Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
File:                     2511401EF40311EFBB6EF777C4F9AE02.roa (raw, json)
Hash identifier:          IkpTpEnA7ilE591jAt5qfNdRAToXPReVAatWSS4bN+Q=
Subject key identifier:   FC:3D:DE:C2:39:5C:3C:3B:DD:45:30:CB:2C:FB:C8:8F:B5:17:EE:18
Certificate issuer:       /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
Certificate serial:       BC
Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
Signing time:             Tue 17 Feb 2026 05:26:51 +0000
ROA not before:           Tue 17 Feb 2026 05:26:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153556
IP address blocks:        163.61.12.0/24 maxlen: 24
                          2001:df5:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl
                          rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
        Validity
            Not Before: Feb 17 05:26:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6993fc1b-d337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:f4:1b:22:fa:8d:9b:16:b6:54:bc:41:92:
                    2a:4c:fd:99:8b:9e:d2:87:ac:ff:0e:d4:5f:ec:b7:
                    34:8b:e9:0a:f2:61:82:d9:4e:24:02:aa:63:d1:c0:
                    3a:a4:f6:c2:94:5c:8d:25:22:b6:b3:ee:e2:13:8f:
                    ab:82:47:9e:4b:52:fd:0f:ab:41:79:24:97:41:12:
                    ab:6b:a0:19:be:a7:e8:98:24:be:5c:0b:bd:e0:73:
                    4f:73:04:3a:16:89:ce:65:75:10:3a:e3:0f:41:fc:
                    ac:71:62:d2:68:25:86:c9:b3:a3:13:fd:fb:f4:c4:
                    08:f1:5d:23:3b:2b:5c:01:fe:27:93:45:81:11:8e:
                    ca:30:ea:78:3c:98:03:41:7b:3b:1c:e7:19:df:88:
                    03:1e:b1:87:7f:ce:12:cd:b1:af:9e:5c:b4:5c:9b:
                    e2:d4:6c:e6:3c:c2:c8:76:8f:7b:52:82:80:74:84:
                    4c:7f:cd:1e:41:b1:94:68:ff:6c:b6:a0:75:bc:be:
                    c5:a1:2d:76:62:90:16:cc:74:8e:19:51:aa:a0:cd:
                    56:80:56:b7:08:ac:fc:ec:1d:d5:d2:4f:b7:be:31:
                    c6:d3:b0:79:a1:d4:3e:f4:05:54:a8:e6:91:90:db:
                    b8:ab:9f:80:fd:53:41:6e:18:44:14:11:cf:96:c1:
                    fa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:DE:C2:39:5C:3C:3B:DD:45:30:CB:2C:FB:C8:8F:B5:17:EE:18
            X509v3 Authority Key Identifier:
                keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.12.0/24
                IPv6:
                  2001:df5:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:02:dc:6d:9d:a5:24:68:9f:e0:0d:25:f4:47:bb:a0:71:f7:
         2e:b1:37:e6:d1:ee:96:4a:c1:67:2b:a3:29:7c:d9:40:07:af:
         f8:7b:43:aa:73:c0:e7:cb:52:9b:23:e0:a3:2c:df:ff:5a:a0:
         5a:82:61:f8:d4:f2:8a:de:43:ab:47:65:88:02:84:47:8a:9e:
         32:38:61:f7:e9:cc:16:7b:17:c0:67:bb:9e:56:04:75:58:41:
         4c:af:6b:10:86:3e:05:45:e2:b0:5f:7e:f8:2f:b4:0a:04:c5:
         22:6f:45:f5:33:e0:70:f0:84:ee:c9:7d:33:e1:f1:66:88:d2:
         8b:18:22:92:81:23:c1:af:8d:2b:b0:16:06:3b:0a:4d:f4:8b:
         fc:9f:69:18:77:d6:b5:4d:80:3a:57:2b:dd:e9:23:31:90:04:
         d7:ca:e5:8d:c0:d8:3e:ec:ab:37:d9:40:b9:ef:f2:a2:b6:b4:
         d7:00:40:55:42:6c:42:fa:fa:8b:6c:0d:ae:e7:c4:f1:0e:f1:
         55:02:33:04:40:6f:97:d6:79:f3:59:8b:66:38:a3:d4:8c:5a:
         bc:21:5d:c8:2f:89:a5:3a:a7:eb:86:85:aa:dc:04:8a:a1:47:
         bb:45:7a:4c:04:f7:b4:9e:4d:1a:81:ca:72:2e:a8:ec:1e:e8:
         46:a1:d3:14
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NUZFQUMxMTAvBgNVBAUTKDA2RTc1Qzg4RjM2OTAzMzFGRTk3Rjg2MjEyMzFCNjVE
MTQ3QTNCNkQwHhcNMjYwMjE3MDUyNjUxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTkzZmMxYi1kMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuu30GyL6jZsWtlS8QZIqTP2Zi57Sh6z/DtRf7Lc0i+kK8mGC2U4kAqpj0cA6
pPbClFyNJSK2s+7iE4+rgkeeS1L9D6tBeSSXQRKra6AZvqfomCS+XAu94HNPcwQ6
FonOZXUQOuMPQfyscWLSaCWGybOjE/379MQI8V0jOytcAf4nk0WBEY7KMOp4PJgD
QXs7HOcZ34gDHrGHf84SzbGvnly0XJvi1GzmPMLIdo97UoKAdIRMf80eQbGUaP9s
tqB1vL7FoS12YpAWzHSOGVGqoM1WgFa3CKz87B3V0k+3vjHG07B5odQ+9AVUqOaR
kNu4q5+A/VNBbhhEFBHPlsH6yQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPw93sI5
XDw73UUwyyz7yI+1F+4YMB8GA1UdIwQYMBaAFAbnXIjzaQMx/pf4YhIxtl0Uejtt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkVBQy83OTNBOURGOEY0
MDIxMUVGQjFBMDZDNTlDNEY5QUUwMi9CdWRjaVBOcEF6SC1sX2hpRWpHMlhSUjZP
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J1ZGNpUE5wQXpILWxfaGlFakcyWFJSNk8yMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZFQUMvNzkzQTlERjhGNDAyMTFFRkIxQTA2QzU5QzRGOUFFMDIvMjUxMTQwMUVG
NDAzMTFFRkJCNkVGNzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBACjPQwwDwQCAAIwCQMHACABDfUAQDANBgkqhkiG9w0BAQsF
AAOCAQEAGQLcbZ2lJGif4A0l9Ee7oHH3LrE35tHulkrBZyujKXzZQAev+HtDqnPA
58tSmyPgoyzf/1qgWoJh+NTyit5Dq0dliAKER4qeMjhh9+nMFnsXwGe7nlYEdVhB
TK9rEIY+BUXisF9++C+0CgTFIm9F9TPgcPCE7sl9M+HxZojSixgikoEjwa+NK7AW
BjsKTfSL/J9pGHfWtU2AOlcr3ekjMZAE18rljcDYPuyrN9lAue/yora01wBAVUJs
Qvr6i2wNrufE8Q7xVQIzBEBvl9Z581mLZjij1IxavCFdyC+JpTqn64aFqtwEiqFH
u0V6TAT3tJ5NGoHKci6o7B7oRqHTFA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:58:02 2026 by rpki-client