Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/14546D12FF3F11F0805DCCBD8DEE528E.roa
File:                     14546D12FF3F11F0805DCCBD8DEE528E.roa (raw, json)
Hash identifier:          sFcnmBQpmKIjjAuQP81WLbp9s5SxM7hg9HeRLcSjku4=
Subject key identifier:   79:DE:A5:4D:33:53:4E:3F:2A:10:8A:34:C1:E9:A1:4B:40:C6:43:11
Certificate issuer:       /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial:       54
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/14546D12FF3F11F0805DCCBD8DEE528E.roa
Signing time:             Mon 09 Feb 2026 07:29:37 +0000
ROA not before:           Mon 09 Feb 2026 07:29:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     2571
IP address blocks:        2403:c580:fff0::/48 maxlen: 48
                          2403:c580:fff1::/48 maxlen: 48
                          2403:c580:fff2::/48 maxlen: 48
                          2403:c580:fff3::/48 maxlen: 48
                          2403:c580:fff4::/48 maxlen: 48
                          2403:c580:fff5::/48 maxlen: 48
                          2403:c580:fff6::/48 maxlen: 48
                          2403:c580:fff7::/48 maxlen: 48
                          2403:c580:fff8::/48 maxlen: 48
                          2403:c580:fff9::/48 maxlen: 48
                          2403:c580:fffa::/48 maxlen: 48
                          2403:c580:fffb::/48 maxlen: 48
                          2403:c580:fffc::/48 maxlen: 48
                          2403:c580:fffd::/48 maxlen: 48
                          2403:c580:fffe::/48 maxlen: 48
                          2403:c580:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
                          rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
        Validity
            Not Before: Feb  9 07:29:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69898ce1-40f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6f:5e:49:de:b4:99:15:7d:11:e9:57:34:26:
                    52:ca:92:a2:2d:25:fb:77:47:b6:df:c1:c1:a1:ea:
                    4c:8f:10:16:c0:34:7a:68:ba:25:91:f6:b2:64:93:
                    f0:c9:97:1e:1a:87:47:8d:fe:a9:f6:d3:62:94:ae:
                    2d:3a:1d:6f:f9:e4:a1:66:6e:07:0f:b0:2c:e9:22:
                    7f:e4:fc:63:19:0b:11:e3:64:70:36:b7:db:79:b7:
                    9f:43:8b:35:c2:e4:78:03:7b:02:e4:54:29:c4:4e:
                    b4:60:5e:a3:4e:77:3c:ba:1b:30:00:80:79:33:93:
                    c2:2e:91:80:9f:82:8e:90:77:de:b6:30:7a:87:e6:
                    3b:da:1d:b1:1f:4d:19:cd:29:57:37:f2:a2:aa:52:
                    2c:82:d3:e6:26:39:15:63:81:42:6a:2d:5d:ff:d0:
                    93:1e:f0:62:7b:03:52:ec:64:67:3e:4a:a2:ad:74:
                    60:0b:e4:e1:f1:51:c0:f7:0d:09:62:65:e4:c5:c1:
                    42:1f:68:51:d2:45:7c:6b:2d:26:7a:69:7d:27:cd:
                    9f:ee:d7:7c:21:ed:1e:85:6b:ab:33:74:f3:4b:ff:
                    98:1b:7d:2c:93:57:01:8d:c3:2b:f4:07:f0:c9:b6:
                    3c:57:d9:a4:76:3e:ef:06:1e:d1:f5:3f:67:b7:44:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DE:A5:4D:33:53:4E:3F:2A:10:8A:34:C1:E9:A1:4B:40:C6:43:11
            X509v3 Authority Key Identifier:
                keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/14546D12FF3F11F0805DCCBD8DEE528E.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c580:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:6e:7b:b8:ef:ec:3e:4f:d0:49:c6:7e:db:b8:65:89:d4:
         dd:b5:a7:06:17:84:b3:8d:bd:e3:c4:86:be:3a:f7:ca:e4:82:
         55:ad:6c:38:1f:55:ee:fa:56:c1:18:f3:38:ad:72:8c:a1:d0:
         0e:1e:e9:37:53:7d:ba:1b:43:ee:34:6b:b0:cd:80:57:c7:3d:
         7f:19:16:93:08:4b:1c:8c:a4:e0:5e:f1:e7:56:df:a2:55:45:
         f6:06:23:1e:98:c8:c8:12:b6:6c:37:80:c9:56:97:5f:22:b5:
         b0:15:39:e5:de:eb:49:05:ed:a3:66:96:7e:d9:c5:b7:da:d4:
         88:b5:dd:61:3b:16:bb:5f:66:e6:04:3a:70:4d:7e:78:9e:cf:
         08:c7:28:2a:e7:c5:7d:7c:69:ef:bb:de:79:42:3a:5c:41:a8:
         72:45:d3:0f:7d:44:81:a3:f7:0c:a9:9d:e3:84:85:d3:dd:0c:
         40:83:ec:63:32:cf:10:6c:05:d3:ad:f8:d2:46:b9:1b:ca:dc:
         68:1d:83:16:75:c9:2c:9f:3d:a6:b1:cd:13:12:a3:50:3a:a7:
         c7:bf:42:3a:72:17:c3:9d:4b:a5:65:e8:fc:05:c2:9b:95:da:
         e7:f3:71:07:e6:18:18:2f:fb:e4:79:66:7b:32:46:59:2c:52:
         04:76:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:53:50 2026 by rpki-client