Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa
File:                     70F65056CDB911F0BDBD9948C4F9AE02.roa (raw, json)
Hash identifier:          CyMSzXkj1o9GyJUXEuedzA/o5HAcXdmRkRalhaJUrLo=
Subject key identifier:   3B:26:33:F2:33:B1:74:BD:FC:58:1E:B9:4A:0C:A1:7A:37:84:AB:51
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       0869
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa
Signing time:             Mon 16 Feb 2026 20:17:38 +0000
ROA not before:           Mon 16 Feb 2026 20:17:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     58800
IP address blocks:        103.245.108.0/22 maxlen: 22
                          103.245.108.0/24 maxlen: 24
                          103.245.109.0/24 maxlen: 24
                          103.245.110.0/24 maxlen: 24
                          103.245.111.0/24 maxlen: 24
                          150.107.52.0/24 maxlen: 24
                          150.107.53.0/24 maxlen: 24
                          150.107.54.0/24 maxlen: 24
                          2406:b00::/32 maxlen: 32
                          2406:b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Feb 16 20:17:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69937b62-ac69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:70:12:9d:13:aa:04:47:51:81:5a:1b:79:
                    9e:bf:f6:d1:46:35:c5:e3:49:c6:54:95:7e:ea:a1:
                    a5:69:94:6f:ce:57:e1:03:a5:4c:60:61:79:b0:19:
                    d4:37:a4:7c:cd:13:13:30:f3:b6:c0:1f:88:ee:4d:
                    a4:3e:9c:76:21:35:5a:e7:fe:b2:be:b3:ec:58:36:
                    a2:e0:40:ae:ef:1f:e4:21:4f:90:a9:cd:c5:da:26:
                    4e:b9:88:8b:9d:91:b9:c5:4b:46:38:60:7c:44:e7:
                    49:86:06:6b:14:39:62:70:93:e1:67:97:c3:8c:59:
                    23:2b:1d:d4:3d:6e:ac:d6:6c:95:9a:0a:c3:4e:31:
                    d1:3b:53:fc:dd:27:0a:cc:33:a9:42:58:f9:e5:81:
                    1a:4a:a4:db:04:67:a3:34:a2:83:6e:c0:ad:4a:a9:
                    99:e6:d5:26:21:90:cd:5a:10:ec:df:ec:f4:ff:b8:
                    6e:a9:f0:9e:4c:07:2e:fd:ef:34:39:82:7a:81:fb:
                    26:f7:19:20:6f:0b:38:8e:5b:a3:2c:c4:ba:dc:15:
                    65:13:ff:5a:c5:31:62:65:6d:35:b2:a2:e7:04:26:
                    27:50:1d:07:3c:31:95:40:32:97:8c:79:a1:74:bb:
                    a9:6e:2e:6c:d6:ee:82:32:76:87:b8:aa:6e:01:41:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:26:33:F2:33:B1:74:BD:FC:58:1E:B9:4A:0C:A1:7A:37:84:AB:51
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.108.0/22
                  150.107.52.0-150.107.54.255
                IPv6:
                  2406:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:99:c8:85:f7:7c:e3:dd:06:8a:da:f3:8f:9f:b1:b8:91:d1:
         2f:ff:b6:a3:6a:19:41:c7:3d:0e:ba:bf:16:62:dd:2e:f7:c6:
         e3:65:9a:83:3e:af:4f:bc:0a:61:a7:c9:d3:76:28:d2:7d:eb:
         0e:09:29:a6:e7:8e:82:dc:db:59:36:da:53:1c:63:0d:dd:63:
         4f:2e:37:f1:f5:4b:9d:84:0c:32:a7:61:8f:a2:23:61:6b:01:
         d9:01:98:fc:06:00:c1:02:21:8a:ad:1b:ea:c8:a8:79:a1:1a:
         db:22:a1:24:9f:2e:6d:6b:a4:d0:11:57:6b:90:83:36:00:95:
         0d:4d:f3:ea:d6:08:f8:ae:36:7f:54:c1:77:cf:0e:3b:90:63:
         95:ea:2a:33:16:b5:97:ab:85:97:3a:e3:37:8c:4d:12:21:42:
         4b:3e:26:95:01:34:a9:8b:01:34:20:ca:b0:46:73:92:25:fd:
         bb:d4:6a:60:81:24:9e:fa:b4:83:8e:f1:32:ea:ff:c7:5f:67:
         29:49:73:1f:90:0f:1f:22:d8:36:69:a3:22:fa:d3:65:8c:b9:
         a7:6b:97:3d:4c:ea:1d:40:40:cf:de:ed:80:d7:d2:a5:59:c5:
         93:2e:61:fc:2c:a4:c2:09:ae:61:7b:c7:14:0c:89:6b:ce:3f:
         d0:bc:f5:00
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4
NzI3OTc2MEQwHhcNMjYwMjE2MjAxNzM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTkzN2I2Mi1hYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBpwEp0TqgRHUYFaG3mev/bRRjXF40nGVJV+6qGlaZRvzlfhA6VMYGF5sBnU
N6R8zRMTMPO2wB+I7k2kPpx2ITVa5/6yvrPsWDai4ECu7x/kIU+Qqc3F2iZOuYiL
nZG5xUtGOGB8ROdJhgZrFDlicJPhZ5fDjFkjKx3UPW6s1myVmgrDTjHRO1P83ScK
zDOpQlj55YEaSqTbBGejNKKDbsCtSqmZ5tUmIZDNWhDs3+z0/7huqfCeTAcu/e80
OYJ6gfsm9xkgbws4jlujLMS63BVlE/9axTFiZW01sqLnBCYnUB0HPDGVQDKXjHmh
dLupbi5s1u6CMnaHuKpuAUECIQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDsmM/Iz
sXS9/FgeuUoMoXo3hKtRMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC
NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUQxN0YvQTU2RDVGNDBGQjQ3MTFFQUJFRjQ3RDNFQzRGOUFFMDIvNzBGNjUwNTZD
REI5MTFGMEJEQkQ5OTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E
LTArMBoEAgABMBQDBAJn9WwwDAMEApZrNAMEAJZrNjANBAIAAjAHAwUAJAYLADAN
BgkqhkiG9w0BAQsFAAOCAQEASJnIhfd8490Gitrzj5+xuJHRL/+2o2oZQcc9Drq/
FmLdLvfG42Wagz6vT7wKYafJ03Yo0n3rDgkppueOgtzbWTbaUxxjDd1jTy438fVL
nYQMMqdhj6IjYWsB2QGY/AYAwQIhiq0b6sioeaEa2yKhJJ8ubWuk0BFXa5CDNgCV
DU3z6tYI+K42f1TBd88OO5BjleoqMxa1l6uFlzrjN4xNEiFCSz4mlQE0qYsBNCDK
sEZzkiX9u9RqYIEknvq0g47xMur/x19nKUlzH5APHyLYNmmjIvrTZYy5p2uXPUzq
HUBAz97tgNfSpVnFky5h/CykwgmuYXvHFAyJa84/0Lz1AA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:25:21 2026 by rpki-client