Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa
File:                     4F7CFB9A82B711EE997EB92AC4F9AE02.roa (raw, json)
Hash identifier:          lsOH+cRxJAvD+WNP67/VAdS/2QTVCf6DlflH3YeqIeE=
Subject key identifier:   44:73:8D:19:52:CC:59:D5:B0:EB:39:EB:53:C1:1D:6D:14:F9:53:4E
Certificate issuer:       /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
Certificate serial:       01A7
Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 17:34:22 +0000
ROA not before:           Wed 04 Feb 2026 17:34:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136418
IP address blocks:        202.47.164.0/23 maxlen: 23
                          202.47.164.0/24 maxlen: 24
                          202.47.165.0/24 maxlen: 24
                          2001:df3:2440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl
                          rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323
        Validity
            Not Before: Feb  4 17:34:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6983831e-7d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:9b:2e:e4:ad:34:48:81:3e:86:2a:19:c3:
                    08:6b:06:9c:97:ed:cc:65:80:04:57:2b:01:3e:7d:
                    4e:e1:23:07:74:27:59:d7:a3:96:ed:0b:59:f9:fd:
                    ba:e5:0c:01:40:68:ae:1c:86:af:5c:d6:07:8a:bb:
                    01:c9:52:d3:9f:21:fd:a9:d3:5c:a8:6c:bf:71:60:
                    44:67:dd:bd:19:09:7d:db:63:3e:a4:0f:24:90:8d:
                    8f:42:62:d1:a2:37:d3:b0:8d:0d:38:96:ae:c0:ee:
                    cd:6b:9f:d3:b6:08:b8:e7:ae:f7:e8:6f:1f:8f:94:
                    b8:99:1b:81:a4:65:e3:20:3f:90:1e:55:e0:cd:2b:
                    51:c0:75:b2:8b:ed:24:45:17:ec:fb:d3:52:e7:ff:
                    7f:ef:4f:fc:38:90:cb:a8:de:8d:88:4e:0e:7a:ad:
                    f0:ba:2e:4a:69:64:48:76:cb:50:f1:3f:99:a9:e7:
                    a9:a1:d7:15:79:38:9d:f8:72:9f:1a:38:18:8b:6f:
                    d2:f5:f3:ca:0c:d9:89:ad:49:35:22:c6:b0:f3:6b:
                    db:29:eb:e3:f2:54:e0:e5:c2:09:1c:b0:cb:85:13:
                    6d:70:19:8d:e6:7a:ba:56:a7:2c:b0:26:4c:bb:fe:
                    1e:be:a5:05:ed:e1:ef:65:85:74:84:54:7b:00:96:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:8D:19:52:CC:59:D5:B0:EB:39:EB:53:C1:1D:6D:14:F9:53:4E
            X509v3 Authority Key Identifier:
                keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/4F7CFB9A82B711EE997EB92AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.164.0/23
                IPv6:
                  2001:df3:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:98:0e:bf:f7:ea:ad:12:85:e4:a6:8e:c3:73:72:ea:26:b7:
         48:36:aa:9f:dc:45:60:5a:b7:09:7b:d7:dd:cc:9a:a9:79:57:
         c9:c2:5e:c3:18:04:4d:21:f6:0e:9c:d1:c9:f5:de:9d:70:c2:
         c6:ce:fb:00:c0:f1:06:dc:c7:5d:e8:cc:b1:8e:47:8a:a3:61:
         9e:e0:1c:9b:80:e4:55:6a:ac:c8:bc:0e:58:20:c5:ee:7b:a8:
         03:e6:84:5d:77:37:c4:01:ae:19:99:1e:63:9a:8b:d7:38:d3:
         46:06:bc:34:65:64:17:74:8c:89:39:44:bd:7b:e9:f9:e7:af:
         54:eb:6e:88:00:6c:b8:26:94:f8:ce:11:2d:21:86:60:8f:b3:
         93:06:41:10:13:d4:32:8d:ae:dd:1f:bb:f1:01:ec:99:1a:fd:
         ac:ff:e4:0c:fa:82:ee:e1:8f:51:a3:f1:9a:f0:34:80:dd:6f:
         f1:53:68:c6:03:3a:84:30:f7:e1:e3:78:9f:97:5f:6c:d3:89:
         ad:39:62:90:7b:1f:7a:a8:09:5d:2a:3a:ee:31:5e:af:05:e3:
         f2:61:dc:df:16:a2:38:c3:f2:86:a3:0c:9c:3d:aa:6a:cc:c9:
         ec:4b:c9:48:b9:6a:ed:f0:69:19:07:26:12:ee:0c:cc:ec:f6:
         a8:0c:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:45:36 2026 by rpki-client