Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa
File:                     F8071E24DC1111EC80AE816DC4F9AE02.roa (raw, json)
Hash identifier:          AudGcY4q0522IL7QX2bzeOaiVDT2RRJ+CZ8VHWfDhK8=
Subject key identifier:   0B:2F:C3:9C:34:64:11:B5:E1:F7:2D:D1:E3:BD:F5:84:3E:5B:CF:35
Certificate issuer:       /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial:       0424
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa
Signing time:             Wed 11 Feb 2026 00:20:44 +0000
ROA not before:           Wed 11 Feb 2026 00:20:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135097
IP address blocks:        103.233.8.0/22 maxlen: 24
                          2001:df5:f580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
                          rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
        Validity
            Not Before: Feb 11 00:20:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698bcb5c-3ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:88:1b:71:24:88:2d:76:0f:43:8b:6d:e2:
                    1a:47:ff:09:cb:cd:ac:b2:b6:48:9e:1a:b2:14:18:
                    26:26:00:38:1a:2a:fb:db:fe:52:10:5a:1b:e6:29:
                    64:f0:ff:c2:28:92:1b:cd:bb:fa:d4:12:de:18:65:
                    c5:49:07:f8:15:87:66:66:0b:b5:70:dd:2c:5a:8b:
                    06:36:89:e9:ad:e4:d8:b8:c8:98:36:bb:2c:e1:ad:
                    2b:e7:f3:bd:e8:0c:50:e5:20:86:36:92:b3:ad:cc:
                    aa:4f:6c:26:0e:f4:fd:97:90:b7:bd:ec:7f:c0:8c:
                    e5:55:32:57:60:0b:3a:71:bc:fd:f8:96:e6:e8:5e:
                    c5:e4:00:cf:84:58:46:dc:e9:f0:3b:72:91:e9:54:
                    ad:ec:bd:f9:37:26:b5:69:65:e6:3c:ab:10:28:7b:
                    8c:48:e4:ed:d8:2d:59:5f:91:19:b0:29:ea:5a:66:
                    b8:4e:c9:bc:1a:ba:14:f0:ed:de:e1:8b:f2:11:94:
                    28:a5:cf:53:b8:5e:12:5d:ed:b6:04:c2:3c:dc:8e:
                    d9:fe:4d:0a:b9:f0:29:63:53:bc:8f:ec:8c:b8:c9:
                    ce:d8:b2:9a:a9:f0:9e:41:83:dd:f2:f5:d3:75:c3:
                    da:fe:79:18:ee:1c:49:0c:8c:8e:74:90:63:6c:13:
                    d3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:C3:9C:34:64:11:B5:E1:F7:2D:D1:E3:BD:F5:84:3E:5B:CF:35
            X509v3 Authority Key Identifier:
                keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.8.0/22
                IPv6:
                  2001:df5:f580::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:81:e0:99:2a:59:57:2b:9e:51:62:1d:57:b1:42:0c:73:74:
         ec:fc:65:ca:cb:1f:fc:42:3d:d6:22:fc:f5:cd:11:33:53:28:
         30:15:a4:0d:11:4f:0a:85:33:1a:50:a7:06:c8:1f:eb:89:8b:
         cf:a7:d8:6a:39:a8:5b:76:9c:fa:5c:00:d7:db:85:0d:0f:a4:
         d0:1b:66:dc:27:17:ce:e3:10:ab:a7:07:85:96:c7:80:25:9b:
         a6:31:97:db:c1:be:fa:9d:ca:2f:b6:dc:1e:63:11:b7:21:98:
         fd:70:a7:8c:ec:d5:12:5e:10:ee:e7:d9:c9:5a:be:6d:fe:f6:
         df:c6:ed:6d:bc:fa:53:b8:dd:90:53:2e:1c:b9:44:fc:01:79:
         b7:4b:2e:2b:01:d8:1d:3a:bf:9d:ac:97:3b:4e:0c:0c:cf:0c:
         2b:26:7c:a5:bd:10:2f:e6:6f:ea:fd:17:df:cf:0b:66:86:a9:
         11:bd:63:9f:92:42:20:ae:5f:a1:0a:c5:70:40:24:59:b1:ed:
         02:0c:8a:22:47:3d:9f:23:a2:b0:bc:9b:e1:84:fe:b6:1c:53:
         61:5a:c3:ec:18:83:28:f1:a8:1a:d1:69:15:08:09:11:55:44:
         4c:4c:15:a3:34:ee:b5:58:ce:70:8d:24:fe:6b:48:10:a3:70:
         f8:ea:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:14 2026 by rpki-client