Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/20F76E36056911F187C42801313D8C67.roa
File:                     20F76E36056911F187C42801313D8C67.roa (raw, json)
Hash identifier:          n3DIDsOEBlsLGhgAV50Qk+N77bj3Cq9Y658S77tdRNE=
Subject key identifier:   75:F1:A4:C4:5C:3F:35:22:E2:8C:9F:14:06:5C:44:FE:71:05:67:58
Certificate issuer:       /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
Certificate serial:       21
Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/20F76E36056911F187C42801313D8C67.roa
Signing time:             Mon 09 Feb 2026 03:40:51 +0000
ROA not before:           Mon 09 Feb 2026 03:40:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133014
IP address blocks:        2001:df0:41f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
        Validity
            Not Before: Feb  9 03:40:51 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69895743-7ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:22:65:80:7f:c0:bb:78:aa:42:c8:a8:8a:
                    85:98:88:a7:c3:a0:93:48:5a:e1:a2:02:c9:43:c9:
                    22:40:5a:3f:ed:82:bc:f2:39:f5:a9:d8:ac:58:ba:
                    f0:f4:c9:ed:47:7d:46:bc:ed:56:09:24:92:b0:12:
                    04:0e:30:ce:b5:b1:59:53:54:21:a3:f0:df:33:ff:
                    ba:fa:9e:d8:7f:83:0f:61:c4:a4:79:d6:61:0d:32:
                    d5:45:99:d4:3a:98:bf:e1:be:79:e9:f5:c5:e9:eb:
                    1f:cd:d0:91:01:38:be:0e:1e:be:d7:96:96:e9:3f:
                    1f:c9:a2:8d:f3:ad:08:41:c3:06:b2:20:3c:ec:97:
                    66:8d:6c:a2:7f:f6:4d:99:b3:d9:1b:57:34:c0:39:
                    6a:7a:64:ad:f3:45:e4:67:4a:23:48:3b:2b:3f:73:
                    ad:3b:26:0e:85:ef:5b:3d:24:62:57:3f:28:c5:48:
                    b2:c2:85:99:d7:f8:83:e9:f0:83:1c:54:d5:5d:42:
                    89:c2:46:9c:0b:b1:15:c8:92:9f:58:4c:0c:07:52:
                    b7:90:e5:bf:82:13:ad:7b:49:60:f4:ac:ad:fc:ae:
                    4e:a2:8a:16:62:dd:a5:f6:61:39:4c:fd:70:4d:52:
                    9f:d7:a7:0f:5d:ff:a7:b5:3c:5a:db:84:29:95:e0:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:A4:C4:5C:3F:35:22:E2:8C:9F:14:06:5C:44:FE:71:05:67:58
            X509v3 Authority Key Identifier:
                keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/20F76E36056911F187C42801313D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:41f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:92:b6:e6:1c:17:3f:17:d9:3a:0f:11:77:b8:9f:01:b9:
         6b:e0:47:2c:98:88:43:45:b9:f8:96:e2:48:d4:b6:59:b1:c3:
         61:a8:e5:d3:77:97:2d:84:ba:29:30:5c:4a:a2:4d:55:9c:07:
         89:66:2f:0f:97:e8:2b:f7:76:a7:dd:9d:53:e9:3c:78:df:87:
         7b:ce:5e:2d:d9:89:de:c9:ef:f8:09:79:a7:00:e9:1e:27:89:
         92:54:6c:90:3c:19:1d:06:10:e0:88:d6:ab:8c:a3:10:63:e5:
         30:b9:0b:96:9b:61:9d:cf:d9:9b:c7:b1:5e:1d:a5:cb:01:0b:
         65:03:ec:57:93:3b:a7:25:5a:38:62:95:28:d1:9f:d7:ec:7d:
         f8:3a:51:6e:3b:f6:d4:4d:d5:47:fc:7a:aa:1a:4e:74:ec:53:
         2e:f4:f0:28:fb:d4:41:de:fd:16:62:6d:23:53:43:5e:86:94:
         ba:84:8f:cf:51:6e:31:0c:a5:69:ba:1d:c1:a9:c8:9b:8f:6f:
         60:4e:30:f6:32:bd:93:86:a2:ae:92:34:a0:88:95:41:39:bd:
         17:36:3b:de:03:1d:81:a5:46:62:9c:90:3d:66:51:46:fa:97:
         8b:40:24:d2:6f:46:db:f6:e9:8e:4c:e8:74:4b:82:3f:50:64:
         20:e4:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:33 2026 by rpki-client