Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
File:                     ECB98052057511F1AF941BA6343D8C67.roa (raw, json)
Hash identifier:          BhWp6Gp20ESYJmlCsx6pBHB0Y//h97prbxzd0+L2/q8=
Subject key identifier:   59:4D:54:E8:73:C6:26:66:BA:F1:2B:16:33:44:7E:E8:82:89:43:70
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       EF
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
Signing time:             Mon 09 Feb 2026 05:12:27 +0000
ROA not before:           Mon 09 Feb 2026 05:12:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153384
IP address blocks:        160.191.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: Feb  9 05:12:27 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69896cba-1a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:05:4c:2f:08:82:89:3c:7d:94:c0:cb:f2:
                    bd:50:29:57:d4:f4:30:b2:b5:f2:d9:08:56:22:68:
                    67:91:8b:4b:e7:30:e0:63:81:45:98:15:50:87:97:
                    ef:fe:ca:b4:ad:05:ce:fd:98:f5:87:ca:1d:48:d5:
                    e3:7d:f0:a0:db:26:df:1a:e7:3f:67:ac:4b:8c:43:
                    a9:64:0d:d5:bd:e5:99:7d:ff:46:3e:72:66:a1:80:
                    e7:aa:b2:ec:25:03:33:c9:60:68:e0:49:99:b7:da:
                    68:02:39:9e:57:8e:3c:b8:99:fb:f9:9e:a5:84:5e:
                    af:8c:4e:1b:17:7e:ee:73:ce:a8:79:a1:fa:7f:70:
                    81:26:74:24:4e:e4:49:e7:07:b4:71:13:ce:a4:fa:
                    7f:b0:92:ae:af:a7:8f:00:86:31:e3:e7:55:54:8d:
                    eb:bb:59:4a:64:be:18:57:e7:19:f6:d4:1b:ef:95:
                    a9:76:91:9f:fb:b7:11:0d:5b:ad:5d:32:81:76:a3:
                    d7:5d:58:59:ec:77:ac:fd:4e:a0:71:fd:dc:da:18:
                    96:e0:4c:98:7b:34:8e:96:46:85:3d:f6:a2:cb:c3:
                    6e:94:bc:7f:f8:c6:bb:0c:c5:77:a0:e7:38:c6:74:
                    3e:5f:f9:6e:12:04:9a:f6:0e:ce:fa:2a:7f:80:e1:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:54:E8:73:C6:26:66:BA:F1:2B:16:33:44:7E:E8:82:89:43:70
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:31:3b:58:3f:92:e1:fd:3a:70:74:62:dc:46:a9:86:fd:e4:
         9e:63:2c:8d:15:ef:ae:f3:5c:b1:cc:c2:ab:6a:ed:69:9b:30:
         b9:b5:6f:30:2b:2a:3b:03:ff:83:43:d8:2e:c5:6d:9b:1a:b6:
         04:75:62:73:47:dd:c7:5b:56:5c:bb:4f:ed:ae:55:1b:ce:73:
         b8:c0:57:f0:d2:5f:33:27:2b:fa:3b:7a:22:0f:66:cd:77:b6:
         90:da:47:4b:cb:cc:4a:88:bd:7d:a5:9e:b5:32:98:8f:af:82:
         03:c2:df:30:83:ee:70:d8:47:0f:f9:f4:c7:fe:29:65:72:a0:
         ce:85:61:62:70:0d:75:ba:0a:9b:62:b5:f6:14:05:93:83:4b:
         5d:ef:ae:62:37:c5:68:1c:8c:f0:b2:09:07:c9:84:ce:41:dd:
         6b:40:db:85:f4:68:23:55:bb:2f:49:ae:55:d0:7a:a0:35:27:
         9a:73:32:fc:41:38:93:25:b6:e2:c7:91:08:d1:e5:d4:63:e6:
         66:a7:8e:a6:d6:fc:75:f1:1f:1b:e1:48:11:6d:8a:2e:7b:43:
         fa:2f:6f:77:38:78:cf:34:5d:3c:2c:57:96:ab:0f:18:bd:01:
         e1:95:f0:50:64:4a:e2:8d:4e:4e:e2:16:e3:49:e2:71:05:8a:
         6e:07:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:49:18 2026 by rpki-client