Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/FB2F2DB0FA6911F08D76E8D1496F56BC.roa
File:                     FB2F2DB0FA6911F08D76E8D1496F56BC.roa (raw, json)
Hash identifier:          wuwc/RFrgkpajLyLS92JMZ3Cekkz7mxfJbpmOYKJ1Ro=
Subject key identifier:   B4:B6:57:65:D4:A7:DF:75:8B:44:6B:9D:81:1F:56:41:BA:0E:38:7A
Certificate issuer:       /CN=A911049F/serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
Certificate serial:       B1
Authority key identifier: 8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/FB2F2DB0FA6911F08D76E8D1496F56BC.roa
Signing time:             Mon 26 Jan 2026 03:49:14 +0000
ROA not before:           Mon 26 Jan 2026 03:49:14 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     56178
IP address blocks:        163.61.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl
                          rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911049F, serialNumber=8AB94582B02EAA83A285F1C91FC859A0E2C11353
        Validity
            Not Before: Jan 26 03:49:14 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6976e43a-4aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:c0:16:3f:21:c5:81:27:8d:d1:b8:6b:13:
                    5f:6f:87:96:3b:1e:ea:9e:b4:5a:f5:dc:a4:03:df:
                    a9:00:5b:6d:99:91:02:e7:f8:1e:d8:d6:96:98:28:
                    b7:2f:39:63:8f:d6:28:3e:4f:cb:ae:4a:27:cb:59:
                    7d:1a:16:28:c5:6e:8c:e0:9c:69:c5:a5:88:f7:6f:
                    82:10:78:84:37:b5:79:92:c7:22:f1:79:76:44:8f:
                    65:1b:92:58:63:bd:da:a0:a3:a5:bb:15:fa:14:9a:
                    af:d9:5e:e0:57:05:2f:5a:29:2d:d7:7e:49:53:24:
                    c4:af:76:6e:cf:49:16:cd:d9:43:a6:4e:6d:ae:43:
                    cb:45:1d:13:ed:58:0b:0c:c1:46:d1:dc:a2:d3:bb:
                    86:46:14:0e:f4:64:98:aa:cd:c4:16:d7:6e:c7:8d:
                    06:85:ea:35:2b:aa:b5:93:12:7a:b2:36:6d:19:dd:
                    37:78:0b:f6:ee:6c:1a:04:89:1d:18:ef:f1:d1:56:
                    7b:b5:b5:e4:3b:59:d8:e5:5b:b2:ac:97:5a:52:86:
                    09:ec:91:cb:97:64:6f:f3:1d:19:71:56:95:b4:58:
                    c9:37:91:9d:67:69:8a:55:8a:c2:c3:84:73:59:03:
                    1d:43:02:13:89:47:cd:fa:1b:58:97:ec:cc:94:43:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B6:57:65:D4:A7:DF:75:8B:44:6B:9D:81:1F:56:41:BA:0E:38:7A
            X509v3 Authority Key Identifier:
                keyid:8A:B9:45:82:B0:2E:AA:83:A2:85:F1:C9:1F:C8:59:A0:E2:C1:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/irlFgrAuqoOihfHJH8hZoOLBE1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/irlFgrAuqoOihfHJH8hZoOLBE1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911049F/C074C51CF8E511EFBEA52271C4F9AE02/FB2F2DB0FA6911F08D76E8D1496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:68:85:94:fa:e2:19:6a:16:c9:10:e0:89:34:db:87:03:
         32:d1:b7:98:fb:66:cd:c3:da:24:23:e3:0a:07:cb:fd:ea:4d:
         2b:64:f5:9b:51:09:27:56:fa:b6:2b:d1:2f:6b:2e:10:69:8f:
         ff:55:24:51:60:99:40:ac:23:3b:08:2c:49:ac:7c:1e:a3:59:
         6a:28:91:2a:6e:b1:fb:33:75:97:6a:91:1b:10:c8:69:5f:a7:
         98:fe:be:6e:5f:a6:84:bf:f2:94:bd:d5:aa:8f:3d:3f:95:59:
         46:f8:ac:54:00:cf:b8:a0:7e:27:69:00:81:2e:bf:69:6e:09:
         b4:f7:24:4c:2b:3c:7d:e8:88:e3:9f:90:91:f3:e0:3e:28:72:
         10:e2:06:95:69:f3:99:a7:9e:5c:89:e1:df:5f:62:35:51:d9:
         65:26:35:ad:22:ab:ca:1c:38:bd:49:de:10:ed:de:6a:97:55:
         ea:67:54:f7:0e:d5:4c:93:6e:61:5d:60:af:26:96:2b:93:62:
         bc:45:a9:0f:0b:ce:cd:af:86:8c:5d:e5:e1:99:2f:b6:88:39:
         ce:0b:a9:ec:77:58:e2:e2:4f:3b:01:05:99:00:02:31:ac:8e:
         8c:84:2d:39:f1:a2:b1:fa:97:bf:34:11:f7:65:15:60:31:98:
         a8:70:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:19 2026 by rpki-client