Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa
File:                     47772F946C2011EAA5965B3CC4F9AE02.roa (raw, json)
Hash identifier:          V9h//kX9bm3FcnRnBpWWd7+JfT/Z/sJHWRFvOyrgJiY=
Subject key identifier:   05:1D:4B:2E:A9:F8:95:8B:C3:34:F1:88:48:94:D3:A3:30:61:BB:F7
Certificate issuer:       /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial:       0ABE
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 19:16:27 +0000
ROA not before:           Wed 04 Feb 2026 19:16:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133932
IP address blocks:        103.44.223.0/24 maxlen: 24
                          103.76.3.0/24 maxlen: 24
                          103.76.28.0/23 maxlen: 24
                          116.206.84.0/22 maxlen: 22
                          116.206.84.0/24 maxlen: 24
                          116.206.85.0/24 maxlen: 24
                          116.206.86.0/24 maxlen: 24
                          116.206.87.0/24 maxlen: 24
                          2402:1040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
                          rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2750 (0xabe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
        Validity
            Not Before: Feb  4 19:16:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69839b0b-1079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:b8:67:8e:3d:91:57:39:27:2f:b6:51:17:
                    7c:56:d7:34:11:12:d8:42:97:d0:f1:52:2b:62:fa:
                    04:53:58:66:33:1f:51:60:d7:74:5c:98:af:90:33:
                    8c:91:ed:2c:89:72:1c:65:a0:9f:c9:0d:9e:c9:eb:
                    c6:2c:91:f4:48:17:94:a6:79:43:54:41:1b:1c:a3:
                    fd:10:64:62:46:b6:fd:3c:2b:5e:e2:0e:36:eb:f2:
                    1a:6c:bc:da:4e:5b:dc:4f:ff:1e:74:04:54:39:7b:
                    c6:39:09:51:36:e1:4f:66:a5:ec:9a:73:44:95:1f:
                    71:81:33:f9:e2:f7:ec:c8:55:e2:4b:b3:d1:64:bb:
                    65:3a:26:67:98:a7:dc:b2:43:a4:23:cf:f4:ad:63:
                    38:05:bc:d9:41:aa:35:02:9a:91:50:9b:cd:37:0a:
                    c6:56:dc:eb:09:95:ba:73:61:33:00:35:31:71:ce:
                    32:f7:99:fd:63:12:94:4b:63:3c:b8:45:e8:a8:96:
                    c6:ee:b1:12:a0:65:ac:65:ca:36:09:9b:15:cc:7d:
                    73:94:9b:84:26:1d:21:64:fc:84:34:99:b5:02:1f:
                    4a:08:c4:d4:b9:83:6d:5c:64:65:97:99:62:0d:97:
                    7f:39:42:bf:00:54:66:64:fd:30:ef:a3:05:a2:86:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:4B:2E:A9:F8:95:8B:C3:34:F1:88:48:94:D3:A3:30:61:BB:F7
            X509v3 Authority Key Identifier:
                keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.223.0/24
                  103.76.3.0/24
                  103.76.28.0/23
                  116.206.84.0/22
                IPv6:
                  2402:1040::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:28:fa:92:3f:f6:b7:7c:f2:cc:95:fd:a2:59:2d:26:08:
         4a:7d:bb:8f:5f:7a:f1:cc:3d:64:82:5b:18:13:ad:72:cc:19:
         7d:79:7b:ad:84:98:27:e3:1c:c4:4e:45:c5:f1:06:1a:61:25:
         e4:89:3c:d4:48:c4:ea:1e:34:20:e2:59:d9:54:74:94:a6:a6:
         39:64:94:56:fd:a0:8b:3a:f3:31:6a:50:0c:99:39:1b:da:f2:
         a4:7b:fd:b3:fe:1f:74:20:f2:d6:3b:1f:e1:35:81:41:64:b0:
         1a:28:e4:35:a1:81:c2:e6:f8:42:bf:61:6a:7e:87:b8:3b:18:
         4e:40:95:ac:bf:75:96:61:64:ad:74:f6:94:c2:59:3f:86:98:
         99:59:5a:7a:35:21:64:ad:b4:64:9d:ed:f4:36:69:46:7e:28:
         0a:59:05:ae:49:6b:a8:6b:31:f3:16:57:fa:8c:56:82:eb:3e:
         0f:75:32:c2:a9:98:20:1b:47:04:68:9b:d5:36:fe:f4:f5:57:
         d6:ca:2e:1c:51:46:b9:da:97:f9:b0:9e:e1:45:78:0c:29:91:
         61:a6:c1:7d:a3:ef:b1:c8:68:59:91:65:65:f2:54:8f:45:60:
         cf:60:80:c7:2f:c4:3c:f0:74:8d:ee:17:8b:e8:34:f7:70:57:
         f1:eb:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:53 2026 by rpki-client