Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/30B8A186DBEF11EFAF6FF37AC4F9AE02.roa
File:                     30B8A186DBEF11EFAF6FF37AC4F9AE02.roa (raw, json)
Hash identifier:          1ucyxa4me8JE58q4K4O5yyJSXsBHZYfJZP9lgINTe3c=
Subject key identifier:   EA:89:27:77:C8:74:0D:98:C2:E9:DF:6F:6B:47:7E:74:76:15:11:EA
Certificate issuer:       /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial:       050E
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/30B8A186DBEF11EFAF6FF37AC4F9AE02.roa
Signing time:             Fri 30 Jan 2026 23:20:09 +0000
ROA not before:           Fri 30 Jan 2026 23:20:09 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     136997
IP address blocks:        103.175.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
                          rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D774B, serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
        Validity
            Not Before: Jan 30 23:20:09 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=697d3ca9-c3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:bc:45:4d:72:55:0c:33:6f:d5:a4:81:98:
                    2e:35:cb:19:ce:d2:40:bf:45:93:d5:49:e1:88:e6:
                    a9:af:7a:03:47:bd:49:50:b4:f9:b2:c6:94:e6:64:
                    a7:82:a8:09:f6:6f:83:d4:64:2a:d1:b2:e8:3f:e3:
                    d0:1b:0e:3c:f7:13:cc:d5:f9:bb:2c:92:c2:e5:58:
                    a7:d3:3b:a3:06:c6:a7:80:b0:d2:9d:00:29:19:f7:
                    57:37:82:67:7f:e6:9a:0e:97:d6:2d:01:e3:8e:cd:
                    b9:ba:9a:54:24:30:ca:8d:4a:22:ff:89:ce:96:d7:
                    79:64:eb:cb:0c:7c:df:6e:9b:e9:4c:b1:1d:58:e3:
                    d6:05:43:48:fa:80:49:8e:56:ef:80:10:b5:f8:23:
                    0a:4f:46:4c:68:0d:d7:11:0e:e5:55:d7:24:2b:f5:
                    c3:24:78:32:f8:3c:d2:af:65:55:29:65:0b:28:4d:
                    22:d4:d0:65:95:08:ee:d5:48:28:83:54:d6:86:0d:
                    dd:72:00:e0:0f:39:c3:2c:d9:c9:2f:4e:a7:7a:00:
                    48:11:3a:2f:14:3c:16:ea:3d:0d:2a:22:e6:3b:1f:
                    f4:2b:02:28:4f:a0:96:1b:b5:a9:6e:8a:c2:d8:a6:
                    6c:97:3a:8a:20:08:29:b2:b3:24:45:e7:a4:c6:b9:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:89:27:77:C8:74:0D:98:C2:E9:DF:6F:6B:47:7E:74:76:15:11:EA
            X509v3 Authority Key Identifier:
                keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/30B8A186DBEF11EFAF6FF37AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:43:fb:55:9f:6b:8e:02:5e:28:5e:bf:6e:12:5d:64:41:c4:
         b4:c1:c5:46:98:b2:58:31:08:be:98:7e:6b:09:f0:d5:11:70:
         cb:5f:c9:6d:f3:1e:db:74:d7:c2:5f:90:ce:03:9b:0e:87:b1:
         38:a3:9e:02:3c:ab:af:f6:b6:b6:56:fd:98:59:72:1f:c6:8e:
         fb:89:42:e8:78:eb:e7:4e:6c:29:61:a5:8d:4f:8b:39:88:46:
         01:60:ee:8a:38:50:e1:d4:ab:03:db:32:46:f6:81:48:ec:07:
         e5:b1:dc:15:db:55:74:a2:4f:f4:24:1e:7d:e4:12:f1:ed:ef:
         b6:2a:53:b7:ef:f3:b3:5c:3c:94:26:eb:55:38:cf:1a:c5:db:
         ac:ec:cc:0b:8a:d5:8e:41:bb:98:3d:05:39:4f:a1:4e:b9:fa:
         52:21:46:51:cb:18:12:8a:0e:94:88:61:29:92:15:84:b0:d4:
         ec:ef:44:02:bd:90:9a:5e:c6:44:d8:bb:24:bc:6f:ca:93:a2:
         36:1a:a8:f1:01:4f:8f:66:4b:d9:1d:70:51:ea:66:c6:fc:51:
         e7:b6:3e:03:ab:d8:4b:b8:bf:be:e7:b0:87:88:87:7f:99:87:
         9a:8d:a2:b2:be:4b:0a:d0:81:f3:33:7a:78:f7:94:87:da:97:
         78:08:fa:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3
NzA0NjI1NDEwHhcNMjYwMTMwMjMyMDA5WhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdkM2NhOS1jM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nO8RU1yVQwzb9WkgZguNcsZztJAv0WT1UnhiOapr3oDR71JULT5ssaU5mSn
gqgJ9m+D1GQq0bLoP+PQGw489xPM1fm7LJLC5Vin0zujBsangLDSnQApGfdXN4Jn
f+aaDpfWLQHjjs25uppUJDDKjUoi/4nOltd5ZOvLDHzfbpvpTLEdWOPWBUNI+oBJ
jlbvgBC1+CMKT0ZMaA3XEQ7lVdckK/XDJHgy+DzSr2VVKWULKE0i1NBllQju1Ugo
g1TWhg3dcgDgDznDLNnJL06negBIETovFDwW6j0NKiLmOx/0KwIoT6CWG7WpborC
2KZslzqKIAgpsrMkReekxrlR4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOqJJ3fI
dA2Ywunfb2tHfnR2FRHqMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz
QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDc3NEIvOEZBQjIxNjY0M0IxMTFFQzlBNTFBNTJFQzRGOUFFMDIvMzBCOEExODZE
QkVGMTFFRkFGNkZGMzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnr/QwDQYJKoZIhvcNAQELBQADggEBALdD+1Wfa44CXihe
v24SXWRBxLTBxUaYslgxCL6YfmsJ8NURcMtfyW3zHtt018JfkM4Dmw6HsTijngI8
q6/2trZW/ZhZch/GjvuJQuh46+dObClhpY1PizmIRgFg7oo4UOHUqwPbMkb2gUjs
B+Wx3BXbVXSiT/QkHn3kEvHt77YqU7fv87NcPJQm61U4zxrF26zszAuK1Y5Bu5g9
BTlPoU65+lIhRlHLGBKKDpSIYSmSFYSw1OzvRAK9kJpexkTYuyS8b8qTojYaqPEB
T49mS9kdcFHqZsb8Uee2PgOr2Eu4v77nsIeIh3+Zh5qNorK+SwrQgfMzenj3lIfa
l3gI+tw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:31:23 2026 by rpki-client