Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
File:                     574E0B4810E111F09B0FF441C4F9AE02.roa (raw, json)
Hash identifier:          DxaoxRsUWs2/rasGoPiRynC1U9pFyR8PNao4mM790Xw=
Subject key identifier:   4B:D4:70:04:CD:78:83:F6:19:89:CF:E9:A3:63:75:0A:11:63:A7:96
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       07C6
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
Signing time:             Mon 16 Feb 2026 21:18:22 +0000
ROA not before:           Mon 16 Feb 2026 21:18:22 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        202.87.132.0/24 maxlen: 24
                          2404:2200:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1990 (0x7c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Feb 16 21:18:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6993899e-4ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:f8:e5:5f:6d:1a:b6:ed:0f:0f:53:3a:44:
                    46:d4:b0:89:11:ac:3f:30:c8:3f:45:27:00:43:4b:
                    c5:55:25:e9:70:03:84:37:01:31:94:a0:d7:12:a7:
                    e1:1c:7b:d5:74:84:ea:57:64:b8:48:c0:be:a2:e7:
                    c6:03:9a:4d:7b:c8:05:4e:52:8b:21:e3:2d:10:9e:
                    49:50:5a:75:16:2a:65:23:8b:40:bd:af:58:7a:28:
                    0b:19:09:11:06:77:fa:2f:f9:cb:61:f8:69:44:c1:
                    e0:b2:02:44:b7:75:57:be:cd:8a:d3:42:6e:f9:0a:
                    d2:67:6b:c6:b2:f9:63:8f:4e:e8:7e:98:a1:ed:a8:
                    cc:56:79:ee:12:f2:e1:0c:0d:53:92:1c:ef:84:c0:
                    30:d6:73:a7:91:da:bc:dc:40:1a:fb:e2:5c:d6:1c:
                    26:fa:45:d0:c3:7f:69:1c:b8:64:2f:b4:07:7a:f5:
                    bb:9c:8e:76:96:31:ae:ab:9b:76:e9:11:0a:24:36:
                    c1:28:4e:82:54:27:af:a5:06:13:58:5d:0a:7b:86:
                    72:08:7d:9e:70:17:f7:7f:17:9a:77:0f:0c:18:16:
                    5d:8c:0b:44:f5:5d:9e:c5:59:07:dc:ab:22:18:c0:
                    a4:51:7d:f8:f0:c7:56:46:5c:70:16:a5:d5:6d:d9:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D4:70:04:CD:78:83:F6:19:89:CF:E9:A3:63:75:0A:11:63:A7:96
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.132.0/24
                IPv6:
                  2404:2200:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:b4:7d:df:32:b0:55:a1:5d:cc:a2:70:8d:9c:6d:6e:1e:
         5f:ec:2d:b3:6b:4e:45:75:f7:d5:5f:09:97:7e:71:5f:a7:2a:
         d1:7f:58:b1:02:c0:d5:6c:9c:8a:ea:bc:18:1c:63:a9:17:3b:
         59:c0:14:db:36:8b:dd:d1:14:42:db:50:af:17:20:d0:21:1d:
         5c:5f:29:25:e0:1f:7f:4e:8b:da:bd:34:cf:b9:68:99:04:4e:
         71:ed:5a:e3:8d:a2:41:54:3d:19:9a:18:3d:a6:d6:19:b7:80:
         cf:8e:1e:e4:37:54:4b:ce:e4:be:2a:40:85:a5:3c:02:1e:8f:
         f3:af:9b:ab:61:f4:3a:9a:70:99:5b:ec:1d:91:cc:62:d6:10:
         0c:b7:8f:f3:82:04:6d:74:a8:30:dd:6c:da:af:90:ae:2a:f7:
         5f:eb:2d:29:43:c8:55:76:49:71:34:c3:bb:e9:d8:cc:b7:89:
         1d:1a:27:9f:ef:11:4e:4b:92:98:86:75:01:4e:f4:22:78:ef:
         cb:dc:57:3d:56:b7:9c:4e:5a:d7:4e:23:ee:c4:ee:f5:01:c0:
         b2:12:ce:bc:a6:d7:80:c0:c9:56:5b:d0:1b:bb:be:32:0d:79:
         fa:73:b2:7a:1d:2f:c7:c6:32:e8:3f:67:a2:f8:0d:fb:30:f5:
         d8:09:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:59:36 2026 by rpki-client