Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/B5AC177E3E0411ECABD9496CC4F9AE02.roa
File:                     B5AC177E3E0411ECABD9496CC4F9AE02.roa (raw, json)
Hash identifier:          9WThl3Ll0sjbhCIKX3FXdpzp7nW9BOJ33snoZ0J6eKg=
Subject key identifier:   85:28:A8:FF:6A:FA:5A:33:70:E4:AE:B2:BE:BA:49:CD:F2:96:0C:79
Certificate issuer:       /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial:       053F
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/B5AC177E3E0411ECABD9496CC4F9AE02.roa
Signing time:             Thu 05 Feb 2026 09:23:27 +0000
ROA not before:           Thu 05 Feb 2026 09:23:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9744
IP address blocks:        141.193.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1343 (0x53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
        Validity
            Not Before: Feb  5 09:23:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6984618e-5932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:c5:4c:1f:41:5a:48:0a:c2:e4:6f:1a:8e:
                    ff:a5:08:34:1e:c8:cb:69:09:3d:2a:a9:f8:87:8e:
                    29:29:9a:22:f7:90:1c:3e:a2:e6:84:bc:c5:c5:34:
                    e0:6f:81:29:9e:9b:25:36:e6:29:2c:22:d1:74:43:
                    fe:86:7a:4d:eb:1d:59:87:a2:b3:54:49:c3:11:32:
                    b6:fe:d7:84:da:f7:d0:6f:bd:b1:20:33:e9:26:ea:
                    b6:9e:78:81:78:37:a4:63:9d:03:4a:23:17:c2:86:
                    12:66:32:13:d1:c6:0a:b4:d3:82:35:09:0f:92:13:
                    39:4e:8c:5c:62:56:cc:20:73:d8:38:10:d9:fb:86:
                    a6:23:16:b8:c4:53:32:1b:cb:bb:0e:c2:bb:62:a4:
                    77:cf:09:04:36:a5:c9:0c:72:b8:cf:9b:88:ac:ea:
                    09:e6:b4:88:f8:0d:ed:18:41:d3:3e:21:9c:a5:57:
                    8c:2c:09:33:95:26:7e:e2:db:fc:9c:a5:f1:1a:87:
                    70:a8:5f:c3:b6:46:89:c4:9d:02:fa:09:92:42:86:
                    9e:2b:ab:b4:db:aa:88:0a:f8:cb:51:79:1a:8a:7e:
                    e7:62:24:69:da:b8:58:94:5a:2b:83:e6:96:0a:f6:
                    28:24:ed:41:b3:b3:89:c4:f9:82:09:ec:7a:8b:6c:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:A8:FF:6A:FA:5A:33:70:E4:AE:B2:BE:BA:49:CD:F2:96:0C:79
            X509v3 Authority Key Identifier:
                keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/B5AC177E3E0411ECABD9496CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:94:b7:dd:3e:5f:4f:b8:e6:14:ee:d0:27:90:4d:fc:d5:40:
         2c:75:f8:ed:1b:00:bb:5b:04:12:6c:73:ea:8a:6e:85:5c:5a:
         86:e4:82:2a:85:62:4c:b6:c7:23:8d:b4:55:9d:3f:22:93:1a:
         34:52:c5:b9:de:43:02:1a:01:20:ec:cf:0b:7f:b4:da:49:6a:
         5e:6a:7d:57:68:a8:5e:58:bd:bd:63:0b:02:79:4b:cd:38:70:
         ff:b2:ed:5d:5d:ac:8d:53:d7:dd:b1:7f:ac:7b:e8:74:28:4f:
         be:d0:e6:bb:04:2a:99:6f:0e:cb:ce:89:53:b9:ce:47:4f:f3:
         5e:09:5b:f1:07:9c:af:58:d4:7f:60:d4:fa:06:0e:ed:f0:d3:
         4e:e8:dd:7b:b0:f5:80:86:7c:c6:7e:3b:7c:28:a0:8d:80:35:
         27:0b:cc:a2:1c:ab:9b:a4:11:30:5d:08:72:26:56:25:cc:77:
         0b:e3:dc:c0:ec:7a:1b:99:e6:f0:64:0a:a6:ac:50:19:dd:16:
         c3:0b:fa:61:a5:28:5c:e5:e6:02:91:64:84:62:64:3e:bb:e2:
         f5:45:08:e5:05:69:8d:80:3f:77:ad:9f:16:6c:cd:a6:f6:65:
         a8:74:34:f2:77:c6:21:52:44:12:ef:27:2e:f0:d9:93:fe:9a:
         02:53:b0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:51:30 2026 by rpki-client