Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/FFA62018DF1811E6805D922AC4F9AE02.roa
File:                     FFA62018DF1811E6805D922AC4F9AE02.roa (raw, json)
Hash identifier:          nyNyauRUDPa5qzU/whS2VoH2G/zVOb9Z0jsLTXI1XI4=
Subject key identifier:   A1:B9:D0:9B:4C:AD:8C:16:FA:0C:CD:9B:2E:A6:0C:F8:76:71:4D:A5
Certificate issuer:       /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
Certificate serial:       1CEC
Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/FFA62018DF1811E6805D922AC4F9AE02.roa
Signing time:             Mon 16 Feb 2026 16:13:40 +0000
ROA not before:           Mon 16 Feb 2026 16:13:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     64093
IP address blocks:        103.252.80.0/23 maxlen: 23
                          103.252.82.0/24 maxlen: 24
                          103.252.83.0/24 maxlen: 24
                          110.232.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl
                          rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7404 (0x1cec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C
        Validity
            Not Before: Feb 16 16:13:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69934234-dbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:f9:c5:bd:5e:5c:d5:ba:31:62:af:eb:82:
                    ab:4e:2f:79:e1:74:ac:73:e5:2b:d1:13:01:a8:ff:
                    48:12:12:f7:9e:a7:aa:27:c1:6a:18:f5:2c:6a:e6:
                    25:5b:1b:23:ec:94:00:e6:68:c6:01:eb:8d:b4:81:
                    b5:cf:fc:b9:90:99:f4:4e:dc:20:34:d4:cf:43:62:
                    04:7d:a3:38:9c:5c:3e:c6:54:1a:c2:33:42:a8:fb:
                    28:c2:9e:1b:93:c4:2b:cf:c3:4d:83:62:3a:ee:fb:
                    8f:3f:6c:6a:3e:32:a6:c6:66:43:73:bb:34:64:c6:
                    46:5d:da:c7:b8:ed:a0:f3:2e:e3:9e:36:05:80:ab:
                    23:2e:89:51:70:25:74:62:ec:56:a0:7f:5e:e0:bb:
                    82:b0:02:64:a4:25:eb:fa:e7:7e:2f:f3:f6:61:3d:
                    2e:36:91:b9:d6:e7:c7:ac:2e:cf:3e:91:b0:c5:df:
                    eb:4f:15:01:fb:cc:01:c8:9b:e5:5c:d1:f8:cc:dd:
                    cf:ac:02:a8:77:f2:e5:86:8f:9b:4b:3a:75:2f:00:
                    d6:bd:dc:9d:66:3a:4f:0f:fd:75:55:56:95:72:48:
                    a4:1c:4b:4c:97:17:64:37:79:15:6a:36:df:b2:60:
                    c8:32:d2:65:a8:9a:70:0f:9c:fb:ab:66:4c:c0:95:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B9:D0:9B:4C:AD:8C:16:FA:0C:CD:9B:2E:A6:0C:F8:76:71:4D:A5
            X509v3 Authority Key Identifier:
                keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/FFA62018DF1811E6805D922AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.80.0/22
                  110.232.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:90:e3:1e:df:4f:52:2d:74:9b:32:e7:5f:11:24:18:f2:5d:
         0c:b5:df:80:7e:20:10:3d:b1:3b:98:fc:a0:30:cc:b2:77:fe:
         5a:8f:a4:04:27:5b:c3:14:0f:da:10:8d:c6:f4:9e:e5:73:10:
         b5:23:80:1d:75:d0:4a:94:db:15:9e:4b:00:bb:8b:05:8a:7b:
         c9:fc:e3:07:6f:7d:df:77:d4:18:0c:ae:1c:34:4a:ce:7d:79:
         28:74:92:ab:f8:ff:aa:84:ff:e5:9d:c1:a8:cd:e6:fa:b7:7b:
         13:ed:95:4e:69:20:83:b1:02:8a:66:3e:4e:da:30:6d:23:30:
         0b:85:c3:ec:7f:a2:f7:a7:0a:17:34:05:c5:e3:f9:98:89:71:
         56:e2:f0:4c:48:68:a7:32:86:cd:b2:b0:07:91:83:75:ca:8b:
         67:90:19:cc:35:00:e9:72:85:15:57:6f:8f:a9:9f:b2:bf:d6:
         e7:86:cc:1e:72:c8:9c:80:a2:71:b8:43:03:7e:6d:83:fe:ab:
         c1:50:00:f6:06:24:3e:9a:1b:7b:52:27:cb:55:7d:36:2e:15:
         5f:76:fe:1c:95:16:11:fd:81:5f:e9:7c:66:8c:b8:9f:9c:ff:
         62:a6:9d:b4:c0:c6:29:3a:c7:d5:30:04:f4:ef:7e:90:9a:cf:
         a0:ee:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:22 2026 by rpki-client