Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/815465903EB511E9881B6529C4F9AE02.roa
File:                     815465903EB511E9881B6529C4F9AE02.roa (raw, json)
Hash identifier:          /H/96xPfcmNUeeEPGHpV245CX2067VycOBUSnBoYAjI=
Subject key identifier:   6E:CC:19:17:0D:C0:8E:21:F5:AF:6F:8B:A3:CD:C6:63:B9:D7:C5:9A
Certificate issuer:       /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial:       230F
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/815465903EB511E9881B6529C4F9AE02.roa
Signing time:             Fri 06 Feb 2026 16:13:20 +0000
ROA not before:           Fri 06 Feb 2026 16:13:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135084
IP address blocks:        45.124.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8975 (0x230f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
        Validity
            Not Before: Feb  6 16:13:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69861320-8054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:13:98:b6:71:90:19:cd:3e:34:50:65:51:bd:
                    03:65:f5:e9:c6:04:bf:9e:9b:53:55:a7:6a:53:76:
                    cd:31:f6:a5:74:d7:a9:41:b8:6a:aa:df:52:8c:e5:
                    8d:66:a4:29:f7:7c:30:27:6a:02:17:de:11:28:d8:
                    cc:82:fa:59:e2:b3:42:61:66:fd:8a:9a:e3:b6:78:
                    1c:7f:14:51:aa:cd:41:07:27:af:31:b3:4b:02:9c:
                    76:06:d3:2d:b0:0a:6f:13:4a:a8:46:9c:8d:67:7e:
                    11:fc:5a:c2:23:28:c0:4c:65:9e:32:f7:5f:2e:af:
                    66:86:7a:ca:31:ba:c5:bb:d1:2e:b0:80:38:af:82:
                    3a:7b:18:75:13:3a:01:3c:37:1e:15:0c:bd:bf:88:
                    4a:c3:46:a3:99:d8:21:ff:2f:a8:78:d0:e6:aa:39:
                    41:da:cb:b1:74:ea:da:d9:cf:63:e0:5a:99:e4:89:
                    b0:6b:e0:7a:6f:41:ae:ac:96:d8:79:87:fb:ef:84:
                    a3:d8:75:1b:67:e2:8e:bf:86:1a:ac:e8:d7:70:e9:
                    17:cc:aa:a2:bd:e5:0c:9c:52:66:6a:34:3c:41:02:
                    83:a3:25:7b:ff:2b:e0:1c:5d:43:0c:6c:6b:d4:83:
                    e5:20:ff:27:32:68:c8:c8:ac:a8:8b:ed:a0:c5:54:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CC:19:17:0D:C0:8E:21:F5:AF:6F:8B:A3:CD:C6:63:B9:D7:C5:9A
            X509v3 Authority Key Identifier:
                keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/815465903EB511E9881B6529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:9d:ed:21:3c:65:26:d9:a9:35:06:7c:74:c9:57:5e:48:
         c1:52:09:40:f3:98:3f:6a:dd:2a:47:2f:1e:0a:57:56:f7:83:
         76:b3:3e:c2:63:43:b7:24:3f:b4:e8:0b:7f:70:5b:cf:68:f9:
         17:bc:1f:47:c5:b3:b3:7d:29:2e:5a:cc:cc:78:be:74:5c:00:
         70:d7:ba:dd:a8:88:dc:bf:4b:fc:5b:09:7d:15:30:13:ac:90:
         62:84:50:41:4b:21:21:c4:46:7e:86:26:18:5c:86:32:3a:42:
         98:85:3e:42:7b:e6:c2:1a:ed:43:80:3d:5d:4c:0e:e8:9e:cc:
         cc:e8:b3:08:eb:53:ce:3d:d2:08:2e:29:ed:27:d4:fd:69:2d:
         0c:00:b6:42:e0:a4:33:49:3e:6a:54:99:83:fe:12:0c:19:a9:
         ec:fc:17:e5:59:5d:d3:52:4e:9d:ce:dd:ea:a0:27:d9:c6:f3:
         73:ca:5a:6e:72:38:46:eb:7e:3f:db:1b:98:dc:6b:10:7b:3e:
         04:e6:c9:80:c2:e7:75:81:b1:b3:86:9c:2d:b3:79:02:9b:83:
         81:62:32:17:a2:08:ef:de:f6:7e:2a:da:0d:33:48:83:83:c3:
         00:77:8b:f5:26:dd:a2:35:53:78:ea:49:57:3f:cf:10:ba:e1:
         64:fb:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:56:50 2026 by rpki-client