Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa
File:                     51B1F2A665D911EBA6089869C4F9AE02.roa (raw, json)
Hash identifier:          +h3ZHBCw6Qz+t4F3LGXV8hFxYh9j7OtLHTGZFocNf1k=
Subject key identifier:   FC:91:A1:D6:EC:3A:8E:2F:38:BC:8C:AF:65:3F:CF:53:CC:73:E0:96
Certificate issuer:       /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial:       0879
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa
Signing time:             Thu 12 Feb 2026 20:17:44 +0000
ROA not before:           Thu 12 Feb 2026 20:17:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     59257
IP address blocks:        209.150.144.0/23 maxlen: 24
                          209.150.146.0/23 maxlen: 24
                          209.150.148.0/23 maxlen: 24
                          209.150.150.0/23 maxlen: 24
                          209.150.152.0/21 maxlen: 21
                          209.150.152.0/23 maxlen: 24
                          209.150.154.0/23 maxlen: 24
                          209.150.156.0/23 maxlen: 24
                          209.150.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
                          rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
        Validity
            Not Before: Feb 12 20:17:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=698e3568-6654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:4a:3a:d5:8d:a3:7a:00:7a:24:d1:1e:7f:
                    8a:74:03:18:b0:4c:f7:bb:f4:9c:31:ff:a1:17:c1:
                    a0:53:dd:01:7d:73:54:bf:97:91:7d:5b:ed:98:7a:
                    43:99:da:4e:b5:0b:f0:96:c8:c2:9c:f6:2b:74:42:
                    99:9f:19:40:65:25:3a:85:d8:85:56:7d:d8:16:d8:
                    6e:61:8a:c1:7c:be:ff:3c:45:eb:75:b1:6c:d3:02:
                    08:90:71:f3:9b:d5:e9:a4:30:7b:bb:00:3c:2d:5c:
                    ee:5e:b8:f7:ac:68:95:4a:ea:83:33:0c:d2:d8:4c:
                    99:08:66:c8:97:f6:f9:8e:eb:e8:82:72:5c:b6:31:
                    69:20:2f:b5:92:11:00:7d:d3:76:2a:d0:ee:ca:4c:
                    56:71:bf:7b:60:24:1f:fe:05:93:c4:eb:0c:4b:7b:
                    51:6d:49:74:13:8c:85:60:2f:ac:c2:8d:e6:fd:75:
                    cb:62:25:59:f7:7d:fe:49:33:6c:d9:ee:39:57:29:
                    99:6e:27:0c:1f:04:4a:b7:71:47:da:51:96:a4:3e:
                    dc:61:7c:a7:d8:d3:c1:96:61:b0:e7:e5:20:df:35:
                    01:dc:20:97:f4:02:73:a3:e8:8d:4c:75:86:c3:cf:
                    0f:b5:ee:54:e4:e4:97:71:7c:66:3c:7e:a3:e9:eb:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:91:A1:D6:EC:3A:8E:2F:38:BC:8C:AF:65:3F:CF:53:CC:73:E0:96
            X509v3 Authority Key Identifier:
                keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.150.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:48:01:f5:85:44:71:5d:84:b6:47:10:50:85:16:e9:6b:7c:
         aa:d8:88:a6:7c:a6:c6:a7:24:49:c4:15:71:81:b9:0c:50:fc:
         e8:7e:54:3c:3e:a6:e3:0f:02:75:4e:50:ac:68:f6:97:b8:2c:
         74:e1:e5:8c:84:99:b6:18:ed:07:eb:77:41:0a:7b:67:21:9a:
         05:a5:f4:3e:78:cd:62:82:76:82:a8:6a:d8:95:6d:2d:96:91:
         f3:76:2c:8e:8a:6a:cb:bd:9c:92:b7:29:8b:49:34:f9:89:cc:
         97:a5:f0:8e:36:07:e6:2f:16:e4:17:ef:5a:19:bd:f5:21:6b:
         c4:76:36:82:43:a8:6c:d8:53:f3:57:c4:51:b4:0c:68:df:37:
         24:69:20:a9:c5:3d:e4:75:ba:72:a7:a9:e4:f8:ad:fd:f2:a4:
         cf:97:35:ca:c8:ab:5b:6f:2d:ec:81:25:1f:88:49:75:d0:ef:
         8c:5b:7a:ec:45:f0:82:fb:8c:7a:7a:f9:a0:db:a1:af:76:43:
         5a:4d:df:a4:f8:17:82:85:3b:2b:d8:57:7c:2d:48:ae:7f:a4:
         07:40:7a:12:dc:e5:0a:91:7f:98:78:3e:f3:5b:91:85:3d:70:
         4c:da:bf:06:38:72:f9:4a:e9:f1:f9:3f:b0:6c:28:65:26:99:
         66:ae:fc:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4
N0JDRkRFQ0EwHhcNMjYwMjEyMjAxNzQ0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThlMzU2OC02NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3H1KOtWNo3oAeiTRHn+KdAMYsEz3u/ScMf+hF8GgU90BfXNUv5eRfVvtmHpD
mdpOtQvwlsjCnPYrdEKZnxlAZSU6hdiFVn3YFthuYYrBfL7/PEXrdbFs0wIIkHHz
m9XppDB7uwA8LVzuXrj3rGiVSuqDMwzS2EyZCGbIl/b5juvognJctjFpIC+1khEA
fdN2KtDuykxWcb97YCQf/gWTxOsMS3tRbUl0E4yFYC+swo3m/XXLYiVZ933+STNs
2e45VymZbicMHwRKt3FH2lGWpD7cYXyn2NPBlmGw5+Ug3zUB3CCX9AJzo+iNTHWG
w88Pte5U5OSXcXxmPH6j6eub7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPyRodbs
Oo4vOLyMr2U/z1PMc+CWMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx
QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI5OEQvMkNCMTFGQ0VGMUE2MTFFQUI5NUMwRTJGQzRGOUFFMDIvNTFCMUYyQTY2
NUQ5MTFFQkE2MDg5ODY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBATRlpAwDQYJKoZIhvcNAQELBQADggEBAIFIAfWFRHFdhLZH
EFCFFulrfKrYiKZ8psanJEnEFXGBuQxQ/Oh+VDw+puMPAnVOUKxo9pe4LHTh5YyE
mbYY7Qfrd0EKe2chmgWl9D54zWKCdoKoatiVbS2WkfN2LI6Kasu9nJK3KYtJNPmJ
zJel8I42B+YvFuQX71oZvfUha8R2NoJDqGzYU/NXxFG0DGjfNyRpIKnFPeR1unKn
qeT4rf3ypM+XNcrIq1tvLeyBJR+ISXXQ74xbeuxF8IL7jHp6+aDboa92Q1pN36T4
F4KFOyvYV3wtSK5/pAdAehLc5QqRf5h4PvNbkYU9cEzavwY4cvlK6fH5P7BsKGUm
mWau/Ks=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:37 2026 by rpki-client