Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa
File:                     0D6FFE56BA3511ECA20A3817C4F9AE02.roa (raw, json)
Hash identifier:          uqyPVMOE+qLWXQBv1c4esFoKXDv7NNeZi/HK7HHMgNg=
Subject key identifier:   94:69:F4:EB:69:30:C0:76:D3:D2:51:E6:27:B2:0A:38:13:1C:A2:2C
Certificate issuer:       /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228
Certificate serial:       0A96
Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa
Signing time:             Wed 18 Feb 2026 19:17:14 +0000
ROA not before:           Wed 18 Feb 2026 19:17:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     59341
IP address blocks:        123.0.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl
                          rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2710 (0xa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228
        Validity
            Not Before: Feb 18 19:17:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6996103a-22f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:52:d4:d3:4d:88:62:d1:89:db:61:57:ed:
                    4b:5f:57:25:40:be:52:e3:1b:d2:5f:37:3c:7c:2e:
                    81:70:89:96:4c:a5:73:79:cb:b6:ec:7b:17:d3:8e:
                    d8:fc:16:b0:f8:71:ed:ac:a2:1d:69:3b:e9:9f:3a:
                    5a:fc:77:41:78:b6:cf:b4:e9:6e:6e:f0:a5:a2:fe:
                    9b:1b:eb:19:bc:15:cd:36:b2:b7:a3:1b:c8:e5:6b:
                    12:1a:c0:0b:a2:db:cd:46:27:d7:7c:b5:a5:e1:f5:
                    f4:5e:da:c4:d3:90:9a:29:30:1e:ef:51:82:e3:d4:
                    51:05:0a:53:0d:8d:c0:a3:1f:50:f1:90:c6:17:ef:
                    15:87:64:b2:45:4d:6b:c6:73:82:eb:a7:f0:4c:7b:
                    4b:6f:48:ff:f3:78:13:4f:e7:d8:7a:b8:d6:1c:f5:
                    12:66:59:17:69:46:1a:f3:26:99:ee:d4:3d:7d:9f:
                    fd:96:33:9f:14:13:7d:df:48:b1:02:1b:bd:a5:92:
                    b4:cd:8f:9f:84:66:15:9d:6f:a6:2a:ce:dc:44:16:
                    5a:30:e2:78:eb:80:2e:cf:19:11:10:af:69:b9:b1:
                    58:ba:c4:cc:ec:52:c0:51:20:2c:72:9a:0e:cc:bb:
                    9a:2d:87:fc:d9:e0:85:35:ae:90:90:a8:a4:f9:1e:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:F4:EB:69:30:C0:76:D3:D2:51:E6:27:B2:0A:38:13:1C:A2:2C
            X509v3 Authority Key Identifier:
                keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0D6FFE56BA3511ECA20A3817C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f3:94:29:aa:26:d8:11:d4:e8:6c:df:39:01:33:c7:04:e4:
         58:ce:be:29:f3:9a:6b:5d:3e:89:7f:6a:75:ec:30:cc:52:d5:
         4f:d3:4c:f8:2e:6a:14:1d:d7:5b:66:fd:c6:e2:28:f6:2d:4b:
         89:0e:20:f9:7b:07:4f:47:0f:14:70:96:43:e9:97:23:f6:6b:
         70:98:b0:16:a0:7a:ca:a6:b7:da:5a:7c:78:6a:05:15:3d:b2:
         82:f5:88:22:d3:81:86:5d:27:7f:36:95:16:3e:c3:c0:bb:da:
         60:de:cc:2b:77:33:4d:fe:b8:50:d5:72:3c:61:de:cb:30:c0:
         59:b1:9d:90:75:23:ce:f6:75:7c:12:80:4f:03:ed:0f:38:93:
         71:a9:6f:fb:c9:61:8c:af:20:fe:c5:e3:ee:55:12:05:31:f0:
         26:41:2d:ea:4b:ea:f2:4c:fb:fb:a7:d9:60:d4:f6:81:ee:b6:
         1c:1b:18:63:7c:2f:15:4c:54:27:6d:b8:f5:a6:89:31:84:17:
         39:88:97:11:8e:2e:1d:ca:fa:86:1b:bd:18:22:85:00:5d:1f:
         e4:60:f9:ef:a8:b6:0d:7a:8a:f0:28:4c:89:e8:74:ec:46:f8:
         1d:30:b1:1d:97:16:60:87:96:a9:3f:05:80:47:c4:24:a8:26:
         f6:3e:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:41 2026 by rpki-client