Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/E13D8940342E11EF84328672C4F9AE02.roa
File:                     E13D8940342E11EF84328672C4F9AE02.roa (raw, json)
Hash identifier:          IDgidsZ63rLwG0BPLYiYY0OzIcyOCaXDDyBJj8tERTI=
Subject key identifier:   69:6F:4D:0B:65:DA:59:2C:3E:66:EF:4F:B9:B9:39:FD:B3:65:30:5B
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       01AE
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/E13D8940342E11EF84328672C4F9AE02.roa
Signing time:             Fri 06 Feb 2026 02:13:09 +0000
ROA not before:           Fri 06 Feb 2026 02:13:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134078
IP address blocks:        45.112.76.0/22 maxlen: 22
                          61.13.0.0/23 maxlen: 24
                          61.13.2.0/24 maxlen: 24
                          61.13.16.0/20 maxlen: 21
                          61.13.32.0/21 maxlen: 21
                          61.13.32.0/22 maxlen: 22
                          61.13.36.0/22 maxlen: 22
                          61.13.128.0/22 maxlen: 22
                          61.13.128.0/24 maxlen: 24
                          61.13.132.0/22 maxlen: 22
                          61.13.132.0/24 maxlen: 24
                          61.13.133.0/24 maxlen: 24
                          61.13.134.0/24 maxlen: 24
                          61.13.135.0/24 maxlen: 24
                          61.13.136.0/23 maxlen: 23
                          61.13.138.0/23 maxlen: 23
                          61.14.64.0/19 maxlen: 19
                          61.14.90.0/24 maxlen: 24
                          61.14.91.0/24 maxlen: 24
                          61.14.95.0/24 maxlen: 24
                          61.16.0.0/22 maxlen: 22
                          61.16.4.0/22 maxlen: 22
                          61.16.8.0/22 maxlen: 22
                          61.16.12.0/22 maxlen: 22
                          61.16.16.0/22 maxlen: 22
                          61.16.32.0/22 maxlen: 22
                          103.51.160.0/22 maxlen: 22
                          103.51.160.0/24 maxlen: 24
                          103.51.163.0/24 maxlen: 24
                          103.227.88.0/22 maxlen: 22
                          103.227.88.0/23 maxlen: 23
                          103.227.90.0/23 maxlen: 23
                          103.250.56.0/22 maxlen: 22
                          103.250.58.0/24 maxlen: 24
                          202.52.64.0/22 maxlen: 22
                          202.52.64.0/23 maxlen: 23
                          202.52.66.0/23 maxlen: 23
                          202.52.68.0/22 maxlen: 22
                          202.52.72.0/21 maxlen: 21
                          202.52.80.0/21 maxlen: 21
                          202.52.88.0/22 maxlen: 22
                          202.52.92.0/22 maxlen: 22
                          202.52.96.0/19 maxlen: 19
                          202.52.104.0/22 maxlen: 22
                          202.52.112.0/20 maxlen: 20
                          202.136.16.0/20 maxlen: 20
                          202.148.160.0/20 maxlen: 20
                          203.31.234.0/24 maxlen: 24
                          203.149.128.0/24 maxlen: 24
                          203.149.140.0/22 maxlen: 22
                          203.149.168.0/22 maxlen: 22
                          203.149.184.0/21 maxlen: 21
                          2404:1100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Feb  6 02:13:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69854e35-9dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:37:cf:bd:e0:19:51:c3:91:56:8e:3a:fe:3d:
                    2d:b4:fe:2f:67:93:06:f5:ea:a7:d9:7c:0e:dc:62:
                    5f:99:d3:a3:d0:a0:ab:24:d5:21:a2:50:2c:b2:c3:
                    dc:c9:71:67:be:e4:78:99:e2:6b:bb:88:1e:8f:1d:
                    59:af:db:1b:e9:5a:6c:e6:43:d7:88:08:dc:b1:12:
                    2c:b9:33:c1:f4:48:15:00:76:b7:f2:64:da:88:db:
                    d4:d1:39:55:d1:93:2c:95:2a:cd:d3:00:55:52:23:
                    38:28:36:9f:fe:8d:16:eb:6c:04:c6:0f:46:72:b9:
                    5a:96:27:d1:08:40:7c:1c:e0:48:be:fb:4c:57:9c:
                    02:13:ca:93:4a:73:e5:34:0e:57:a4:7c:4a:42:eb:
                    e0:6c:6d:60:c5:fa:b9:39:a1:81:bc:d0:05:25:c7:
                    a5:a2:a1:bc:a9:2e:72:c4:e8:89:44:2a:f5:aa:59:
                    e9:77:3a:10:af:d0:a8:1a:7d:ab:77:fe:eb:97:fd:
                    85:ea:f2:f2:f5:a9:26:d2:e4:63:c6:1e:3f:e3:01:
                    61:6d:ad:07:e2:1c:b6:f8:e0:ff:ac:4f:b6:42:90:
                    d3:3f:7d:dd:7f:a0:52:d3:67:bd:68:f4:0e:fd:8b:
                    51:18:b1:83:ef:10:3a:ef:c4:50:7c:ff:30:5f:b2:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6F:4D:0B:65:DA:59:2C:3E:66:EF:4F:B9:B9:39:FD:B3:65:30:5B
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/E13D8940342E11EF84328672C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.76.0/22
                  61.13.0.0-61.13.2.255
                  61.13.16.0-61.13.39.255
                  61.13.128.0-61.13.139.255
                  61.14.64.0/19
                  61.16.0.0-61.16.19.255
                  61.16.32.0/22
                  103.51.160.0/22
                  103.227.88.0/22
                  103.250.56.0/22
                  202.52.64.0/18
                  202.136.16.0/20
                  202.148.160.0/20
                  203.31.234.0/24
                  203.149.128.0/24
                  203.149.140.0/22
                  203.149.168.0/22
                  203.149.184.0/21
                IPv6:
                  2404:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:fb:2d:b9:43:f9:87:7e:d1:2c:0e:0d:e8:3a:6b:1a:55:
         50:94:f9:a4:4e:94:ad:1b:14:86:24:93:b6:cd:bb:4c:34:cb:
         0b:06:0b:75:a7:89:24:9d:9e:c3:70:84:50:4f:25:ce:af:ba:
         80:32:ec:33:a9:ef:67:61:e1:21:17:3d:00:40:e5:18:1c:8c:
         27:5c:16:82:da:f6:f6:6e:6c:60:2a:5a:22:6d:66:0c:0c:f6:
         c3:22:9d:73:d5:21:9e:65:0c:6b:3b:2b:f8:5c:ce:cc:1c:8a:
         ee:2e:0f:7b:77:a8:be:76:e0:44:25:a1:84:04:56:f8:d6:81:
         a8:1c:81:cc:6a:41:71:73:8c:3d:01:74:52:47:6c:d4:6e:45:
         32:16:6c:fb:78:76:73:74:74:45:8b:86:82:6a:d2:14:77:d7:
         ba:15:ef:f0:70:e8:1c:c3:d2:ac:0a:d4:7f:8c:f1:e1:bb:78:
         80:fe:60:2b:88:a3:e4:0f:0d:0d:1c:61:90:54:ee:cb:d3:ab:
         95:de:86:86:8a:83:15:de:08:e9:ce:ad:63:68:5d:1a:f0:94:
         62:d6:2c:c8:dc:9d:3f:62:00:ad:6e:2a:31:66:af:4e:f4:85:
         16:a6:a8:60:e5:4a:57:4b:4d:cc:a3:4c:d3:3d:e2:d8:d1:e1:
         7c:32:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:59:37 2026 by rpki-client