Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/FE892768620711F0BE75F534C4F9AE02.roa
File:                     FE892768620711F0BE75F534C4F9AE02.roa (raw, json)
Hash identifier:          lQyCJI8M5fcLlGb3UzlSESXuidheTC9G0L0Hwdw5N0o=
Subject key identifier:   92:61:9E:38:DB:7E:59:A7:DF:D5:1E:0C:AA:54:7D:87:59:43:9B:6D
Certificate issuer:       /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
Certificate serial:       71
Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/FE892768620711F0BE75F534C4F9AE02.roa
Signing time:             Thu 29 Jan 2026 06:28:56 +0000
ROA not before:           Thu 29 Jan 2026 06:28:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     38835
IP address blocks:        203.16.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D
        Validity
            Not Before: Jan 29 06:28:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697afe28-2afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:80:41:41:1b:83:96:25:d4:c9:c8:01:d7:
                    ff:13:a9:8e:44:df:23:ed:20:0b:9a:b9:4e:e7:f6:
                    65:3b:73:96:fb:c6:9c:59:83:cd:f6:19:9d:25:d0:
                    65:74:7f:cb:4e:4b:e3:db:db:1c:b4:86:a9:22:4e:
                    d5:90:c2:53:8c:f9:51:35:91:08:08:0a:c8:2a:12:
                    c3:f6:6e:18:ba:ff:e2:4e:0a:6c:85:aa:95:53:31:
                    bc:b3:4e:45:3b:08:66:9f:c0:51:5d:f7:2a:9b:8d:
                    0d:36:81:87:e0:56:a8:ec:31:93:4c:12:bc:42:55:
                    6b:c5:b2:75:c1:87:c0:e2:12:aa:ff:ab:f2:79:27:
                    55:e6:15:9a:40:6a:5f:52:d0:3d:5f:d3:3d:0b:1b:
                    d0:f2:f4:f9:07:15:9b:ac:29:67:74:d4:f9:41:58:
                    88:a4:05:29:a7:e6:58:f6:38:ae:7d:0a:06:f8:c8:
                    7f:4f:d1:d1:3b:03:52:f5:55:84:89:3a:12:82:22:
                    21:7d:4a:bb:c6:ab:30:08:69:d7:71:2b:88:f0:bf:
                    ff:11:b7:83:42:c7:e2:40:57:8a:94:af:af:30:00:
                    9a:84:81:91:e4:4f:41:15:0d:59:a4:5d:6b:8f:66:
                    1c:3f:79:23:79:8d:30:31:de:55:84:49:70:b2:54:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:61:9E:38:DB:7E:59:A7:DF:D5:1E:0C:AA:54:7D:87:59:43:9B:6D
            X509v3 Authority Key Identifier:
                keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/FE892768620711F0BE75F534C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:e8:a3:0c:fc:9f:bf:7d:9d:b5:e2:85:2f:63:8b:64:85:
         44:1f:0e:f5:06:0b:bf:e9:9f:fa:a0:ac:ef:ab:42:79:df:90:
         d3:ed:d8:d1:28:14:a2:bd:24:dc:be:68:00:a5:9b:e8:7f:6e:
         ff:74:18:46:45:ca:65:6b:8c:1a:e5:86:9c:62:3b:fe:d6:cd:
         43:65:dd:6e:0d:00:a9:37:34:b9:29:d0:30:86:39:c5:75:2b:
         72:e9:fa:18:66:4d:8c:47:24:3f:6c:6d:68:03:5d:70:82:07:
         52:89:2a:7a:db:dd:01:be:5c:22:e6:43:b8:9a:cb:e8:e1:5d:
         c4:c6:67:21:fd:94:b9:cf:c1:3f:11:ab:60:fc:d9:bf:7d:41:
         47:64:7c:2e:ce:89:d7:4d:1c:5b:77:75:1b:19:1d:d3:ba:f5:
         91:bc:1c:78:5b:fb:8e:2b:db:10:15:11:66:0b:9c:64:36:dd:
         b9:e3:f8:4a:e1:56:54:f2:95:f9:5c:0f:76:32:6b:de:04:8f:
         1e:42:32:5e:c8:3b:93:fb:4c:f4:a2:ea:5a:d3:19:05:af:f3:
         23:c9:b1:72:b9:84:5d:ca:ff:c7:75:f7:57:24:6d:78:2c:56:
         9d:c1:4c:ef:c8:05:d4:8f:61:dc:9d:c4:34:73:6c:07:17:0a:
         71:fc:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:14 2026 by rpki-client