Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/C5BEFEE204AC11F1AA081403413D8C67.roa
File:                     C5BEFEE204AC11F1AA081403413D8C67.roa (raw, json)
Hash identifier:          GCvY7Xqw5Q1NiMXjaZcB2sOJUIAvbubqgrlHiVc6yN4=
Subject key identifier:   6C:BE:A6:74:BB:CE:88:5D:0C:89:52:A4:DD:B2:A3:B9:28:B1:54:C2
Certificate issuer:       /CN=A91EAEAF/serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
Certificate serial:       029C
Authority key identifier: F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/C5BEFEE204AC11F1AA081403413D8C67.roa
Signing time:             Sun 08 Feb 2026 05:12:32 +0000
ROA not before:           Sun 08 Feb 2026 05:12:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        103.232.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl
                          rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAEAF, serialNumber=F2084F7A0F3C0A91F825FEFD9F1035F33541584C
        Validity
            Not Before: Feb  8 05:12:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69881b40-3101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:ee:63:87:f3:0f:1f:db:81:9b:c0:3f:d4:
                    c2:9b:04:b7:ef:e2:4a:03:bc:31:34:a5:d0:cc:95:
                    9a:46:32:79:2e:7e:24:42:87:0d:9d:6b:2c:64:aa:
                    c1:4b:1b:c5:de:31:91:90:80:f6:bb:d9:62:ce:72:
                    47:76:aa:cb:0d:da:a9:90:79:3e:6c:2b:28:31:79:
                    7d:22:3e:6c:f1:1f:37:ee:62:0f:27:66:fb:48:ed:
                    05:e4:1c:2b:2e:9a:01:d4:68:7b:16:32:cd:2a:3b:
                    62:09:55:a3:e8:b4:e7:08:f0:f5:08:48:01:e8:8b:
                    0c:6f:4c:05:52:91:15:10:a9:c5:f8:28:03:7f:a7:
                    4f:17:13:3e:e1:46:6c:93:6d:f1:e2:2a:86:0f:09:
                    3e:64:72:2e:2e:5f:a9:d5:45:9a:8d:41:65:5c:45:
                    25:a2:fb:3b:82:f8:a1:a5:e9:e5:b0:e3:d9:d0:36:
                    91:2c:31:bf:5c:bb:bd:05:29:7a:3d:d9:de:b8:2d:
                    80:28:73:2f:8a:bb:cc:ca:d6:04:da:6a:e7:e5:68:
                    03:af:8a:2a:97:64:75:62:93:56:5d:ce:5e:ee:49:
                    1b:9c:dc:2b:9e:63:3f:b4:50:e7:73:4c:1c:34:6f:
                    ce:72:7c:23:cd:97:67:be:f7:43:82:75:3f:59:0c:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BE:A6:74:BB:CE:88:5D:0C:89:52:A4:DD:B2:A3:B9:28:B1:54:C2
            X509v3 Authority Key Identifier:
                keyid:F2:08:4F:7A:0F:3C:0A:91:F8:25:FE:FD:9F:10:35:F3:35:41:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/8ghPeg88CpH4Jf79nxA18zVBWEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ghPeg88CpH4Jf79nxA18zVBWEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAEAF/BE3521B833F111EDB8361086C4F9AE02/C5BEFEE204AC11F1AA081403413D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:76:39:26:f7:31:e9:cc:2d:3f:6a:70:ee:15:11:3d:ab:81:
         d9:2e:c7:1b:4f:d0:28:f9:85:5c:94:19:06:b9:fc:34:83:9f:
         7b:da:36:a4:3d:b4:aa:65:7a:3a:ae:02:d5:6c:d0:5e:cb:0a:
         42:fc:ba:03:2c:af:a4:20:e0:af:cb:1d:92:f6:73:ba:62:3a:
         a9:67:ca:57:3b:64:a6:d7:b5:09:25:06:b5:bb:64:e9:1b:dc:
         8f:19:23:bd:bb:46:43:0b:df:43:4d:c6:a1:97:4f:3d:48:0a:
         98:60:4f:ea:2b:29:33:8c:3d:52:9c:e6:86:1a:07:e0:4e:09:
         51:14:bc:a4:66:58:9e:c3:7c:f7:88:3b:5a:a9:c6:4b:fd:2b:
         57:60:3a:b9:37:2b:5d:07:0b:91:a3:d2:9e:ba:76:3e:a2:1e:
         73:47:51:18:4b:ef:07:c6:d7:be:9e:38:76:e3:0c:fa:0f:b8:
         79:02:55:a6:f6:40:0e:9a:a5:17:f2:3b:18:56:8f:24:50:e9:
         76:8f:15:6d:33:e8:f1:57:5e:dd:49:fb:d8:d7:40:c6:cc:c3:
         36:e9:3b:fb:38:b2:84:0c:23:f9:93:ae:bf:27:ba:e9:c6:a3:
         77:c2:a2:e0:8e:65:68:d1:7d:fa:9b:f0:41:64:22:d0:4d:71:
         02:f7:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:16 2026 by rpki-client