Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/D87376860A1511F09D97420DC4F9AE02.roa
File:                     D87376860A1511F09D97420DC4F9AE02.roa (raw, json)
Hash identifier:          Ub9C5wsl142P8R6BoMmyHFy+cj1b1wk885fNQRr/IyE=
Subject key identifier:   3B:0E:03:FF:5A:BF:F0:06:6A:0A:B0:65:08:57:2C:F1:09:D5:0A:EA
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       CF
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/D87376860A1511F09D97420DC4F9AE02.roa
Signing time:             Fri 13 Feb 2026 06:25:41 +0000
ROA not before:           Fri 13 Feb 2026 06:25:41 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137443
IP address blocks:        2404:de80::/32 maxlen: 32
                          2404:de80::/39 maxlen: 39
                          2404:de80:0:1::/64 maxlen: 64
                          2404:de80:400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Feb 13 06:25:41 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698ec3e5-21fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:59:40:4e:c5:05:84:74:c4:6a:d9:b2:46:
                    bc:5b:9c:4c:f6:f0:85:4d:d9:ff:e3:0f:c7:4d:eb:
                    17:8e:4a:91:4e:49:4f:e8:de:59:20:39:a4:6f:48:
                    fd:9a:79:1c:44:5a:1e:77:d9:15:ac:fd:02:e2:89:
                    3f:82:f7:96:65:17:16:94:99:78:4f:53:04:30:19:
                    97:fb:6b:f7:f1:f5:f7:97:6b:40:d9:91:8f:e8:d0:
                    de:8e:02:7a:6e:56:ad:33:e4:df:d9:59:e6:d3:6d:
                    c4:67:dd:6b:23:45:f9:07:c4:90:36:0e:fe:5e:40:
                    cd:9c:a7:b0:93:db:2b:44:6a:19:a3:ca:bb:07:d3:
                    39:db:08:6e:54:25:9a:a2:1a:90:98:6c:e3:45:81:
                    9c:4a:cd:3e:e1:a7:47:5c:85:02:3c:0a:a9:e9:13:
                    bc:4a:58:ab:7a:69:65:7a:8d:29:ec:e1:3a:83:37:
                    8a:3d:2f:b9:46:b0:16:ab:61:77:59:f9:29:57:bf:
                    a1:15:0b:f5:1e:f4:ab:ec:bd:96:cd:5c:5d:d7:25:
                    43:3c:61:c3:d5:23:4a:bd:e1:91:71:4e:dd:d5:f7:
                    41:89:ca:89:b7:8a:0e:94:17:78:d4:c4:0e:c8:48:
                    93:6c:ff:a8:d3:34:01:75:5f:06:c4:42:df:d1:b9:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0E:03:FF:5A:BF:F0:06:6A:0A:B0:65:08:57:2C:F1:09:D5:0A:EA
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/D87376860A1511F09D97420DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:35:6e:45:14:ea:7b:5a:3c:71:e0:8e:3c:22:90:32:fc:
         24:13:16:e5:be:0a:1f:73:85:ee:97:4e:a9:72:98:1f:ea:64:
         54:14:ef:ff:f3:5d:ab:d1:01:5c:9f:38:d6:b0:e6:a4:40:7a:
         38:88:cd:46:59:aa:89:ff:4b:77:d5:00:3d:46:9d:a6:1b:9e:
         d5:43:87:e6:be:29:77:e3:af:5d:13:83:27:d4:b4:c2:19:36:
         c9:ca:e4:30:f4:d1:9f:4f:74:13:de:91:73:4e:8a:1b:70:6b:
         33:fb:41:76:c9:ec:09:31:22:2c:1c:70:34:40:f0:7a:fa:c7:
         2a:d6:40:cd:c2:40:1c:71:f1:72:5b:1e:43:e5:cc:4c:ee:35:
         23:6f:be:04:34:8f:5f:c1:b3:ac:10:3c:c0:6d:5d:59:e5:3e:
         5d:c2:bc:15:f2:8b:d7:ac:f3:89:3f:04:c7:e1:33:d1:f2:8f:
         ce:ce:5f:73:97:ba:83:2e:03:a9:3e:43:d8:f8:a3:15:f6:db:
         50:56:b0:8f:35:0d:0c:34:c0:88:89:ef:3b:d4:0c:46:fd:f3:
         28:fd:7b:19:26:c2:7b:a4:de:3a:96:d4:b7:38:b5:e9:05:20:
         37:fb:42:0c:98:60:82:77:14:f8:49:b3:2c:bc:31:b0:05:6c:
         62:88:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:18:29 2026 by rpki-client