Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/55778AA0757911EFBDEE9A73C4F9AE02.roa
File:                     55778AA0757911EFBDEE9A73C4F9AE02.roa (raw, json)
Hash identifier:          fTFZ6NRWPycyT+lyZTMPsMLZ+6Gnl7TMF4JY7aqaKFs=
Subject key identifier:   3B:92:25:A7:AD:34:39:F2:7B:A5:8B:66:8A:E4:25:0B:68:98:AA:F5
Certificate issuer:       /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial:       014F
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/55778AA0757911EFBDEE9A73C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 14:24:15 +0000
ROA not before:           Thu 05 Feb 2026 14:24:15 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136170
IP address blocks:        45.64.0.0/22 maxlen: 22
                          45.64.2.0/24 maxlen: 24
                          49.50.8.0/22 maxlen: 22
                          49.50.8.0/24 maxlen: 24
                          49.50.9.0/24 maxlen: 24
                          49.50.10.0/24 maxlen: 24
                          103.11.74.0/23 maxlen: 23
                          103.25.222.0/23 maxlen: 23
                          103.82.240.0/22 maxlen: 22
                          103.229.72.0/22 maxlen: 22
                          103.229.73.0/24 maxlen: 24
                          2400:88c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
        Validity
            Not Before: Feb  5 14:24:15 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6984a80f-16d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:b3:73:57:af:45:8b:18:6e:ef:95:72:d1:
                    1a:0a:47:f9:35:6d:d3:9b:31:3b:1b:e8:8a:9b:b3:
                    4d:88:c6:3b:54:30:87:9d:59:1c:99:52:2c:3d:d3:
                    53:35:f7:45:a5:14:c1:da:59:78:43:03:eb:9a:60:
                    db:f0:6e:b8:3d:16:c7:0d:53:e6:0b:4f:4a:2f:d7:
                    08:f8:9b:0f:5d:42:12:f9:64:24:74:29:d6:6b:25:
                    35:76:5e:7f:79:d0:7c:1b:f6:3c:39:2e:39:16:b9:
                    9f:0c:79:89:bb:75:93:cb:0f:b2:70:22:1a:11:05:
                    e6:1f:09:4a:54:30:c2:1a:57:87:8f:71:dc:ae:cd:
                    c5:70:7b:e3:ae:98:b9:2d:b4:09:1b:cc:7c:d8:47:
                    98:4f:db:63:d4:f1:85:8b:cc:f9:8c:83:9a:fe:6f:
                    6d:fe:59:88:7a:43:75:2b:6b:79:c7:1d:ab:f9:a5:
                    94:02:03:11:34:f7:de:89:55:a9:f2:7e:9f:a7:47:
                    4e:a6:c2:f6:ac:7e:6a:dc:83:e2:57:f1:a3:99:90:
                    7e:35:0b:20:32:a2:9d:fe:21:0f:e9:3e:94:84:a6:
                    a9:86:e9:36:cb:42:88:bd:30:38:2a:9a:93:7a:7d:
                    66:bd:33:83:40:76:56:52:70:c7:56:c5:16:b0:fe:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:92:25:A7:AD:34:39:F2:7B:A5:8B:66:8A:E4:25:0B:68:98:AA:F5
            X509v3 Authority Key Identifier:
                keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/55778AA0757911EFBDEE9A73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.0.0/22
                  49.50.8.0/22
                  103.11.74.0/23
                  103.25.222.0/23
                  103.82.240.0/22
                  103.229.72.0/22
                IPv6:
                  2400:88c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:83:3f:0c:ab:dd:97:51:6d:37:a9:19:44:8c:16:22:87:
         f8:de:06:01:75:f4:51:42:30:f2:0e:b3:9f:cc:0b:d2:80:90:
         53:f2:27:e7:f3:43:df:98:f1:e6:6f:6b:ab:fe:b1:80:10:61:
         8a:c4:67:3d:53:42:52:7b:c6:94:4d:70:71:61:e9:0f:e8:bf:
         20:42:cf:be:25:bd:56:db:a0:30:9d:9c:b2:7b:7a:c8:8e:22:
         88:82:8b:d3:0e:42:50:e9:08:17:61:68:2f:f1:ff:a4:2e:8d:
         08:e2:8e:4d:77:28:12:e8:ef:3c:d0:95:fc:d1:7e:25:7e:e9:
         a7:52:bb:09:58:56:1b:2c:17:7c:a6:bd:bf:e3:c1:ce:51:7f:
         22:35:88:71:fc:69:20:05:58:4d:f9:02:78:ca:82:83:d8:2e:
         79:b8:8b:26:d6:81:8e:51:c5:d4:98:0f:f7:57:63:79:4e:fe:
         22:e7:ab:f1:5d:53:6e:1b:14:e7:50:db:27:e8:83:74:99:2d:
         d4:df:1c:51:50:a1:8a:2d:98:b8:ce:05:2d:5d:8e:87:79:01:
         55:92:16:88:ea:a2:4f:4e:12:d1:53:71:31:63:8f:b6:0f:12:
         75:49:2b:51:1d:cf:da:7e:47:8e:26:01:7e:8e:f2:86:29:27:
         f5:9c:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:57:39 2026 by rpki-client