Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/D55CBB8CEC5B11F0861F235B4C6F56BC.roa
File:                     D55CBB8CEC5B11F0861F235B4C6F56BC.roa (raw, json)
Hash identifier:          JTQgQC9lKVKRq3jMOHOnDfCH9MwzRms5gV2q2bmN+Qo=
Subject key identifier:   AA:DD:A5:AF:BC:E7:3D:86:F3:A0:C2:1A:12:F5:3F:AA:B2:9F:F2:27
Certificate issuer:       /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
Certificate serial:       0926
Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/D55CBB8CEC5B11F0861F235B4C6F56BC.roa
Signing time:             Mon 02 Feb 2026 20:17:04 +0000
ROA not before:           Mon 02 Feb 2026 20:17:04 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        103.224.253.0/24 maxlen: 24
                          103.224.254.0/24 maxlen: 24
                          103.224.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl
                          rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2342 (0x926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
        Validity
            Not Before: Feb  2 20:17:04 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69810640-53c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:3e:ca:f2:8a:97:9f:21:f8:c4:fd:cf:34:
                    4c:a7:60:d6:6f:65:8b:ea:83:98:4c:23:c3:2c:80:
                    a0:23:cd:fa:37:8c:e2:b0:ec:24:bc:68:d5:a6:5e:
                    ba:f7:e3:18:7c:1b:b4:44:3f:46:91:09:ad:6f:f0:
                    eb:e0:cc:94:4a:db:18:e0:42:10:07:76:2a:08:20:
                    da:ea:2c:f9:7c:a8:19:27:8e:9d:12:1f:a4:80:d0:
                    a9:09:8e:20:37:f6:e6:e9:69:d7:d0:6a:41:2d:b0:
                    b0:8b:89:bf:78:3a:e0:02:7b:58:de:ce:03:d4:7a:
                    81:83:04:eb:84:99:d4:65:c8:42:d4:a8:76:c0:47:
                    44:76:63:b4:78:2d:e5:d4:dc:24:b6:90:dc:c3:b5:
                    1a:b2:e7:7b:86:ae:fc:eb:2d:f6:58:dd:d2:6b:fc:
                    24:c7:30:7b:d1:6d:5f:12:29:60:0e:7c:d2:2b:00:
                    33:6f:f0:f5:6f:d4:ac:18:62:9d:fc:86:71:fc:ad:
                    2a:e5:46:57:3d:e0:c8:0d:b6:6c:69:94:69:5f:69:
                    0d:e2:4e:a5:00:4e:3c:20:ba:ff:63:20:57:f7:9b:
                    41:d3:f0:bf:d1:67:b6:d1:ce:33:21:33:d2:2a:49:
                    04:8b:45:5f:61:ec:78:40:57:ae:2f:f9:1a:6b:34:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DD:A5:AF:BC:E7:3D:86:F3:A0:C2:1A:12:F5:3F:AA:B2:9F:F2:27
            X509v3 Authority Key Identifier:
                keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/D55CBB8CEC5B11F0861F235B4C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.253.0-103.224.255.255

    Signature Algorithm: sha256WithRSAEncryption
         14:e3:a3:b3:38:2b:e4:7f:81:4e:a7:c4:f5:e1:51:e0:8d:9a:
         ac:03:db:10:58:ea:e0:18:31:ec:3d:32:b8:89:dd:de:ba:ef:
         4d:fa:19:2d:18:4a:3d:72:eb:d4:e6:b9:f5:b4:f6:31:72:51:
         4e:54:0d:3c:d8:43:98:dd:23:73:60:ff:a6:32:21:7a:4b:21:
         50:78:66:1d:3b:0e:71:8e:e9:79:dd:05:87:5b:bb:58:91:6e:
         3e:2c:3f:88:fc:58:60:2f:8a:dd:91:ff:52:6a:68:d5:c1:bc:
         df:5e:9f:0e:83:b6:c0:5e:f8:f4:e7:f0:dd:33:4a:d8:dc:2c:
         37:d2:b7:60:ab:77:27:0c:29:8e:e0:c6:85:1a:a1:d9:15:09:
         c6:c1:3d:84:27:c2:04:81:e1:e7:51:fd:9e:78:05:d4:5a:de:
         53:4d:08:0f:ba:9c:70:d3:10:48:ab:11:e0:a6:94:03:d7:13:
         f9:9d:e0:46:52:d8:63:c4:d2:56:43:63:37:c2:51:ee:93:ad:
         5e:80:05:09:cd:45:bb:ae:0a:e2:e8:72:64:94:5f:74:45:9b:
         22:9b:c8:ca:8d:5c:af:b4:02:34:30:37:89:06:61:ce:ef:bc:
         25:1a:62:28:e4:34:0a:20:06:6d:21:5f:5c:27:a2:4f:41:6e:
         0b:d7:7e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:52 2026 by rpki-client