Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/4F39607ED24311EF919B6D12C4F9AE02.roa
File:                     4F39607ED24311EF919B6D12C4F9AE02.roa (raw, json)
Hash identifier:          PbIHJfeF1QgaYjPW3sqV+LRgaboyAWlwuyl7BMbDUHo=
Subject key identifier:   E8:CE:ED:4D:46:93:90:EC:F4:9C:97:C5:1F:97:3A:CA:51:E5:9E:C7
Certificate issuer:       /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial:       C7
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/4F39607ED24311EF919B6D12C4F9AE02.roa
Signing time:             Sat 31 Jan 2026 06:25:05 +0000
ROA not before:           Sat 31 Jan 2026 06:25:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137248
IP address blocks:        2001:df4:e5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
                          rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
        Validity
            Not Before: Jan 31 06:25:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=697da041-5646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:82:35:5a:fe:d9:ea:18:49:ad:c6:53:03:
                    36:de:2a:3f:f6:fa:2f:85:46:58:ff:b6:e3:8e:e1:
                    37:f0:73:74:0f:08:27:8a:07:a6:ce:09:b3:18:15:
                    47:59:b9:84:64:96:19:14:68:55:f9:70:c3:4b:03:
                    c0:b0:62:97:c2:e8:04:ec:b2:c1:5a:19:33:68:ff:
                    0f:5d:06:a3:a1:c4:39:6a:df:e3:a4:d5:8a:c7:4f:
                    5d:cc:90:a1:23:9f:ad:97:3e:8f:ec:3c:b6:99:54:
                    57:b3:b6:3c:fe:04:44:f7:e7:c4:88:b0:d9:f0:4d:
                    d1:88:2d:a4:a0:9d:65:9d:af:ed:5a:75:25:8a:1f:
                    09:56:8c:af:95:67:81:ad:18:ee:c5:d5:23:a8:61:
                    49:5c:72:1d:92:d6:b5:c8:85:28:8f:19:15:07:d0:
                    f8:01:21:12:8b:e0:18:e8:dd:e9:36:b9:47:a1:d9:
                    1b:98:b9:49:29:ef:3c:b3:3b:31:06:1f:5f:22:60:
                    2e:04:77:f8:24:8b:81:a5:94:07:72:c0:2c:a1:d7:
                    56:a1:e2:e9:db:0d:64:09:79:0a:e4:83:5f:c3:88:
                    b6:b9:03:f6:d6:48:11:c4:cd:0f:c0:aa:7a:6b:ed:
                    1a:0e:a4:e0:b3:97:5c:d0:f0:88:b6:00:45:10:bf:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CE:ED:4D:46:93:90:EC:F4:9C:97:C5:1F:97:3A:CA:51:E5:9E:C7
            X509v3 Authority Key Identifier:
                keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/4F39607ED24311EF919B6D12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:0b:e7:3c:30:88:41:70:a5:f3:63:49:96:18:d3:c5:9b:
         19:a4:15:c8:5e:75:ad:55:16:67:f6:5d:cb:14:75:bd:4b:16:
         8f:b2:66:b4:d8:6a:92:b5:e1:86:c3:a5:c5:c8:a8:30:4a:59:
         c1:37:84:71:a8:83:00:97:ad:54:31:bb:d4:10:de:be:ca:21:
         b3:73:64:94:b8:94:9e:e9:db:b6:41:43:72:3e:75:b0:1c:c0:
         08:5f:aa:82:22:55:8c:11:9e:71:46:e6:9a:b9:c0:c7:5a:86:
         6f:1c:59:a4:3b:1c:cd:15:05:d2:9a:e9:8a:c4:8a:a5:7f:c4:
         a4:68:05:29:01:78:1e:5d:99:13:9b:8e:d9:cd:76:21:56:56:
         8c:ed:2f:0e:bd:e7:3e:c5:2b:3e:76:61:7d:71:65:ed:51:c0:
         63:a7:c4:32:fa:1e:d2:b6:c3:67:ba:70:26:13:8f:3d:0d:91:
         84:16:f0:ad:9b:d3:59:f0:4c:b2:a6:7b:51:af:24:49:5f:2c:
         f2:57:bf:69:30:4e:8d:87:c9:df:c3:ee:75:c0:9f:5a:43:e0:
         d8:5d:6f:48:cd:a8:f5:93:47:89:1c:5d:30:4a:56:88:5b:2e:
         a1:0b:47:37:9e:41:1e:8b:27:d8:b8:30:ec:6a:f8:61:ec:16:
         e4:24:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:47:19 2026 by rpki-client