Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/7EA34D309EC511EBA85F8276C4F9AE02.roa
File:                     7EA34D309EC511EBA85F8276C4F9AE02.roa (raw, json)
Hash identifier:          qXI7dA3H0No1Em38q0CxXlZlPKGWk0fDKS98EnFBF9s=
Subject key identifier:   54:8B:6F:33:F3:98:FB:2E:2A:43:C7:48:3F:03:3E:F7:BC:70:18:A7
Certificate issuer:       /CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Certificate serial:       069D
Authority key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/7EA34D309EC511EBA85F8276C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 22:18:55 +0000
ROA not before:           Mon 02 Feb 2026 22:18:55 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142010
IP address blocks:        203.14.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
                          rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
        Validity
            Not Before: Feb  2 22:18:55 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698122ce-9f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a8:3a:2b:49:8f:06:48:c4:a9:a2:76:37:02:
                    f8:8d:11:8f:84:fc:2d:a9:5b:e9:8f:86:00:51:41:
                    a9:f9:1a:52:6a:43:fe:fe:46:d8:20:38:38:9e:87:
                    9c:bb:3a:57:c9:50:04:35:57:a4:89:fd:37:0b:a5:
                    4a:79:1f:b9:cb:29:1a:4f:13:d6:e8:66:a3:84:e8:
                    32:3d:90:ef:d9:1d:e9:ec:95:0a:2e:8e:71:ef:fb:
                    56:00:11:5c:99:42:24:a8:cd:bd:24:f4:57:44:7c:
                    92:5b:dc:30:c7:8d:c8:a4:8b:72:10:89:c8:2b:b0:
                    ac:41:16:4d:08:62:b6:f7:14:5f:5b:77:44:d8:05:
                    4b:4a:88:09:0a:be:2f:32:74:95:7b:d2:40:0a:90:
                    a3:6b:be:5e:7f:28:0a:69:77:76:d8:63:4a:58:7a:
                    26:8c:11:73:87:0c:d6:6b:bd:bd:33:c9:55:56:3a:
                    3c:3c:aa:1c:7b:02:69:c0:03:45:f8:d5:0b:84:e8:
                    b8:79:61:db:a0:b6:aa:46:3f:27:d6:d9:ad:df:f6:
                    d3:d2:fd:8d:99:cd:7d:e4:ed:66:cc:3d:b3:fe:f7:
                    bc:eb:23:1f:74:0f:d2:e7:49:f1:90:16:e1:25:47:
                    67:23:87:56:8f:cf:82:08:26:ad:a1:22:6b:1b:b5:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8B:6F:33:F3:98:FB:2E:2A:43:C7:48:3F:03:3E:F7:BC:70:18:A7
            X509v3 Authority Key Identifier:
                keyid:9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/7EA34D309EC511EBA85F8276C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.14.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:08:af:62:75:98:58:8d:ba:d1:1f:48:a9:37:cf:ba:c5:
         ec:81:dc:5b:62:67:38:10:a2:a1:28:01:5a:47:8c:8f:87:5d:
         94:6e:21:7a:0c:be:5b:9c:f7:23:36:a3:ae:78:ac:da:3a:b9:
         b3:f3:10:49:5b:e3:6f:9c:cc:1b:a8:93:25:51:82:0b:35:f5:
         dd:e5:27:18:71:a5:86:b2:a4:f2:60:8c:c8:b1:b7:9e:0e:a3:
         d3:d5:42:27:3c:df:1d:02:9b:3d:01:e8:eb:2a:26:4d:a5:32:
         6a:79:20:d5:d9:5e:a6:0d:60:26:ea:5f:bd:d9:0f:61:74:20:
         f2:67:0b:7b:77:3a:89:c5:02:6c:bb:ad:b4:9c:af:b3:23:68:
         1a:e7:b8:9b:68:1c:cc:59:85:79:34:7d:ff:d5:47:0a:a3:e9:
         5d:ce:2f:01:49:52:9a:8b:82:c8:84:48:86:bb:6e:e3:9c:79:
         91:97:12:f4:62:d8:82:ec:69:6d:78:d2:3f:4c:91:ec:8c:88:
         57:54:2f:28:a4:56:2e:9d:b3:37:07:9c:8f:55:1f:32:0e:3d:
         e4:58:a1:cb:c2:70:c4:f9:64:6e:28:1e:c9:91:39:03:0a:74:
         f4:2c:69:4e:26:ef:53:e1:d6:01:73:3c:3b:23:f7:2d:70:57:
         0d:7d:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:06 2026 by rpki-client