Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/EBF4C0063C8811EC889B9D78C4F9AE02.roa
File:                     EBF4C0063C8811EC889B9D78C4F9AE02.roa (raw, json)
Hash identifier:          qFVJr2n2NykDjsNkjh3gL0I4ElRrTaR+KqOIhATefiY=
Subject key identifier:   4E:51:16:64:61:5C:18:16:D8:CE:2B:CA:61:4A:7B:1D:7C:91:6D:FD
Certificate issuer:       /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
Certificate serial:       053D
Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/EBF4C0063C8811EC889B9D78C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 09:23:25 +0000
ROA not before:           Thu 05 Feb 2026 09:23:25 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        141.193.152.0/21 maxlen: 21
                          141.193.152.0/24 maxlen: 24
                          141.193.153.0/24 maxlen: 24
                          141.193.154.0/24 maxlen: 24
                          141.193.155.0/24 maxlen: 24
                          141.193.156.0/24 maxlen: 24
                          141.193.157.0/24 maxlen: 24
                          141.193.158.0/24 maxlen: 24
                          141.193.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14
        Validity
            Not Before: Feb  5 09:23:25 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6984618d-0888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:58:46:cd:60:61:16:41:41:81:17:a6:45:
                    bb:65:de:9e:50:c5:b4:9a:85:72:79:78:26:ce:fb:
                    41:95:b6:99:18:c9:04:c5:e2:5b:72:28:22:50:96:
                    0b:fe:e6:f1:f5:81:c0:b3:7d:7e:3c:a4:26:bb:b3:
                    be:1a:82:50:9a:32:a8:53:fd:fa:01:86:cc:13:14:
                    84:4a:38:c0:75:48:f8:cf:15:45:6f:fd:b6:35:b3:
                    bc:5b:bb:81:c0:d2:31:27:ec:13:b3:65:63:d5:ba:
                    c1:15:dc:15:49:2f:7c:11:95:a7:c2:53:06:73:83:
                    13:c2:af:4f:b1:28:96:26:c2:27:cd:3d:21:28:2b:
                    fa:4e:72:7a:4a:e1:eb:30:c0:f6:dc:db:73:38:de:
                    37:bb:07:7d:6a:65:5e:c6:d3:f2:78:c5:e2:39:83:
                    24:3a:b7:61:d5:13:a3:5c:21:98:02:95:39:6f:49:
                    a0:de:7e:3e:4e:c0:a0:20:a5:61:dd:fe:e8:34:3c:
                    a3:ce:40:b8:85:5a:74:5f:c9:31:66:ff:21:98:47:
                    ae:24:95:f3:29:32:7c:f9:70:60:ab:c6:be:02:21:
                    59:c8:ec:6c:2d:b4:43:da:91:e6:2c:62:60:17:99:
                    53:e2:15:91:39:aa:de:5d:4e:d0:0f:6a:13:0f:b4:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:16:64:61:5C:18:16:D8:CE:2B:CA:61:4A:7B:1D:7C:91:6D:FD
            X509v3 Authority Key Identifier:
                keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/EBF4C0063C8811EC889B9D78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:80:af:24:5a:11:8a:9b:c5:1a:94:1e:ef:59:7e:56:e7:
         3b:f6:65:5b:26:19:93:7a:0d:c5:02:79:58:f0:86:e3:3b:71:
         72:18:02:b7:c2:d3:d3:22:08:30:e4:d2:57:3c:9e:0e:23:e5:
         1f:ba:2c:39:30:f1:4d:4f:66:ee:fe:f5:a5:9b:e3:8a:19:5f:
         21:83:48:3a:56:a9:eb:51:36:d9:86:49:95:7c:08:ad:00:00:
         a9:c8:a9:56:52:a5:16:0c:e0:f4:dd:bf:06:07:13:5f:fe:69:
         dd:75:aa:cf:1a:c5:db:8d:29:81:15:69:c2:62:a4:38:a4:08:
         5a:f9:0c:a2:00:cf:fe:dc:12:b4:53:34:d2:32:30:7d:79:e8:
         d4:be:a6:17:93:8a:8c:2b:57:04:c7:d8:48:65:68:26:a1:bd:
         ef:e2:74:6e:d0:f5:29:3d:68:4f:c5:2b:35:e7:8e:e9:96:73:
         62:e4:b4:6f:12:3c:ea:cc:d4:c1:f0:48:b2:ab:4c:2c:b2:c1:
         e3:55:2b:36:c7:6a:fc:e3:3d:92:1f:c9:35:e5:1b:85:6e:12:
         3d:85:ad:fc:e0:ae:10:3b:de:93:2d:59:c7:b9:8f:d1:23:c7:
         31:c0:34:a5:68:f3:cb:97:12:6e:05:f7:10:93:15:4f:c2:b2:
         a7:09:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:30 2026 by rpki-client