:
                    20:68:f3:66:42:25:89:73:fb:28:5e:87:bb:d6:8b:
                    3a:70:0e:c9:11:de:5a:c7:7b:ed:49:f2:43:8c:9c:
                    3f:c7:0d:42:f1:f1:00:5d:fb:ae:cf:2d:67:14:cb:
                    8e:17:56:c7:9c:ae:95:7d:e3:58:ce:44:8a:75:28:
                    7c:79:8f:22:ca:72:50:1a:c4:2f:fe:80:ae:e9:d9:
                    f7:13:55:50:13:bf:59:d6:e0:d9:c3:98:64:ef:fc:
                    f1:53:f7:19:ca:68:51:df:b4:b7:e0:4c:f9:38:a7:
                    62:6b:4f:19:e4:5d:9c:81:01:ce:9c:97:84:9f:1b:
                    a7:c9:a2:f9:25:90:f3:2b:c6:b8:1c:9f:13:10:d5:
                    21:ce:e3:70:d5:55:19:71:ee:95:af:58:15:cd:49:
                    8a:c8:5c:71:94:1f:d0:ab:e3:ab:c3:b3:d6:73:27:
                    30:04:b4:d9:14:9a:6f:e5:28:a8:82:27:f0:7a:5d:
                    b2:76:7b:80:2d:6d:bb:a2:b8:37:4e:dc:f7:22:99:
                    23:ea:b9:b2:40:20:bd:33:b8:3b:e6:74:09:6f:c0:
                    d0:7d:bd:1c:1e:a3:86:2d:0b:66:0d:52:e0:a2:7c:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:C4:19:7E:57:62:5A:33:DD:E0:69:72:D7:3B:39:9C:D6:75:4A
            X509v3 Authority Key Identifier:
                keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/61883292ADA511EDB2C68947C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.122.0/24
                  203.18.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:c3:a5:16:e1:ee:37:fa:40:dd:d9:34:15:77:cc:b4:4b:
         92:3e:ba:a1:b2:9f:95:89:68:ae:94:21:06:d4:b7:04:df:fd:
         5a:e8:66:e6:79:97:39:d1:1a:cb:bc:3f:76:fd:b4:69:9e:db:
         da:ec:54:bf:07:4c:ea:d8:f0:f0:00:0d:99:53:27:3c:c7:4c:
         09:9e:4b:78:96:27:e1:7b:a6:7e:35:49:a6:62:56:9b:0f:4a:
         c1:5e:8c:53:42:7c:f9:d1:0d:65:5a:1e:1a:f8:1f:09:1a:a7:
         4f:00:28:3d:32:1b:9f:89:d5:60:6b:41:73:29:83:6d:7d:db:
         27:0b:55:ba:ad:bf:e4:84:e7:b1:2b:0d:50:16:7c:99:05:23:
         98:38:78:0a:9e:ea:2a:85:6a:55:45:34:75:6b:84:4d:36:e5:
         40:ba:ad:41:88:b6:7b:51:19:a3:54:ca:2b:8c:3e:5a:07:85:
         b7:af:76:23:80:87:54:a8:cc:62:aa:d4:c7:ce:bd:77:77:4f:
         5d:68:c9:03:35:67:d0:b6:f0:dd:23:8c:9c:98:4c:65:80:51:
         09:dd:1c:7f:9f:44:41:0d:cf:00:51:ab:7b:b4:01:f8:71:f8:
         ad:1b:09:d1:de:e1:4a:2f:43:04:a9:2a:d6:6c:1a:dd:da:49:
         99:cd:c0:af
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE
N0E4MzI5RDAwHhcNMjYwMjExMDIyMjA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThiZTdjZS1lMzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvz70M3jJB29oVLkwlIWZI1po7fAaY1PCROSn2P0gaPNmQiWJc/soXoe71os6
cA7JEd5ax3vtSfJDjJw/xw1C8fEAXfuuzy1nFMuOF1bHnK6VfeNYzkSKdSh8eY8i
ynJQGsQv/oCu6dn3E1VQE79Z1uDZw5hk7/zxU/cZymhR37S34Ez5OKdia08Z5F2c
gQHOnJeEnxunyaL5JZDzK8a4HJ8TENUhzuNw1VUZce6Vr1gVzUmKyFxxlB/Qq+Or
w7PWcycwBLTZFJpv5Siogifwel2ydnuALW27org3Ttz3Ipkj6rmyQCC9M7g75nQJ
b8DQfb0cHqOGLQtmDVLgonyxfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN2ZxBl+
V2JaM93gaXLXOzmc1nVKMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE
QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjgzNEQvM0EyQzUxOTZBREExMTFFREFCNkRGNDJEQzRGOUFFMDIvNjE4ODMyOTJB
REE1MTFFREIyQzY4OTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLEXoDBAHLEhAwDQYJKoZIhvcNAQELBQADggEBAG7Fw6UW
4e43+kDd2TQVd8y0S5I+uqGyn5WJaK6UIQbUtwTf/VroZuZ5lznRGsu8P3b9tGme
29rsVL8HTOrY8PAADZlTJzzHTAmeS3iWJ+F7pn41SaZiVpsPSsFejFNCfPnRDWVa
Hhr4Hwkap08AKD0yG5+J1WBrQXMpg2192ycLVbqtv+SE57ErDVAWfJkFI5g4eAqe
6iqFalVFNHVrhE025UC6rUGItntRGaNUyiuMPloHhbevdiOAh1SozGKq1MfOvXd3
T11oyQM1Z9C28N0jjJyYTGWAUQndHH+fREENzwBRq3u0Afhx+K0bCdHe4UovQwSp
KtZsGt3aSZnNwK8=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:40:03 2026 by rpki-client