Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/B4E988F2FCFB11F092E222F9366F56BC.roa
File:                     B4E988F2FCFB11F092E222F9366F56BC.roa (raw, json)
Hash identifier:          CK97q//UoX+CisaSzf/RODAUkpG+KiwghoGrG2QR6Yk=
Subject key identifier:   92:27:92:E2:DE:CD:43:4E:44:E9:CA:40:E4:11:2B:DC:CD:1A:75:E8
Certificate issuer:       /CN=A91CBFCF/serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
Certificate serial:       0C4A
Authority key identifier: 86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/B4E988F2FCFB11F092E222F9366F56BC.roa
Signing time:             Wed 18 Feb 2026 19:16:12 +0000
ROA not before:           Wed 18 Feb 2026 19:16:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     139902
IP address blocks:        103.146.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBFCF, serialNumber=86B1F11D181DA6CC9DB0323DE43BC96C590965E1
        Validity
            Not Before: Feb 18 19:16:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69960ffc-46bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:01:62:fc:b2:41:47:9d:6f:21:03:28:84:
                    fa:a2:10:dd:90:94:0e:ac:5b:3a:c9:94:75:32:a2:
                    f9:8f:f5:1f:b1:53:5f:6f:e4:32:3b:71:87:50:0f:
                    45:7d:f3:9f:15:ac:c6:f1:8b:41:9a:a6:72:f6:99:
                    69:eb:2a:3b:f2:70:48:4f:0f:31:d2:1d:73:44:ec:
                    52:92:3b:b6:69:95:a3:d9:23:62:ab:0e:6f:c8:2e:
                    42:57:7c:93:d4:81:26:1d:61:64:58:8c:6a:57:2e:
                    e0:0a:5b:08:2a:12:9d:e2:01:a2:12:93:d0:06:24:
                    82:1c:8a:88:fd:ff:eb:3e:1d:d4:59:df:c5:47:cd:
                    e4:c4:e3:a6:ac:78:5c:fd:3e:b2:8d:6e:70:4d:28:
                    49:bd:68:b8:ef:d9:98:59:36:dd:06:da:46:5e:17:
                    3e:4c:63:f7:9a:0f:74:cf:89:13:ae:12:e7:bb:11:
                    e6:e8:49:27:ba:9e:e9:58:3a:1e:93:fe:69:82:25:
                    f4:79:17:87:0b:05:32:4c:f6:c8:8d:83:a0:e2:1b:
                    31:3b:41:33:36:b9:39:0f:51:78:7f:58:5b:cc:a8:
                    0d:1a:58:de:ed:11:b6:7a:1d:e2:a1:86:c9:8c:da:
                    f1:9c:1e:df:a2:b4:32:ef:51:0a:0d:b3:6f:17:49:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:92:E2:DE:CD:43:4E:44:E9:CA:40:E4:11:2B:DC:CD:1A:75:E8
            X509v3 Authority Key Identifier:
                keyid:86:B1:F1:1D:18:1D:A6:CC:9D:B0:32:3D:E4:3B:C9:6C:59:09:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/hrHxHRgdpsydsDI95DvJbFkJZeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrHxHRgdpsydsDI95DvJbFkJZeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBFCF/95639BF0248D11EAADA2054EC4F9AE02/B4E988F2FCFB11F092E222F9366F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:71:1b:41:fb:a0:2f:83:2d:bc:b7:d8:2a:e7:ea:36:2e:f7:
         29:a1:ab:97:86:af:b6:aa:cd:fc:0e:da:66:70:39:84:1d:08:
         cb:0f:24:16:5d:d6:a7:2d:d5:48:78:3d:40:ac:4f:45:79:51:
         96:64:d1:41:bc:c9:37:1e:f4:3f:ec:f0:41:74:c6:c8:66:2f:
         3f:98:7f:c6:f2:07:39:1d:95:62:38:e9:10:6a:90:5b:46:eb:
         6d:8d:b0:c2:8e:35:a6:1b:58:b0:0c:ea:fb:50:f5:29:4c:78:
         68:5e:8f:db:24:c7:45:a7:8d:61:5d:02:86:8f:0b:f3:e0:37:
         6e:8a:62:5a:eb:54:29:5e:9a:40:1d:36:b6:2d:29:b0:fc:c2:
         76:fe:b6:d7:70:62:8b:c6:d3:57:9b:ac:43:e0:ab:4d:bb:81:
         2d:08:8a:54:51:7d:54:38:16:8b:fe:7b:d7:46:21:f4:81:43:
         17:ed:87:64:aa:fe:c7:27:4d:e9:35:4b:34:69:3d:9a:2f:ba:
         2f:b5:cd:16:20:17:6e:f7:54:e8:a7:6a:2a:b0:6f:45:f9:7c:
         dd:35:99:3d:7a:78:5e:69:05:a3:52:59:cb:74:3f:76:af:36:
         70:21:9a:18:66:ef:c5:2e:94:61:e8:ab:13:00:79:81:bd:39:
         b6:61:59:42
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
Q0JGQ0YxMTAvBgNVBAUTKDg2QjFGMTFEMTgxREE2Q0M5REIwMzIzREU0M0JDOTZD
NTkwOTY1RTEwHhcNMjYwMjE4MTkxNjEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk2MGZmYy00NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYcBYvyyQUedbyEDKIT6ohDdkJQOrFs6yZR1MqL5j/UfsVNfb+QyO3GHUA9F
ffOfFazG8YtBmqZy9plp6yo78nBITw8x0h1zROxSkju2aZWj2SNiqw5vyC5CV3yT
1IEmHWFkWIxqVy7gClsIKhKd4gGiEpPQBiSCHIqI/f/rPh3UWd/FR83kxOOmrHhc
/T6yjW5wTShJvWi479mYWTbdBtpGXhc+TGP3mg90z4kTrhLnuxHm6Eknup7pWDoe
k/5pgiX0eReHCwUyTPbIjYOg4hsxO0EzNrk5D1F4f1hbzKgNGlje7RG2eh3ioYbJ
jNrxnB7forQy71EKDbNvF0m10QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJInkuLe
zUNOROnKQOQRK9zNGnXoMB8GA1UdIwQYMBaAFIax8R0YHabMnbAyPeQ7yWxZCWXh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkZDRi85NTYzOUJGMDI0
OEQxMUVBQURBMjA1NEVDNEY5QUUwMi9ockh4SFJnZHBzeWRzREk5NUR2SmJGa0pa
ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hySHhIUmdkcHN5ZHNESTk1RHZKYkZrSlplRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0JGQ0YvOTU2MzlCRjAyNDhEMTFFQUFEQTIwNTRFQzRGOUFFMDIvQjRFOTg4RjJG
Q0ZCMTFGMDkyRTIyMkY5MzY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkpQwDQYJKoZIhvcNAQELBQADggEBABFxG0H7oC+DLby3
2Crn6jYu9ymhq5eGr7aqzfwO2mZwOYQdCMsPJBZd1qct1Uh4PUCsT0V5UZZk0UG8
yTce9D/s8EF0xshmLz+Yf8byBzkdlWI46RBqkFtG622NsMKONaYbWLAM6vtQ9SlM
eGhej9skx0WnjWFdAoaPC/PgN26KYlrrVClemkAdNrYtKbD8wnb+ttdwYovG01eb
rEPgq027gS0IilRRfVQ4Fov+e9dGIfSBQxfth2Sq/scnTek1SzRpPZovui+1zRYg
F273VOinaiqwb0X5fN01mT16eF5pBaNSWct0P3avNnAhmhhm78UulGHoqxMAeYG9
ObZhWUI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:52 2026 by rpki-client