Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/0680FAB6FFBC11F0B48A1C476B6F56BC.roa
File:                     0680FAB6FFBC11F0B48A1C476B6F56BC.roa (raw, json)
Hash identifier:          samtjlXYEjUnMUPgV73FGqZDNqTUWR5qQgLKgWjCTsU=
Subject key identifier:   45:13:BB:F3:25:E3:6E:44:15:6D:07:8D:3B:1F:98:A0:26:7B:5A:C1
Certificate issuer:       /CN=A911725F/serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
Certificate serial:       0C
Authority key identifier: EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/0680FAB6FFBC11F0B48A1C476B6F56BC.roa
Signing time:             Sun 01 Feb 2026 22:19:08 +0000
ROA not before:           Sun 01 Feb 2026 22:19:08 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132387
IP address blocks:        2402:4b20::/32 maxlen: 32
                          2402:4b20:1000::/36 maxlen: 36
                          2402:4b20:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.crl
                          rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911725F, serialNumber=EC6DF2ECD18F285F97B88F8441FD297A9EDBB94C
        Validity
            Not Before: Feb  1 22:19:08 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=697fd15b-4c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:88:c5:cb:00:28:97:03:16:ef:b9:2c:38:
                    d7:f7:c0:3a:b3:17:5e:97:8e:6d:07:58:e7:f7:85:
                    2b:12:a6:10:d7:d3:fb:77:45:a8:2c:f2:4f:77:cd:
                    54:c3:3b:8f:df:dd:07:40:ba:66:ea:9a:7a:df:c2:
                    dc:ae:b6:06:8f:65:3d:13:a6:71:89:df:44:d6:88:
                    f4:0c:5d:96:f9:50:f0:54:18:6f:2f:82:2a:db:a7:
                    cd:7e:ec:26:be:18:1e:ed:a9:74:c8:3d:04:e1:62:
                    db:62:66:73:a8:66:f5:23:a5:12:cc:1c:ac:df:85:
                    bb:61:a1:cf:50:df:ae:4c:82:2e:8d:b0:91:09:a0:
                    1c:dd:c0:50:5f:4f:b8:ee:4b:7d:d0:1a:68:27:32:
                    b4:e2:d6:07:04:6d:b3:7d:f3:36:1b:21:8c:0c:60:
                    c7:a9:c8:81:75:fa:df:1b:63:90:32:9b:ba:4d:7f:
                    af:9f:2b:3b:10:5c:b1:d4:ca:7b:02:81:fb:81:8a:
                    e9:6a:bb:d8:69:93:81:ce:c5:d6:9b:6f:81:9b:d8:
                    81:98:f8:11:2a:70:74:c4:8a:f1:5f:f6:f6:d2:6f:
                    b5:31:b1:60:c4:91:b8:fb:24:2d:81:51:d4:9f:41:
                    e2:1e:5c:3c:0d:04:24:dc:82:7d:8b:cd:fa:e0:e6:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:13:BB:F3:25:E3:6E:44:15:6D:07:8D:3B:1F:98:A0:26:7B:5A:C1
            X509v3 Authority Key Identifier:
                keyid:EC:6D:F2:EC:D1:8F:28:5F:97:B8:8F:84:41:FD:29:7A:9E:DB:B9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/7G3y7NGPKF-XuI-EQf0pep7buUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7G3y7NGPKF-XuI-EQf0pep7buUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/7A9BF3CAFB2E11F0AFDE71893B6F56BC/0680FAB6FFBC11F0B48A1C476B6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:af:ab:e3:f1:36:2b:97:1d:ef:ee:22:aa:c7:7d:bc:0c:6b:
         63:93:15:97:03:41:72:25:fd:27:b5:6e:44:5c:4c:5e:26:93:
         67:13:c0:5d:02:9e:e4:e6:77:81:f4:4f:36:0b:b8:ce:be:89:
         cb:5a:8d:eb:53:b2:71:9e:f4:73:c2:79:65:36:c8:e9:08:8c:
         86:81:0c:58:e3:e7:ba:2c:47:ae:03:72:17:16:ad:74:5b:f3:
         b5:97:27:1a:60:bb:2d:11:9a:62:90:65:db:d1:81:37:e9:b9:
         1b:ef:c2:60:b6:9c:a7:b3:54:cf:d1:73:66:e8:18:cf:4a:64:
         73:a7:a3:8c:12:7e:ef:92:b1:b3:66:54:ed:5b:d2:09:78:9d:
         ab:16:48:18:7f:55:26:78:e1:dd:d0:0b:58:83:dc:2f:d4:e0:
         d9:99:ce:41:6b:fb:2e:a7:d8:38:fb:b0:8d:b9:7d:da:21:ca:
         6b:ba:46:44:f0:25:3b:3d:ee:01:b0:b7:66:b3:07:45:76:bc:
         31:98:b4:0d:ad:76:fe:e4:e6:ed:82:c4:c2:5a:70:9a:a7:b3:
         9f:00:99:b9:3f:0e:6e:da:cc:ab:a6:a5:81:87:fb:e6:56:72:
         9e:00:9b:92:77:30:a0:3c:a5:72:86:e9:a3:d4:fb:1f:d1:55:
         b3:88:2d:4d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx
NzI1RjExMC8GA1UEBRMoRUM2REYyRUNEMThGMjg1Rjk3Qjg4Rjg0NDFGRDI5N0E5
RURCQjk0QzAeFw0yNjAyMDEyMjE5MDhaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5N2ZkMTViLTRjODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjaIjFywAolwMW77ksONf3wDqzF16Xjm0HWOf3hSsSphDX0/t3Rags8k93zVTD
O4/f3QdAumbqmnrfwtyutgaPZT0TpnGJ30TWiPQMXZb5UPBUGG8vgirbp81+7Ca+
GB7tqXTIPQThYttiZnOoZvUjpRLMHKzfhbthoc9Q365Mgi6NsJEJoBzdwFBfT7ju
S33QGmgnMrTi1gcEbbN98zYbIYwMYMepyIF1+t8bY5Aym7pNf6+fKzsQXLHUynsC
gfuBiulqu9hpk4HOxdabb4Gb2IGY+BEqcHTEivFf9vbSb7UxsWDEkbj7JC2BUdSf
QeIeXDwNBCTcgn2Lzfrg5tzHAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQURRO78yXj
bkQVbQeNOx+YoCZ7WsEwHwYDVR0jBBgwFoAU7G3y7NGPKF+XuI+EQf0pep7buUww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3MjVGLzdBOUJGM0NBRkIy
RTExRjBBRkRFNzE4OTNCNkY1NkJDLzdHM3k3TkdQS0YtWHVJLUVRZjBwZXA3YnVV
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN0czeTdOR1BLRi1YdUktRVFmMHBlcDdidVV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzI1Ri83QTlCRjNDQUZCMkUxMUYwQUZERTcxODkzQjZGNTZCQy8wNjgwRkFCNkZG
QkMxMUYwQjQ4QTFDNDc2QjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQCSyAwDQYJKoZIhvcNAQELBQADggEBAGivq+PxNiuXHe/u
IqrHfbwMa2OTFZcDQXIl/Se1bkRcTF4mk2cTwF0CnuTmd4H0TzYLuM6+ictajetT
snGe9HPCeWU2yOkIjIaBDFjj57osR64DchcWrXRb87WXJxpguy0RmmKQZdvRgTfp
uRvvwmC2nKezVM/Rc2boGM9KZHOno4wSfu+SsbNmVO1b0gl4nasWSBh/VSZ44d3Q
C1iD3C/U4NmZzkFr+y6n2Dj7sI25fdohymu6RkTwJTs97gGwt2azB0V2vDGYtA2t
dv7k5u2CxMJacJqns58Ambk/Dm7azKumpYGH++ZWcp4Am5J3MKA8pXKG6aPU+x/R
VbOILU0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:34 2026 by rpki-client