Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/16BDEF34FD2C11F08CD53FAA426F56BC.roa
File:                     16BDEF34FD2C11F08CD53FAA426F56BC.roa (raw, json)
Hash identifier:          bcwSGYaTP6vCUveMu5twMgtAgKGG9bGybDCyffxjRXg=
Subject key identifier:   CC:50:4F:D7:F0:1E:97:3C:0D:9C:3A:05:60:24:DE:A8:96:C5:33:BB
Certificate issuer:       /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
Certificate serial:       13B6
Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/16BDEF34FD2C11F08CD53FAA426F56BC.roa
Signing time:             Thu 29 Jan 2026 16:03:45 +0000
ROA not before:           Thu 29 Jan 2026 16:03:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153174
IP address blocks:        103.139.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5046 (0x13b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
        Validity
            Not Before: Jan 29 16:03:45 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=697b84e1-0823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:b4:26:4e:06:03:2b:cd:d1:07:aa:8a:8a:
                    88:ef:ff:08:ca:6e:e7:68:61:b1:1e:da:1e:4c:e7:
                    ec:e7:94:b4:d2:42:91:8a:7d:7b:7c:a3:f1:aa:ad:
                    d0:b4:e6:57:30:d4:4d:91:7b:fb:16:67:09:d8:6e:
                    8f:30:f9:a4:d5:33:6a:63:23:95:22:13:7e:2a:ea:
                    b1:d6:d5:70:4f:d6:9b:42:b9:ff:9c:20:cb:2d:76:
                    94:dc:31:8b:33:b4:3f:88:59:84:4d:e5:e3:c8:47:
                    ae:b5:38:74:a4:42:43:29:c1:2c:0e:84:aa:ee:a0:
                    ba:fb:a5:ae:32:07:b6:30:c5:15:27:f8:6d:29:4c:
                    15:24:7f:22:32:f3:eb:23:d6:54:6a:38:4a:42:0d:
                    cf:59:23:4c:d9:c2:ae:eb:82:f9:46:4e:f5:d4:ac:
                    46:d2:01:4a:79:37:27:69:dc:94:4f:58:20:c6:ef:
                    a7:df:f9:86:75:35:27:53:47:c2:7e:61:32:f6:16:
                    97:fd:2c:3f:6f:90:33:25:9a:f8:ce:2d:1e:0e:0c:
                    7b:4c:af:5a:8d:bf:6d:3e:0c:9b:9d:cf:bd:10:b1:
                    62:99:11:cc:23:1e:fa:e5:67:03:e2:f7:8f:88:20:
                    b9:03:34:c7:3c:1e:d8:11:a4:43:93:4c:c4:41:ce:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:4F:D7:F0:1E:97:3C:0D:9C:3A:05:60:24:DE:A8:96:C5:33:BB
            X509v3 Authority Key Identifier:
                keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/16BDEF34FD2C11F08CD53FAA426F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:26:b9:fa:c7:32:bd:b7:5f:67:7d:59:8e:3e:19:3c:87:
         07:d1:21:e5:24:26:de:c2:48:4d:67:9e:7b:cc:bc:ff:9f:7b:
         c0:27:73:bf:7d:c7:7b:04:99:9a:c3:5b:18:a5:33:41:5e:45:
         8c:0b:1d:65:51:ca:bf:a5:4f:0f:c3:eb:ff:12:5f:6b:7e:d4:
         40:0b:3c:cb:30:cb:ee:06:9f:6c:e5:a4:ca:15:64:b0:63:f5:
         97:0c:e9:76:d0:a2:1b:28:6b:76:0e:a1:c9:e3:26:83:6e:c1:
         81:1f:8c:17:29:1d:77:41:83:88:a1:20:30:1c:79:16:e1:29:
         5d:f1:1c:7a:77:bc:7c:33:a9:af:8d:5d:b4:3c:4a:a3:ca:83:
         6e:43:e7:26:e0:73:d9:41:b9:f2:0a:d5:90:fd:42:f7:35:53:
         b7:f4:e6:dc:c7:fb:18:82:a9:17:ee:bf:f3:56:89:5f:98:b5:
         4d:10:01:a7:4a:08:df:26:0a:d8:76:39:3a:41:ab:3b:d4:c6:
         e9:6a:0d:e0:c2:89:a5:d4:76:f8:39:14:fa:4c:4f:59:16:a2:
         65:3a:56:8e:50:26:a8:e7:61:91:15:ca:bd:3c:01:01:e5:76:
         97:27:5d:d5:29:46:61:46:65:b8:23:c2:17:44:16:c9:2f:19:
         0a:34:6d:c4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICE7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4
ODRBRTY5QTIwHhcNMjYwMTI5MTYwMzQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdiODRlMS0wODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2S0Jk4GAyvN0QeqioqI7/8Iym7naGGxHtoeTOfs55S00kKRin17fKPxqq3Q
tOZXMNRNkXv7FmcJ2G6PMPmk1TNqYyOVIhN+Kuqx1tVwT9abQrn/nCDLLXaU3DGL
M7Q/iFmETeXjyEeutTh0pEJDKcEsDoSq7qC6+6WuMge2MMUVJ/htKUwVJH8iMvPr
I9ZUajhKQg3PWSNM2cKu64L5Rk711KxG0gFKeTcnadyUT1ggxu+n3/mGdTUnU0fC
fmEy9haX/Sw/b5AzJZr4zi0eDgx7TK9ajb9tPgybnc+9ELFimRHMIx765WcD4veP
iCC5AzTHPB7YEaRDk0zEQc5qgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMxQT9fw
Hpc8DZw6BWAk3qiWxTO7MB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE
QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUZGRjAvNDRGRUJDOTJBREIyMTFFODlDOUI0NTUzQzRGOUFFMDIvMTZCREVGMzRG
RDJDMTFGMDhDRDUzRkFBNDI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABni1AwDQYJKoZIhvcNAQELBQADggEBAD8NJrn6xzK9t19n
fVmOPhk8hwfRIeUkJt7CSE1nnnvMvP+fe8Anc799x3sEmZrDWxilM0FeRYwLHWVR
yr+lTw/D6/8SX2t+1EALPMswy+4Gn2zlpMoVZLBj9ZcM6XbQohsoa3YOocnjJoNu
wYEfjBcpHXdBg4ihIDAceRbhKV3xHHp3vHwzqa+NXbQ8SqPKg25D5ybgc9lBufIK
1ZD9Qvc1U7f05tzH+xiCqRfuv/NWiV+YtU0QAadKCN8mCth2OTpBqzvUxulqDeDC
iaXUdvg5FPpMT1kWomU6Vo5QJqjnYZEVyr08AQHldpcnXdUpRmFGZbgjwhdEFskv
GQo0bcQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:53 2026 by rpki-client