Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa
File:                     CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (raw, json)
Hash identifier:          6sEONU1eT7ggL94AI93CtalLCv5yF7DoF7b4Gc6XPEk=
Subject key identifier:   4B:9C:F8:F3:7C:2D:21:C6:60:2B:4E:C4:1C:E4:F0:D2:88:5A:2E:46
Certificate issuer:       /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial:       0423
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa
Signing time:             Wed 11 Feb 2026 00:20:43 +0000
ROA not before:           Wed 11 Feb 2026 00:20:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133201
IP address blocks:        103.233.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
                          rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 23:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
        Validity
            Not Before: Feb 11 00:20:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698bcb5b-90e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:5a:39:ac:d9:5e:39:37:51:94:a1:de:09:
                    e3:53:60:aa:09:17:3d:cf:9d:a6:3f:a1:ca:88:55:
                    27:a3:75:b1:a4:4e:b2:4f:9e:b1:e5:0e:f4:e3:1c:
                    d8:5e:0d:76:d6:2a:6e:ed:32:4c:ad:be:6c:08:15:
                    ba:b0:48:29:3c:7e:1f:a2:66:a4:e2:c9:96:0f:78:
                    d8:2b:20:71:2e:a7:e9:b0:cc:6d:f7:53:7f:bc:fa:
                    6e:ea:1a:df:f1:81:77:d6:25:ac:17:59:15:56:d1:
                    0e:37:ef:0c:1f:f6:32:38:a2:2f:59:32:9f:7f:55:
                    aa:50:c6:02:2f:81:54:b6:fd:f9:6f:82:e9:f4:3e:
                    a0:60:f3:a3:30:75:66:d4:c1:14:3d:a5:23:b3:bf:
                    2a:8b:8e:e6:e3:94:c8:f1:09:44:c5:4b:ed:6f:36:
                    e1:6b:8d:f3:9f:86:07:67:13:78:7f:d8:7a:4a:26:
                    91:06:69:0c:45:76:f9:d4:e7:42:4e:af:1c:84:2b:
                    23:59:93:5f:b8:0d:0d:cb:7a:6c:8e:8c:b6:1c:08:
                    ab:59:0c:96:f4:62:9c:73:22:d6:52:47:de:08:1e:
                    23:69:f5:f3:0b:aa:0c:b3:d3:92:e2:08:f8:11:a2:
                    60:98:bb:8d:ba:fc:05:ff:c4:8c:3c:35:ca:7b:84:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9C:F8:F3:7C:2D:21:C6:60:2B:4E:C4:1C:E4:F0:D2:88:5A:2E:46
            X509v3 Authority Key Identifier:
                keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:84:84:a4:d1:73:cc:00:2a:8e:77:f9:af:24:05:a9:bd:
         f7:58:d9:2f:28:4e:1d:2e:e1:c7:86:4a:1b:b7:45:f6:f3:d4:
         f1:e2:3a:dd:6a:ea:a6:34:5d:1d:37:6f:77:4f:27:f2:ce:8b:
         8d:4a:cc:27:d6:05:6c:ce:a1:9d:c9:1e:c8:32:fb:76:3b:ff:
         f2:ca:c5:e9:a8:63:6e:d5:b6:21:14:a3:ee:75:27:09:69:50:
         29:2c:c9:db:8d:30:70:5c:94:bd:8f:fc:43:05:c2:91:65:10:
         3d:a0:db:d1:81:21:4b:00:df:6e:cb:c6:8b:ea:31:8f:3f:f8:
         34:1d:44:2e:da:cf:1e:2b:f9:a5:96:b6:83:f7:0e:e8:98:ef:
         aa:88:be:5c:61:dc:03:46:25:af:bb:ff:f9:d2:bc:4f:5c:d1:
         f4:87:a9:53:90:59:2e:4e:17:1d:84:1d:3c:59:d1:36:2c:9c:
         ad:d0:33:43:40:47:62:be:a8:ab:44:65:b6:bc:ab:1e:62:d7:
         0c:d4:76:2b:9e:5d:9c:7c:7e:a1:2a:5b:26:9a:bc:cd:48:1e:
         cf:3a:80:b8:9c:91:bd:8b:0b:b8:df:b7:57:8e:2c:ce:f1:0f:
         b4:c0:6f:0c:c5:20:9f:55:87:25:55:36:8b:64:3e:86:b5:1e:
         30:dc:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:50:15 2026 by rpki-client