Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
File:                     131D50EC03B511F1B33AD351023D8C67.roa (raw, json)
Hash identifier:          tEgQGD303wd4wLHz36nCQCa5a3KwSI+T4puQSCCo+wE=
Subject key identifier:   EB:34:5B:17:12:16:4F:C0:DE:E7:97:40:BF:45:76:B5:0E:23:A9:BD
Certificate issuer:       /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
Certificate serial:       02
Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
Signing time:             Fri 06 Feb 2026 23:39:27 +0000
ROA not before:           Fri 06 Feb 2026 23:39:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136268
IP address blocks:        103.85.216.0/24 maxlen: 24
                          103.85.217.0/24 maxlen: 24
                          103.85.218.0/24 maxlen: 24
                          103.85.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl
                          rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6
        Validity
            Not Before: Feb  6 23:39:27 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69867baf-5ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:0f:8c:fa:dc:14:70:cc:48:6b:19:38:b4:
                    be:33:8f:ef:ec:bb:df:6d:bc:d9:81:0e:f3:f0:fe:
                    73:de:21:9b:8d:8a:5e:8c:d8:db:dd:81:be:91:e2:
                    78:78:9a:15:ad:f8:c7:b1:9c:9b:b0:d7:b9:6d:98:
                    5b:0d:1e:b4:34:f9:20:83:86:c7:d7:01:c5:13:fa:
                    d0:69:11:eb:0b:47:79:2d:cb:36:97:89:ff:b6:87:
                    31:40:e5:84:f6:52:ca:39:3d:6b:6f:c9:50:92:d1:
                    79:cf:3a:6c:d0:73:35:aa:ab:c6:ae:3a:ca:d1:b7:
                    bf:d3:43:ee:10:5b:db:d4:53:66:d0:e7:ff:61:ba:
                    ec:ff:90:5b:bc:e9:05:8b:98:51:c3:ce:98:29:ec:
                    79:c5:55:75:52:85:c0:47:de:1f:e6:07:bc:f3:d6:
                    3f:4e:8c:a7:70:5e:a4:bb:81:d1:79:ba:04:59:24:
                    25:f6:74:1f:ec:75:64:93:89:73:5a:a8:ae:3a:ae:
                    ad:62:da:82:00:2c:c3:a6:3a:5b:2b:51:bf:51:10:
                    48:44:f2:0e:ee:96:22:2b:e9:e4:54:14:58:67:b0:
                    e0:d4:9e:67:74:8b:48:da:4d:1c:c9:de:29:f6:21:
                    00:8c:c8:c3:dd:07:f6:94:df:39:ea:f1:05:32:b2:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:5B:17:12:16:4F:C0:DE:E7:97:40:BF:45:76:B5:0E:23:A9:BD
            X509v3 Authority Key Identifier:
                keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/131D50EC03B511F1B33AD351023D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:b3:9f:9c:83:dd:72:3c:0e:51:f4:a6:a4:ca:8e:22:ce:58:
         80:41:9e:39:09:90:cf:8a:f3:bd:f9:f8:6c:2a:c4:3e:1b:ce:
         45:90:fa:e3:8e:0f:c8:99:01:16:03:df:9e:19:e3:97:4c:dc:
         c8:dd:0f:61:77:24:d6:fb:1e:01:09:24:64:f0:1b:47:55:87:
         15:f4:5f:7e:58:03:1e:a4:07:3f:73:04:bd:3b:1c:db:4d:67:
         10:1a:1b:44:3e:fa:21:7b:be:e3:c9:eb:99:e6:9c:85:bc:59:
         6d:94:aa:db:d3:7b:a8:47:8b:3d:06:a4:e3:91:cc:13:1f:54:
         0b:1c:1a:08:41:73:56:43:52:ab:c4:8e:b4:84:46:4a:d2:88:
         05:fd:a4:94:61:62:30:e8:14:e2:5d:f5:0e:23:1c:ec:7b:a4:
         c7:aa:e2:63:d4:95:86:e0:34:37:8b:39:14:5f:49:39:6f:8a:
         1a:92:09:cf:ba:e7:da:ab:96:a6:29:e3:68:7a:a2:e0:03:e3:
         54:c2:9a:b2:ae:5d:33:27:16:c3:d4:91:39:30:7a:45:f2:e6:
         1d:9c:d4:73:db:c0:ce:a9:9b:d7:52:7f:f0:17:c3:1d:9e:41:
         21:58:69:40:99:d1:48:ac:95:59:55:df:b9:31:07:f5:32:cd:
         ae:8c:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:39 2026 by rpki-client