Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/2BFBE7E687EF11F0BA5DF073C4F9AE02.roa
File:                     2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (raw, json)
Hash identifier:          6QcKCKor5L2SvQcIAomviPHZK75eGNzeF5OMDnYLehg=
Subject key identifier:   5E:27:92:43:1C:45:0E:F0:62:68:50:55:86:16:4F:29:DA:7C:B2:CD
Certificate issuer:       /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Certificate serial:       0D36
Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/2BFBE7E687EF11F0BA5DF073C4F9AE02.roa
Signing time:             Sun 01 Feb 2026 09:45:54 +0000
ROA not before:           Sun 01 Feb 2026 09:45:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137842
IP address blocks:        103.115.156.0/24 maxlen: 24
                          103.115.157.0/24 maxlen: 24
                          103.115.159.0/24 maxlen: 24
                          2402:ea40::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
                          rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3382 (0xd36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
        Validity
            Not Before: Feb  1 09:45:54 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=697f20d2-1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:af:40:0b:8c:e0:ec:03:e2:38:b1:c7:31:
                    7a:50:fc:56:f9:1b:de:df:53:06:7c:43:a7:22:13:
                    49:52:17:2c:46:34:d1:ea:6d:af:3d:77:de:ae:99:
                    86:14:24:5c:07:02:f7:51:0e:a3:38:cf:af:03:6d:
                    6d:e2:ca:01:d1:ad:34:3a:10:2d:02:75:7f:9c:33:
                    1b:98:f5:2b:56:be:08:d8:b5:b8:13:43:db:da:a2:
                    e4:b4:e2:d9:7b:e4:dc:c3:49:f2:41:0b:d4:ef:b5:
                    c8:9f:da:d8:84:56:cb:de:94:89:4b:ef:18:b4:04:
                    f8:d8:72:7d:a5:82:19:ee:b1:7c:55:91:26:fd:d5:
                    8c:4b:fe:ae:db:16:75:7b:02:a8:42:b3:e2:4e:d8:
                    fb:6c:b5:7d:62:a4:db:58:fd:35:ca:32:ad:a4:3f:
                    1f:aa:84:0b:10:6b:5a:29:8b:2f:22:ce:62:94:3c:
                    f9:ef:92:0d:13:57:67:e4:19:dc:a3:90:7f:19:8f:
                    8d:63:d4:a7:10:f5:4d:30:a4:f6:f6:2a:ee:ad:c8:
                    e8:39:73:26:46:97:26:44:3e:d6:85:34:93:e0:24:
                    fd:5c:51:79:64:10:1c:1a:a0:02:1d:cd:0b:a3:12:
                    9b:00:e9:fb:9c:71:af:00:21:e0:c3:eb:97:eb:9e:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:27:92:43:1C:45:0E:F0:62:68:50:55:86:16:4F:29:DA:7C:B2:CD
            X509v3 Authority Key Identifier:
                keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/2BFBE7E687EF11F0BA5DF073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.156.0/23
                  103.115.159.0/24
                IPv6:
                  2402:ea40::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:0d:80:6b:db:db:5b:36:e3:ac:1c:ba:10:82:2c:45:ae:
         36:4a:a4:26:3e:33:71:f7:55:d2:f4:58:0f:1d:da:ff:6f:55:
         82:d2:12:6e:18:5f:f6:a1:c6:0b:d2:c5:e1:76:38:44:ee:5f:
         eb:46:6f:81:5a:fc:bd:84:01:36:24:16:82:0a:b3:75:f1:83:
         e2:11:de:88:12:5f:1d:c0:7c:76:5e:ef:57:69:cb:73:e2:e9:
         59:40:a0:61:c9:58:8f:3a:13:d5:cb:6f:c8:0e:20:69:df:ec:
         77:8b:3c:61:c3:e0:9c:b1:38:48:e3:d0:78:06:9f:d2:c9:e4:
         34:92:d6:24:47:7c:e4:b4:64:86:bd:ce:b7:51:80:10:ae:1d:
         3e:2e:0b:70:a3:cd:73:44:10:8e:6f:ca:ef:b8:34:ba:6e:91:
         64:2d:1b:df:3e:30:25:47:37:d7:fa:a4:96:a0:a9:5c:b6:d3:
         34:27:61:a6:02:da:d9:39:67:b4:16:e9:82:6d:f6:9f:7a:3b:
         a5:4b:54:fd:ff:16:0f:9a:42:d8:70:6c:62:9c:8d:60:b8:3f:
         f5:0f:a2:81:92:ae:ec:b1:af:9b:7d:69:27:e8:e7:2b:dd:76:
         27:4b:6a:a1:dd:c6:c2:3f:4b:a6:d6:96:a8:43:c7:7a:7b:be:
         82:1f:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:30:44 2026 by rpki-client