Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
File:                     608BD4EA019C11F18EFB8EA7666F56BC.roa (raw, json)
Hash identifier:          zR0UxD/7uVtUzaOHpSeFcY0uRr2MZvP1wbeC2a/OK8M=
Subject key identifier:   F7:43:A8:36:09:4F:C7:5D:5E:B6:BF:86:06:5F:05:6B:2B:79:0E:CF
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       5C
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
Signing time:             Wed 04 Feb 2026 07:37:37 +0000
ROA not before:           Wed 04 Feb 2026 07:37:37 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     142244
IP address blocks:        203.174.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Feb  4 07:37:37 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6982f741-0551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:df:b7:64:dd:35:ca:d2:88:3c:35:17:9b:
                    ee:d0:6b:66:15:01:38:74:71:a2:e7:52:3f:59:31:
                    b7:71:46:67:6f:26:41:09:5f:ae:85:e5:08:2e:55:
                    58:93:16:b1:51:ed:b3:cf:a5:11:d8:34:31:03:a1:
                    e9:58:39:f2:53:25:4c:06:d1:29:37:2f:2f:be:a0:
                    c2:0a:82:c6:f3:2d:fa:b5:36:a5:67:bd:63:d4:70:
                    56:6a:f0:c4:79:62:f5:e2:06:5e:4e:0a:31:1a:66:
                    f1:49:09:20:9f:44:2c:97:49:5d:a3:45:39:de:d0:
                    91:b0:f6:87:94:92:11:c5:0a:de:1a:f6:ba:89:0e:
                    e6:5f:c6:4e:96:2f:05:d5:5e:2a:b9:9d:26:71:84:
                    66:3d:77:5c:06:8a:90:23:3b:c0:77:d5:14:00:ec:
                    83:17:f8:e0:ad:65:50:c2:f0:75:7d:d9:26:db:89:
                    63:95:dd:57:d7:f4:1c:8d:43:b8:42:7d:86:ab:6e:
                    73:5e:5d:a6:53:35:ed:be:7c:27:39:a4:58:86:23:
                    99:48:4b:39:b3:a1:86:6e:59:0d:4e:e1:2c:07:af:
                    b6:6a:ce:3a:2c:b2:3c:06:37:a9:d9:0c:67:c4:a2:
                    dd:46:d7:3a:77:13:9b:6c:00:18:1d:4c:82:e4:48:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:43:A8:36:09:4F:C7:5D:5E:B6:BF:86:06:5F:05:6B:2B:79:0E:CF
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ed:66:c6:d7:d5:bb:f7:2b:09:33:c7:b3:ab:2a:83:64:78:
         10:db:f3:76:6b:54:c6:d7:8b:af:d5:50:4b:36:75:13:95:3a:
         9d:17:95:65:9c:10:ed:8f:f3:e0:e9:b6:78:8c:70:94:09:0f:
         7b:2a:d3:24:c2:44:5b:18:36:d9:2e:d8:a8:a9:da:2e:26:28:
         6c:a7:ab:f9:56:ba:14:58:7b:d9:b1:4c:50:44:61:8a:36:70:
         ce:37:53:7b:1e:87:53:0d:ba:e0:6e:92:02:64:62:f8:44:69:
         dd:ac:b9:0d:b9:85:49:4b:5f:3c:00:76:34:e9:1b:ee:54:c1:
         ab:43:68:7f:55:0c:da:7f:28:d0:08:b1:d6:95:28:fc:d6:22:
         3f:80:56:6d:ff:5b:64:98:4a:97:e8:0c:97:d2:c4:c8:39:a1:
         df:56:ef:15:65:d5:2c:19:0d:be:63:7a:5c:48:3f:4e:15:bf:
         ec:3b:45:e4:2a:90:a4:cc:05:7e:ba:47:70:c8:71:1d:11:7d:
         07:f3:01:78:92:2b:ec:3f:1c:40:25:d2:47:c2:d6:06:fb:3b:
         19:d2:d4:eb:56:ab:8d:57:94:fa:39:f0:e4:a1:c2:ca:ed:5c:
         be:86:3f:76:80:16:f6:11:22:e6:20:a5:e4:31:f3:ba:93:16:
         44:7e:e5:10
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB
NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE
OTEyODUzMzAeFw0yNjAyMDQwNzM3MzdaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODJmNzQxLTA1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTF9+3ZN01ytKIPDUXm+7Qa2YVATh0caLnUj9ZMbdxRmdvJkEJX66F5QguVViT
FrFR7bPPpRHYNDEDoelYOfJTJUwG0Sk3Ly++oMIKgsbzLfq1NqVnvWPUcFZq8MR5
YvXiBl5OCjEaZvFJCSCfRCyXSV2jRTne0JGw9oeUkhHFCt4a9rqJDuZfxk6WLwXV
Xiq5nSZxhGY9d1wGipAjO8B31RQA7IMX+OCtZVDC8HV92SbbiWOV3VfX9ByNQ7hC
fYarbnNeXaZTNe2+fCc5pFiGI5lISzmzoYZuWQ1O4SwHr7ZqzjossjwGN6nZDGfE
ot1G1zp3E5tsABgdTILkSJYTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU90OoNglP
x11etr+GBl8Fayt5Ds8wHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0
MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NERCRi9DMTQ1NjA1MDg0NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi82MDhCRDRFQTAx
OUMxMUYxOEVGQjhFQTc2NjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMuuFjANBgkqhkiG9w0BAQsFAAOCAQEAru1mxtfVu/crCTPH
s6sqg2R4ENvzdmtUxteLr9VQSzZ1E5U6nReVZZwQ7Y/z4Om2eIxwlAkPeyrTJMJE
Wxg22S7YqKnaLiYobKer+Va6FFh72bFMUERhijZwzjdTex6HUw264G6SAmRi+ERp
3ay5DbmFSUtfPAB2NOkb7lTBq0Nof1UM2n8o0Aix1pUo/NYiP4BWbf9bZJhKl+gM
l9LEyDmh31bvFWXVLBkNvmN6XEg/ThW/7DtF5CqQpMwFfrpHcMhxHRF9B/MBeJIr
7D8cQCXSR8LWBvs7GdLU61arjVeU+jnw5KHCyu1cvoY/doAW9hEi5iCl5DHzupMW
RH7lEA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:39 2026 by rpki-client