Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/521DCED89C5911EC97E58855C4F9AE02.roa
File:                     521DCED89C5911EC97E58855C4F9AE02.roa (raw, json)
Hash identifier:          RMf1DdD1DS2nxhRAowLM9D2bY7BGy11YOR4lYZXYWbE=
Subject key identifier:   08:38:92:15:AA:E1:B9:D5:5D:F1:97:FD:0D:82:4E:71:F6:00:CE:C7
Certificate issuer:       /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
Certificate serial:       0417
Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/521DCED89C5911EC97E58855C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 00:20:10 +0000
ROA not before:           Tue 27 Jan 2026 00:20:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138522
IP address blocks:        103.127.176.0/22 maxlen: 22
                          103.127.176.0/23 maxlen: 23
                          103.127.176.0/24 maxlen: 24
                          103.127.177.0/24 maxlen: 24
                          103.127.178.0/23 maxlen: 23
                          103.127.178.0/24 maxlen: 24
                          103.127.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482
        Validity
            Not Before: Jan 27 00:20:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697804ba-6c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:30:37:33:41:e3:69:a1:0c:66:15:79:5b:
                    df:40:82:79:2d:01:fe:7d:38:ae:c4:4d:aa:39:44:
                    85:f7:c8:de:e6:62:73:97:21:5b:e2:45:f8:da:11:
                    a8:32:17:65:c1:21:88:3c:c1:0d:d1:d4:6e:8c:5d:
                    be:d6:0c:e1:a6:cd:af:d3:4b:20:3c:d3:a3:84:7e:
                    aa:98:b7:59:ec:6b:c9:c3:5b:8f:d7:0c:f1:0d:5a:
                    15:05:53:2a:81:e6:bc:03:23:d9:88:8f:1e:0d:cd:
                    ed:b0:4a:40:c6:0d:28:a4:f7:bd:ea:e5:4d:e5:5c:
                    52:48:a4:5e:7b:80:f5:f8:3f:ab:8d:0c:0e:72:09:
                    e7:e1:a7:3a:70:e8:97:56:75:e6:71:fc:52:1f:98:
                    e9:cb:6e:84:eb:78:83:4b:ff:3f:8f:6a:13:50:ef:
                    18:36:22:66:5e:7a:40:a8:d4:a7:32:a5:76:49:d1:
                    ff:73:9a:f9:d3:a3:dd:56:cd:3b:a7:e2:1a:15:06:
                    b2:cd:44:e3:ea:44:86:2b:b5:a5:70:3d:8a:9a:a2:
                    45:c8:36:4e:56:ca:44:ee:22:c8:60:a0:b8:a3:97:
                    7a:6b:be:32:00:b8:43:88:88:59:aa:2e:cf:8d:1c:
                    0f:0c:a5:08:37:23:d2:8f:6a:7b:0a:cd:97:56:48:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:92:15:AA:E1:B9:D5:5D:F1:97:FD:0D:82:4E:71:F6:00:CE:C7
            X509v3 Authority Key Identifier:
                keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/521DCED89C5911EC97E58855C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:85:85:af:5b:a6:75:dc:d8:4b:48:a6:32:4c:90:99:69:
         d4:6e:29:ee:97:5b:56:7c:f4:19:7d:b8:46:7e:1f:bd:c6:1c:
         c4:15:b0:36:4c:15:35:d0:5e:d9:1f:12:b5:9b:11:30:fd:28:
         b8:03:52:5c:c6:f5:e9:0c:2f:e8:ff:c9:f8:f1:2e:a8:93:a6:
         ed:ed:61:75:ab:14:8a:3e:ef:74:e8:e2:de:a4:56:ca:f5:bd:
         b9:30:1d:80:cd:8a:eb:45:78:47:fe:b6:e9:fe:ba:cc:7f:29:
         15:18:54:75:30:e8:c5:ca:0a:b8:58:d6:10:01:34:ae:c3:4e:
         df:18:de:c5:96:58:72:54:50:3d:27:c1:d7:52:55:79:fb:20:
         b6:3e:bc:f4:6d:bc:c2:78:9b:9c:78:34:9c:bc:bf:47:18:ea:
         12:6e:70:90:e8:58:76:0a:60:cc:b2:08:0a:df:f6:c3:c8:f2:
         75:e6:a6:63:2e:cc:c1:bf:61:40:0f:99:19:fe:0f:00:4b:ff:
         94:75:da:68:57:0d:a7:90:4d:87:e0:62:cb:74:03:6a:15:26:
         c6:cb:7f:a8:27:9f:c4:b3:4e:cf:9f:71:14:58:df:2d:29:fe:
         7d:4c:aa:b8:ae:12:3b:e3:e3:19:6e:7b:1b:64:84:35:95:c1:
         32:84:0d:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE
OEE3RDY0ODIwHhcNMjYwMTI3MDAyMDEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTc4MDRiYS02YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJAwNzNB42mhDGYVeVvfQIJ5LQH+fTiuxE2qOUSF98je5mJzlyFb4kX42hGo
MhdlwSGIPMEN0dRujF2+1gzhps2v00sgPNOjhH6qmLdZ7GvJw1uP1wzxDVoVBVMq
gea8AyPZiI8eDc3tsEpAxg0opPe96uVN5VxSSKRee4D1+D+rjQwOcgnn4ac6cOiX
VnXmcfxSH5jpy26E63iDS/8/j2oTUO8YNiJmXnpAqNSnMqV2SdH/c5r506PdVs07
p+IaFQayzUTj6kSGK7WlcD2KmqJFyDZOVspE7iLIYKC4o5d6a74yALhDiIhZqi7P
jRwPDKUINyPSj2p7Cs2XVkiPcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAg4khWq
4bnVXfGX/Q2CTnH2AM7HMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD
NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDlFMDMvOTk2QTdFODg5QzU2MTFFQ0JERUUwNTUzQzRGOUFFMDIvNTIxRENFRDg5
QzU5MTFFQzk3RTU4ODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnf7AwDQYJKoZIhvcNAQELBQADggEBACoshYWvW6Z13NhL
SKYyTJCZadRuKe6XW1Z89Bl9uEZ+H73GHMQVsDZMFTXQXtkfErWbETD9KLgDUlzG
9ekML+j/yfjxLqiTpu3tYXWrFIo+73To4t6kVsr1vbkwHYDNiutFeEf+tun+usx/
KRUYVHUw6MXKCrhY1hABNK7DTt8Y3sWWWHJUUD0nwddSVXn7ILY+vPRtvMJ4m5x4
NJy8v0cY6hJucJDoWHYKYMyyCArf9sPI8nXmpmMuzMG/YUAPmRn+DwBL/5R12mhX
DaeQTYfgYst0A2oVJsbLf6gnn8SzTs+fcRRY3y0p/n1MqriuEjvj4xluextkhDWV
wTKEDZU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:28:33 2026 by rpki-client