Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa
File:                     B35788BC2E6111E7B9FA6971C4F9AE02.roa (raw, json)
Hash identifier:          ErWM0mgSkcpwxHEVH2DJMuqETsCm6kgw/kLCU5FVPfI=
Subject key identifier:   51:B8:AD:EF:31:24:9D:23:C7:8E:83:73:E2:7F:78:22:8E:66:B9:8B
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1BAC
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa
Signing time:             Tue 10 Feb 2026 16:13:51 +0000
ROA not before:           Tue 10 Feb 2026 16:13:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     136151
IP address blocks:        103.81.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7084 (0x1bac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Feb 10 16:13:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698b593f-98d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:b4:e8:b8:9c:fe:88:2c:be:19:62:af:95:
                    a4:2d:2f:bf:25:36:8e:e5:68:bc:7a:27:c2:57:62:
                    0b:39:77:1b:cd:dd:5d:2f:26:02:4f:c6:a9:e2:09:
                    02:c8:86:d9:69:85:28:8e:ba:c6:70:0e:73:e8:39:
                    4b:18:41:36:33:fc:42:8c:7c:25:8f:e1:9d:a2:38:
                    73:f3:d5:54:45:08:ae:62:6c:1e:49:bb:30:ce:e0:
                    25:a3:d3:21:87:1d:73:fe:3e:df:e3:ca:2d:a8:22:
                    2b:ff:13:07:c6:f0:51:ca:3d:ab:31:9b:2a:f1:3c:
                    7a:cf:8d:bd:8f:8d:94:9c:b9:62:3e:0d:ca:9e:56:
                    6b:c2:79:83:ed:cd:9c:e8:b7:74:6e:f4:a8:32:2d:
                    6f:25:87:2e:5e:7a:7f:f0:5a:69:97:b9:84:d9:47:
                    d8:79:63:66:c6:24:ef:5a:79:db:9e:3a:2c:74:82:
                    83:10:cf:db:67:27:9a:ff:2e:28:d8:98:f7:3f:13:
                    1a:35:97:2f:20:46:dd:de:b1:58:cc:f5:00:24:8b:
                    a2:0a:86:18:2d:ff:ef:cc:da:87:60:00:24:df:d1:
                    69:b5:53:33:a1:48:82:2a:c5:36:84:76:f3:2c:6e:
                    3f:b0:55:ff:41:ba:80:27:2f:67:0b:e5:dd:97:cf:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B8:AD:EF:31:24:9D:23:C7:8E:83:73:E2:7F:78:22:8E:66:B9:8B
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/B35788BC2E6111E7B9FA6971C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ff:71:6c:2e:03:65:9e:94:bb:a0:29:d3:33:f5:5f:d7:3f:
         ea:12:9d:8a:42:72:dc:0b:35:3a:93:a5:82:20:97:fb:a5:52:
         54:be:28:4e:5c:eb:2f:a7:a3:64:62:9d:88:93:59:89:57:76:
         63:a5:bb:62:c8:29:e2:a3:1f:a7:86:23:07:48:96:bd:1c:9f:
         20:88:01:49:c3:cd:f8:4d:30:05:f7:61:50:60:ed:62:f1:b5:
         80:24:e6:91:36:4d:41:74:66:25:d6:aa:db:87:32:da:49:db:
         a7:dd:3a:06:a8:04:f0:8f:05:87:2e:fa:05:ab:a8:3f:8e:ff:
         9f:13:ee:09:17:0f:40:ed:57:62:e6:35:dc:ec:ee:7d:6b:59:
         da:e8:b9:02:ed:86:fc:f8:fa:98:95:e4:42:c2:c3:9d:b6:64:
         ed:37:e5:18:29:9a:7b:be:cd:e7:b2:69:53:05:3b:12:77:95:
         3a:f5:3e:1f:d5:b5:28:3e:96:f4:74:d7:80:5c:3c:14:89:51:
         12:f5:dc:4a:3b:3f:fd:ea:4f:9e:33:67:04:00:88:65:e1:3a:
         20:e9:8c:3a:f0:ba:3a:4d:c5:79:a8:ad:08:28:28:c9:ab:69:
         0d:18:ae:6e:2a:be:90:2b:77:2a:9c:0a:50:57:6c:2e:0a:2b:
         59:f4:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:46:12 2026 by rpki-client