Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/B3789882F23211EC9A7DB924C4F9AE02.roa
File:                     B3789882F23211EC9A7DB924C4F9AE02.roa (raw, json)
Hash identifier:          hROqHQfzOZpF5zXWWBnOQzRehyPqHQ2b0GG9Y2ExMZ4=
Subject key identifier:   87:66:9F:56:BE:B1:A2:FF:75:66:E2:1E:99:40:EA:C5:82:86:2F:BB
Certificate issuer:       /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial:       0526
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/B3789882F23211EC9A7DB924C4F9AE02.roa
Signing time:             Fri 06 Feb 2026 16:13:22 +0000
ROA not before:           Fri 06 Feb 2026 16:13:22 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133334
IP address blocks:        2.58.228.0/22 maxlen: 22
                          2.58.228.0/24 maxlen: 24
                          2.58.229.0/24 maxlen: 24
                          2.58.230.0/24 maxlen: 24
                          2.58.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
        Validity
            Not Before: Feb  6 16:13:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69861322-4416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:c6:d8:68:e8:03:5e:34:ec:4f:09:e1:d1:
                    8e:c5:7e:1b:b9:4c:dd:a2:65:50:38:16:b5:f9:d6:
                    0f:32:e7:d0:a2:44:f1:a9:18:bf:9c:c3:cc:04:b7:
                    0b:d4:a6:9c:42:7e:09:78:d0:e1:a2:68:b2:48:15:
                    26:59:ea:55:6b:4e:33:91:5d:22:62:60:56:e9:3c:
                    eb:9a:25:e4:33:73:b9:fe:96:36:0d:61:eb:cc:5d:
                    13:f0:89:c3:49:03:84:0b:89:9f:1f:9c:40:a9:cc:
                    85:fb:9c:bd:1c:eb:a1:a6:e5:08:11:9f:70:e7:cb:
                    4a:de:8d:4b:ef:77:42:62:33:bc:72:49:11:fa:e4:
                    2e:58:c8:4d:ba:14:f5:7e:01:43:44:3c:6b:95:c2:
                    8a:f0:e5:75:c0:ce:5e:05:27:4c:f7:ed:06:a8:55:
                    ff:f7:3a:a7:5d:8d:38:99:32:8c:af:0c:4b:ec:db:
                    10:64:50:d2:38:d5:3c:a3:db:47:0a:d0:35:8d:a9:
                    bf:72:31:23:a8:55:e9:c3:f8:b7:22:e3:90:1e:84:
                    46:fc:18:2b:52:e6:8f:35:e0:88:5c:3b:c6:75:c3:
                    e9:d4:dc:87:ee:19:b5:17:4f:ad:fa:85:ee:e6:0c:
                    55:1e:b1:1d:d6:db:96:b2:a8:8c:43:da:4e:1c:d3:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:9F:56:BE:B1:A2:FF:75:66:E2:1E:99:40:EA:C5:82:86:2F:BB
            X509v3 Authority Key Identifier:
                keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/B3789882F23211EC9A7DB924C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:df:89:fe:65:13:33:22:82:2f:2a:a1:6c:21:46:13:41:
         42:d8:bb:81:16:4f:70:36:95:35:36:eb:b8:04:81:b8:70:58:
         f2:cb:03:86:da:50:92:96:41:98:85:9c:33:cb:eb:86:45:5d:
         25:ca:5b:c0:54:aa:a9:02:64:31:00:3e:fc:4d:e6:af:95:e3:
         12:d6:a0:d4:de:92:ee:e9:9e:08:36:28:4d:97:b0:f2:b5:40:
         55:19:af:57:8c:49:93:c8:a3:ef:a3:e7:46:70:8a:4f:fb:86:
         2c:ff:0a:67:06:1b:c4:1a:ac:49:c1:fb:41:ab:aa:d6:db:9a:
         ed:5f:aa:84:78:61:bc:ef:56:38:0f:58:9a:95:9a:26:08:75:
         2e:89:46:3d:69:82:5b:b6:72:6a:67:52:26:d5:fb:97:5c:7b:
         80:d9:87:b4:51:f6:82:e4:44:e5:5b:da:4c:fe:01:fa:7c:87:
         0c:d8:76:8c:6c:47:4f:02:9a:37:be:5d:05:97:13:aa:e0:f5:
         d9:b3:17:0b:b6:70:d8:80:ba:eb:dd:68:6f:25:9a:b2:44:69:
         ab:74:9b:3e:00:cb:ed:81:bc:38:c5:ea:54:3e:dd:90:49:a7:
         c5:7e:f2:68:1a:91:38:a0:ab:df:de:97:cc:69:1e:4c:16:75:
         06:1b:02:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx
MzY3MDczQjMwHhcNMjYwMjA2MTYxMzIyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg2MTMyMi00NDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2C3G2GjoA1407E8J4dGOxX4buUzdomVQOBa1+dYPMufQokTxqRi/nMPMBLcL
1KacQn4JeNDhomiySBUmWepVa04zkV0iYmBW6TzrmiXkM3O5/pY2DWHrzF0T8InD
SQOEC4mfH5xAqcyF+5y9HOuhpuUIEZ9w58tK3o1L73dCYjO8ckkR+uQuWMhNuhT1
fgFDRDxrlcKK8OV1wM5eBSdM9+0GqFX/9zqnXY04mTKMrwxL7NsQZFDSONU8o9tH
CtA1jam/cjEjqFXpw/i3IuOQHoRG/BgrUuaPNeCIXDvGdcPp1NyH7hm1F0+t+oXu
5gxVHrEd1tuWsqiMQ9pOHNPAxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIdmn1a+
saL/dWbiHplA6sWChi+7MB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE
MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QURFMEEvNDM1NjdFRTQzRDI4MTFFQ0JFRjc3Qzc2QzRGOUFFMDIvQjM3ODk4ODJG
MjMyMTFFQzlBN0RCOTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAICOuQwDQYJKoZIhvcNAQELBQADggEBAEup34n+ZRMzIoIv
KqFsIUYTQULYu4EWT3A2lTU267gEgbhwWPLLA4baUJKWQZiFnDPL64ZFXSXKW8BU
qqkCZDEAPvxN5q+V4xLWoNTeku7pngg2KE2XsPK1QFUZr1eMSZPIo++j50Zwik/7
hiz/CmcGG8QarEnB+0Grqtbbmu1fqoR4YbzvVjgPWJqVmiYIdS6JRj1pglu2cmpn
UibV+5dce4DZh7RR9oLkROVb2kz+Afp8hwzYdoxsR08Cmje+XQWXE6rg9dmzFwu2
cNiAuuvdaG8lmrJEaat0mz4Ay+2BvDjF6lQ+3ZBJp8V+8mgakTigq9/el8xpHkwW
dQYbAvA=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:45:40 2026 by rpki-client