Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/2D7906B2FC6B11F0A5B719B8506F56BC.roa
File:                     2D7906B2FC6B11F0A5B719B8506F56BC.roa (raw, json)
Hash identifier:          SmnMgIQrAcHU04PAgmG2eqawOnDkCMDxgwgz4+yIVfs=
Subject key identifier:   D0:25:56:96:FD:18:C6:CA:C9:28:89:63:7B:C4:DE:70:F0:42:6B:A9
Certificate issuer:       /CN=A91174DD/serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
Certificate serial:       08
Authority key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/2D7906B2FC6B11F0A5B719B8506F56BC.roa
Signing time:             Wed 28 Jan 2026 17:02:51 +0000
ROA not before:           Wed 28 Jan 2026 17:02:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153174
IP address blocks:        192.42.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
        Validity
            Not Before: Jan 28 17:02:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697a413b-4434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:90:d6:83:d9:75:1b:93:4b:dd:86:84:19:
                    78:aa:28:06:b0:5c:28:d3:96:80:90:a5:e1:37:71:
                    8d:c6:38:e5:95:41:76:79:51:97:d7:18:1a:6c:ee:
                    6c:b8:1b:a6:b5:f9:57:9a:a6:54:c7:94:43:bc:69:
                    67:aa:50:b1:3a:31:df:24:f1:53:92:f2:7f:dc:a8:
                    d6:1e:10:02:31:ed:f5:c2:02:44:2f:9f:19:17:a4:
                    5e:ed:f9:d1:ab:84:bb:92:80:0f:aa:26:40:6c:a1:
                    cd:2a:3c:ac:95:2c:ed:b1:78:67:69:fa:4d:55:06:
                    f5:da:c2:2a:3c:c6:01:91:f9:e1:ec:bb:85:22:f0:
                    9d:1e:2b:f6:ab:75:9d:a2:69:2c:19:1e:c8:ff:34:
                    33:d5:24:66:8c:d7:7f:e8:f5:27:a2:0e:23:ec:66:
                    8b:16:fe:25:d0:ec:56:87:c7:dd:40:37:c1:83:9f:
                    78:06:fb:ef:cf:d1:c2:c6:41:e0:5f:6e:5a:fa:50:
                    c0:49:ca:0e:bc:a5:1d:93:6b:cd:e2:10:69:9e:d8:
                    fe:bc:73:2e:4c:5e:27:f4:ff:e4:77:97:f7:ff:e0:
                    dc:d0:8e:15:ba:08:cb:f5:e6:d9:e5:14:38:ec:20:
                    62:cb:d4:60:40:0e:35:35:d6:d8:00:cc:52:74:72:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:56:96:FD:18:C6:CA:C9:28:89:63:7B:C4:DE:70:F0:42:6B:A9
            X509v3 Authority Key Identifier:
                keyid:19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/2D7906B2FC6B11F0A5B719B8506F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:a0:1c:b3:1e:16:65:92:39:c7:22:a3:a1:38:7d:bb:c8:b8:
         7d:14:9e:2e:2c:13:0a:6f:1a:d5:dd:fb:61:fb:40:8d:7b:4b:
         b4:a6:92:da:27:a2:f2:0e:89:d2:93:7f:79:11:ab:d2:57:a6:
         6a:fc:18:b4:f2:3d:d8:c3:39:a4:48:77:c6:0e:91:96:7f:e4:
         6d:3e:98:b8:62:29:e8:80:70:f6:0f:9d:39:fb:bf:87:4c:14:
         e8:08:51:83:4e:fe:c6:8a:d3:ec:f3:3a:c7:e1:d5:bd:16:a7:
         41:74:4e:8d:8d:f6:70:26:8f:0e:09:d5:0d:0f:59:ce:e4:4a:
         cc:92:c2:62:0a:5f:18:d6:55:7e:67:a3:86:16:70:19:6a:7e:
         28:8d:ef:ba:5e:eb:bc:a5:5f:a9:d6:5b:2d:a8:91:46:29:15:
         bd:12:7f:db:ad:ca:1e:5e:99:aa:56:df:40:9f:41:93:38:4a:
         1f:ba:ac:08:c2:bb:15:fa:d9:38:2d:51:6c:c9:65:44:c0:0c:
         8d:e9:a0:b0:01:bd:2e:99:b3:a8:13:c2:5c:01:82:3f:07:ba:
         9a:ee:de:18:5c:0a:0b:f9:77:8a:aa:ea:b2:e9:26:0c:4d:75:
         6e:b5:75:ce:7d:50:05:47:4f:d3:be:de:f2:ec:98:a1:96:8f:
         05:58:a0:7d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx
NzRERDExMC8GA1UEBRMoMTlCRTEzMjExODhGMDk3NkQzMkU4MzZEMUFGQkE1NDYy
NzY2NTdFMzAeFw0yNjAxMjgxNzAyNTFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5N2E0MTNiLTQ0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9vpDWg9l1G5NL3YaEGXiqKAawXCjTloCQpeE3cY3GOOWVQXZ5UZfXGBps7my4
G6a1+VeaplTHlEO8aWeqULE6Md8k8VOS8n/cqNYeEAIx7fXCAkQvnxkXpF7t+dGr
hLuSgA+qJkBsoc0qPKyVLO2xeGdp+k1VBvXawio8xgGR+eHsu4Ui8J0eK/ardZ2i
aSwZHsj/NDPVJGaM13/o9SeiDiPsZosW/iXQ7FaHx91AN8GDn3gG++/P0cLGQeBf
blr6UMBJyg68pR2Ta83iEGme2P68cy5MXif0/+R3l/f/4NzQjhW6CMv15tnlFDjs
IGLL1GBADjU11tgAzFJ0cn3rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0CVWlv0Y
xsrJKIlje8TecPBCa6kwHwYDVR0jBBgwFoAUGb4TIRiPCXbTLoNtGvulRidmV+Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEREL0Q5NDc2MzE4RjVE
MDExRjBBMDY1MTdEMjQ3NkY1NkJDL0diNFRJUmlQQ1hiVExvTnRHdnVsUmlkbVYt
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR2I0VElSaVBDWGJUTG9OdEd2dWxSaWRtVi1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzRERC9EOTQ3NjMxOEY1RDAxMUYwQTA2NTE3RDI0NzZGNTZCQy8yRDc5MDZCMkZD
NkIxMUYwQTVCNzE5Qjg1MDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMAqVjANBgkqhkiG9w0BAQsFAAOCAQEAvqAcsx4WZZI5xyKj
oTh9u8i4fRSeLiwTCm8a1d37YftAjXtLtKaS2iei8g6J0pN/eRGr0lemavwYtPI9
2MM5pEh3xg6Rln/kbT6YuGIp6IBw9g+dOfu/h0wU6AhRg07+xorT7PM6x+HVvRan
QXROjY32cCaPDgnVDQ9ZzuRKzJLCYgpfGNZVfmejhhZwGWp+KI3vul7rvKVfqdZb
LaiRRikVvRJ/263KHl6ZqlbfQJ9BkzhKH7qsCMK7FfrZOC1RbMllRMAMjemgsAG9
LpmzqBPCXAGCPwe6mu7eGFwKC/l3iqrqsukmDE11brV1zn1QBUdP077e8uyYoZaP
BVigfQ==
-----END CERTIFICATE-----
Generated at Fri Feb 20 04:44:31 2026 by rpki-client