Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa
File:                     4AB730E0800B11EC84B3FA3BC4F9AE02.roa (raw, json)
Hash identifier:          9Txns+lYDH2NGybf0zisEaJJOnS0rlj9zOj9oHYOVvw=
Subject key identifier:   A0:0F:A8:E9:A7:5F:4C:73:BC:B2:9B:6A:90:DC:A1:7B:1E:13:37:1F
Certificate issuer:       /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Certificate serial:       045A
Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa
Signing time:             Sat 03 Jan 2026 00:19:29 +0000
ROA not before:           Sat 03 Jan 2026 00:19:29 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138958
IP address blocks:        103.180.200.0/23 maxlen: 23
                          103.180.200.0/24 maxlen: 24
                          103.180.201.0/24 maxlen: 24
                          2400:5520::/32 maxlen: 32
                          2400:5520::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
                          rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7
        Validity
            Not Before: Jan  3 00:19:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69586091-1c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:7c:6a:f2:57:d9:b6:b2:45:2a:9a:d1:aa:
                    d2:7d:3e:2b:b4:cc:0f:ba:e8:94:07:81:13:e0:f7:
                    35:5b:ca:9c:48:93:87:9a:eb:ad:e4:1d:27:c4:9a:
                    12:9c:14:e3:8c:d8:bb:b5:9b:15:b4:24:15:53:4d:
                    fd:4a:5c:66:71:74:38:d3:26:fd:da:b4:03:c3:a3:
                    f2:2b:85:27:2f:6e:e1:b7:2f:69:1f:20:aa:ea:5a:
                    31:aa:e7:f9:52:6d:0c:96:9b:b2:ae:3a:26:2b:7e:
                    b1:a1:57:bb:6e:ed:bd:07:20:06:d5:56:a2:66:10:
                    91:b2:c8:48:6f:a5:c4:bf:c8:53:9b:1e:81:f9:58:
                    18:57:1a:f0:a9:2c:11:d0:50:11:57:a0:99:b9:30:
                    7a:2a:19:17:4f:ce:55:d6:79:63:6a:6c:c7:36:56:
                    61:a9:28:97:dd:0b:d2:02:16:7a:b7:f2:e5:7e:5b:
                    6d:ff:d6:69:a4:fa:83:c6:9b:ac:c6:e2:22:2e:43:
                    5e:df:f6:ad:01:fc:41:b7:61:d9:4a:1d:59:2a:53:
                    24:05:b6:bb:dc:2e:28:61:0a:8b:0d:4b:dd:39:c9:
                    76:19:4d:15:55:72:e9:63:8d:25:e9:22:56:30:b5:
                    16:81:53:4f:dc:d1:72:31:18:28:97:7e:9d:70:34:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0F:A8:E9:A7:5F:4C:73:BC:B2:9B:6A:90:DC:A1:7B:1E:13:37:1F
            X509v3 Authority Key Identifier:
                keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.200.0/23
                IPv6:
                  2400:5520::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:49:bd:2b:2e:ce:68:e1:6e:90:6e:09:dd:a8:eb:46:5c:1c:
         1a:f7:00:11:e5:8c:86:d1:53:3e:f6:88:33:de:50:cc:67:c2:
         d1:2d:9c:59:ce:0f:5f:41:29:0b:1d:17:e0:74:30:28:76:99:
         a1:15:85:e4:0a:f5:ad:70:fe:b3:a0:7d:7f:af:08:79:55:1f:
         dd:5e:d5:fa:cb:8e:fe:7f:5a:20:7f:20:96:9b:57:5d:4a:3a:
         e9:b9:44:01:13:33:a8:ec:84:bc:7d:25:af:40:c0:52:b0:a3:
         c5:02:b0:40:7f:2b:1f:94:70:f8:cc:43:03:3b:3a:81:a0:96:
         24:e8:3a:bd:27:d7:86:76:6e:e4:ba:09:bd:72:43:dd:5e:87:
         39:dd:18:f6:07:f5:94:08:47:a6:33:56:02:76:32:15:ef:d1:
         62:2c:b1:bd:a7:c5:6b:c2:f6:02:7d:09:c8:c9:10:7c:99:f3:
         cc:40:b2:4b:c5:8a:ee:3f:d8:e5:b5:92:c2:4f:6b:0b:f8:0e:
         58:2d:b5:fe:91:25:ff:dc:4d:4e:50:bf:c8:1d:c3:36:e3:60:
         52:93:b1:d5:30:90:6b:ae:f8:31:8b:ce:f0:20:16:08:e9:d2:
         da:d9:e7:6d:b7:ae:5a:2d:d6:95:c4:ae:4c:f6:2c:c8:44:6e:
         65:22:94:50
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDQ1QTIxMTAvBgNVBAUTKDFDMDQzMDc3MjQxNTczQ0VCODU4RDk1MUYwMkIyMjA1
N0JBMzk2RTcwHhcNMjYwMTAzMDAxOTI5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU4NjA5MS0xYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZN8avJX2bayRSqa0arSfT4rtMwPuuiUB4ET4Pc1W8qcSJOHmuut5B0nxJoS
nBTjjNi7tZsVtCQVU039SlxmcXQ40yb92rQDw6PyK4UnL27hty9pHyCq6loxquf5
Um0MlpuyrjomK36xoVe7bu29ByAG1VaiZhCRsshIb6XEv8hTmx6B+VgYVxrwqSwR
0FARV6CZuTB6KhkXT85V1nljamzHNlZhqSiX3QvSAhZ6t/Llfltt/9ZppPqDxpus
xuIiLkNe3/atAfxBt2HZSh1ZKlMkBba73C4oYQqLDUvdOcl2GU0VVXLpY40l6SJW
MLUWgVNP3NFyMRgol36dcDT4vwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKAPqOmn
X0xzvLKbapDcoXseEzcfMB8GA1UdIwQYMBaAFBwEMHckFXPOuFjZUfArIgV7o5bn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDVBMi9BM0QyRENBQTgw
MDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4NjRXTmxSOENzaUJYdWps
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBUXdkeVFWYzg2NFdObFI4Q3NpQlh1amx1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQ1QTIvQTNEMkRDQUE4MDA3MTFFQzkwOEFBOTY3QzRGOUFFMDIvNEFCNzMwRTA4
MDBCMTFFQzg0QjNGQTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFntMgwDQQCAAIwBwMFACQAVSAwDQYJKoZIhvcNAQELBQAD
ggEBAKdJvSsuzmjhbpBuCd2o60ZcHBr3ABHljIbRUz72iDPeUMxnwtEtnFnOD19B
KQsdF+B0MCh2maEVheQK9a1w/rOgfX+vCHlVH91e1frLjv5/WiB/IJabV11KOum5
RAETM6jshLx9Ja9AwFKwo8UCsEB/Kx+UcPjMQwM7OoGgliToOr0n14Z2buS6Cb1y
Q91ehzndGPYH9ZQIR6YzVgJ2MhXv0WIssb2nxWvC9gJ9CcjJEHyZ88xAskvFiu4/
2OW1ksJPawv4Dlgttf6RJf/cTU5Qv8gdwzbjYFKTsdUwkGuu+DGLzvAgFgjp0trZ
5223rlot1pXErkz2LMhEbmUilFA=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:30 2026 by rpki-client