Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa
File:                     F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (raw, json)
Hash identifier:          dH3yj84GQY2VdHCtTMcaG93JMFc2pzENbz5r+e8OcNw=
Subject key identifier:   D9:4F:9B:23:EC:59:0B:CC:1D:13:38:F8:A8:09:0C:71:94:BA:95:0D
Certificate issuer:       /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
Certificate serial:       0E36
Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa
Signing time:             Fri 30 Jan 2026 18:15:05 +0000
ROA not before:           Fri 30 Jan 2026 18:15:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     24559
IP address blocks:        103.126.104.0/22 maxlen: 24
                          203.91.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl
                          rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3638 (0xe36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
        Validity
            Not Before: Jan 30 18:15:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=697cf528-d5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:37:77:54:69:06:0c:c8:5c:d4:38:b1:51:
                    7f:22:bf:a5:35:3a:a6:95:7f:37:04:fa:5b:da:4e:
                    81:ba:45:38:de:df:9f:7f:51:44:75:a3:d0:98:43:
                    05:28:b3:66:4c:4c:01:a5:b4:01:81:bb:7d:07:8a:
                    1d:c3:21:d5:7c:fd:a3:cb:59:ef:8d:ab:01:b8:14:
                    09:a3:5b:fa:35:d5:ce:df:45:18:db:01:fa:68:83:
                    37:87:e5:e7:ce:5b:b7:27:cd:50:d3:78:7e:d7:28:
                    55:4d:22:6c:50:37:92:0c:36:ad:20:2f:d3:ac:9c:
                    0d:c3:de:a6:01:07:a9:8c:05:5b:12:a2:69:a8:15:
                    57:31:1b:88:7c:94:08:f2:56:37:de:03:62:03:87:
                    ae:6e:1a:3c:5b:ef:7f:94:69:0a:75:94:95:81:68:
                    b7:cb:78:30:86:5f:e0:55:eb:81:33:b1:9e:0e:7a:
                    dc:05:2c:14:e1:78:9f:27:34:ae:5f:5f:11:5c:a6:
                    63:8d:3c:9e:24:c7:b8:e5:a5:04:16:42:d1:58:86:
                    05:6a:c7:39:f4:78:13:77:7c:83:85:d1:43:71:f9:
                    9b:c2:16:fc:fa:e1:d8:a3:65:ca:e4:41:a0:3e:3f:
                    ba:96:d9:07:fe:5e:a2:62:e7:ba:4a:03:c4:33:ea:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:9B:23:EC:59:0B:CC:1D:13:38:F8:A8:09:0C:71:94:BA:95:0D
            X509v3 Authority Key Identifier:
                keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.104.0/22
                  203.91.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:82:54:73:97:11:7b:21:aa:6d:c0:15:cc:3f:05:8d:7d:20:
         25:57:0e:a7:4f:11:66:34:4b:b2:c1:26:06:83:cb:48:ac:a3:
         93:a6:0e:e0:ad:00:cf:b8:23:a8:51:9a:f0:b7:58:e5:71:71:
         0a:27:68:50:61:d3:be:84:20:6a:21:20:0f:a8:26:27:9b:ab:
         80:f7:f9:9b:3b:d6:85:22:74:43:23:a3:71:7d:89:b4:97:4d:
         1f:81:ea:08:7d:81:74:a2:9a:fe:b8:18:91:76:91:23:97:6f:
         b1:54:b1:41:f9:54:21:d4:58:16:28:b6:3d:d1:ef:8e:5c:a5:
         f3:0a:3f:55:9e:52:9e:c6:c4:9d:b4:32:4f:60:f0:e6:c0:f7:
         41:93:a3:31:84:9b:c1:44:74:8f:e0:a8:13:bf:ae:ce:d1:c5:
         38:1a:e9:06:11:6b:a9:6e:2d:e0:85:bc:94:af:12:34:b6:51:
         cc:38:c2:bd:cd:93:79:f5:48:87:21:89:13:bf:04:15:f1:e5:
         22:b6:15:98:3c:92:fd:c5:98:ca:b6:5e:c5:32:57:18:5f:e1:
         25:e1:76:2d:78:d8:6d:8e:a2:83:fc:86:e6:d5:e3:cf:f3:ce:
         16:24:c9:7b:26:e8:ce:9f:5c:38:cb:b7:a1:8e:8d:4f:6f:e6:
         46:d1:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:43:22 2026 by rpki-client