Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
File:                     8160C03610E911EA86FA6774C4F9AE02.roa (raw, json)
Hash identifier:          XAgaKDEITnDBCXDb+3UqdzJtmjXAmGVmTfPErH86avE=
Subject key identifier:   CB:18:3B:B2:E8:AF:45:77:08:08:93:53:13:7E:1A:86:4F:C2:73:A4
Certificate issuer:       /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
Certificate serial:       0C89
Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
Signing time:             Fri 16 Jan 2026 18:15:46 +0000
ROA not before:           Fri 16 Jan 2026 18:15:46 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136009
IP address blocks:        103.79.182.0/23 maxlen: 23
                          103.79.182.0/24 maxlen: 24
                          103.79.183.0/24 maxlen: 24
                          103.122.90.0/23 maxlen: 23
                          103.122.90.0/24 maxlen: 24
                          103.122.91.0/24 maxlen: 24
                          2001:df6:d600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl
                          rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3209 (0xc89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29
        Validity
            Not Before: Jan 16 18:15:46 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=696a8052-5a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:59:50:6d:fd:25:2c:43:84:e3:7b:93:82:
                    1e:c8:ec:18:07:71:45:91:9a:24:e5:7c:4f:70:7b:
                    79:c8:5a:8a:ea:4e:35:22:65:8e:6f:72:2b:5c:cd:
                    f5:99:39:02:cd:dc:a1:f8:b3:27:df:a6:c3:6d:17:
                    22:1a:ac:e1:7a:cf:e6:6a:08:e1:27:ef:cf:7b:0f:
                    c2:12:c3:64:61:1b:65:37:44:48:fe:87:7a:60:8d:
                    1a:e9:93:53:7c:ea:44:db:bd:1e:73:12:85:1c:10:
                    c9:ec:0b:47:0f:af:a0:47:31:cf:d0:b9:5f:fe:eb:
                    94:23:17:ca:62:55:b2:de:da:03:c6:5d:af:c1:76:
                    0c:29:dc:da:4f:53:34:44:28:d8:3d:c5:72:09:40:
                    3b:d4:62:09:58:cc:64:6a:3b:f5:3c:db:7f:a2:71:
                    78:c9:cb:e4:c1:21:de:c8:4b:ac:e8:02:35:3d:bd:
                    08:3b:eb:52:e3:f7:85:36:46:27:0e:3e:b6:0a:65:
                    98:a0:20:38:4d:c2:9f:58:31:c8:8a:f7:aa:98:58:
                    20:ab:77:65:53:7a:8e:d4:dd:cb:be:a5:83:39:a5:
                    28:2a:98:a2:2a:d4:ea:87:72:6d:c8:42:26:01:7b:
                    21:57:f6:7b:e7:b2:21:6b:ce:01:de:e8:2d:0b:34:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:18:3B:B2:E8:AF:45:77:08:08:93:53:13:7E:1A:86:4F:C2:73:A4
            X509v3 Authority Key Identifier:
                keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/8160C03610E911EA86FA6774C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.182.0/23
                  103.122.90.0/23
                IPv6:
                  2001:df6:d600::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:2c:9a:a2:86:19:ca:cf:c4:c0:00:d5:c7:d5:65:4c:3f:4b:
         ee:a1:4a:c0:71:72:72:2a:16:82:63:d9:44:f7:8c:b9:1a:f3:
         f9:2a:44:2f:6f:61:73:4e:9f:70:98:d7:30:57:72:59:9f:c8:
         89:8e:e3:7b:c3:4e:89:6e:3a:ad:f2:ec:e9:f8:72:e6:22:78:
         f1:80:ed:a2:cb:47:38:d8:ef:64:70:d4:02:75:f4:8c:e5:f2:
         c9:65:ba:a7:6b:d5:c4:c4:46:2a:32:d7:ef:95:9a:3b:e6:36:
         06:6a:38:c6:24:2f:db:b1:73:07:f6:d1:a3:ee:4a:b9:92:67:
         0b:90:0f:59:2f:3c:5f:fe:86:7b:fe:ad:2d:a0:30:1a:c7:df:
         9c:50:ab:41:19:8b:65:bf:fa:f5:eb:bb:3f:be:27:bd:d0:33:
         36:65:ea:b2:88:85:0c:08:d1:1d:ad:c4:79:61:17:19:9d:84:
         75:83:19:09:3c:22:fd:90:4b:5f:19:02:39:b6:fe:0d:4e:e0:
         f6:8f:75:3a:19:ba:8f:48:44:5c:90:85:0e:d9:9a:31:fb:9e:
         f1:81:d6:cb:f6:8f:d7:ef:e8:a2:85:80:c6:3b:bf:43:d6:31:
         e8:6c:9b:db:e0:69:9d:dd:c3:8d:1d:cd:d4:11:28:51:a4:1e:
         a9:fc:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:13 2026 by rpki-client