Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/579B33AE886F11F0A02D4009C4F9AE02.roa
File:                     579B33AE886F11F0A02D4009C4F9AE02.roa (raw, json)
Hash identifier:          i694BiCj0TiGd2lr/zyVLBpjtaksSSaQaDh6dbA9tJI=
Subject key identifier:   96:63:24:9E:1C:BB:D9:19:4D:AD:EF:A5:4F:33:22:5E:BB:00:CA:5E
Certificate issuer:       /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08
Certificate serial:       0540
Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/579B33AE886F11F0A02D4009C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 09:23:27 +0000
ROA not before:           Thu 05 Feb 2026 09:23:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        69.72.80.0/21 maxlen: 21
                          69.72.80.0/24 maxlen: 24
                          69.72.81.0/24 maxlen: 24
                          69.72.82.0/24 maxlen: 24
                          69.72.83.0/24 maxlen: 24
                          69.72.84.0/24 maxlen: 24
                          69.72.85.0/24 maxlen: 24
                          69.72.86.0/24 maxlen: 24
                          69.72.87.0/24 maxlen: 24
                          148.66.48.0/20 maxlen: 21
                          148.66.48.0/21 maxlen: 24
                          148.66.56.0/22 maxlen: 22
                          148.66.56.0/23 maxlen: 24
                          148.66.58.0/24 maxlen: 24
                          148.66.59.0/24 maxlen: 24
                          148.66.60.0/24 maxlen: 24
                          148.66.61.0/24 maxlen: 24
                          148.66.62.0/24 maxlen: 24
                          148.66.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl
                          rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08
        Validity
            Not Before: Feb  5 09:23:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6984618f-4265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:ca:d0:93:27:69:81:a3:69:27:ad:d2:10:
                    b4:17:85:a1:36:86:82:cd:b2:2e:5e:10:7f:db:77:
                    7a:37:34:ea:75:83:c0:99:89:d7:53:a8:f9:5b:8c:
                    ac:bb:93:85:7e:34:ce:2d:c5:d7:3c:72:18:1f:f4:
                    cb:a5:1c:dd:ce:07:17:38:8f:65:85:e7:22:fd:23:
                    fb:31:ab:e1:15:09:ac:22:7b:3a:93:92:72:88:97:
                    6a:70:f3:2b:aa:04:6a:96:2e:c8:53:26:36:35:d5:
                    71:2b:70:23:5c:5a:27:67:23:c4:d9:63:60:55:04:
                    0f:2f:c9:42:c3:1b:f6:29:19:89:86:95:74:08:23:
                    90:65:ef:29:92:5b:e4:ee:0c:5d:4f:1b:ef:72:fc:
                    0f:bc:a2:0b:6c:e4:7f:00:7e:dd:d7:d8:a2:44:25:
                    eb:1b:5b:a7:04:57:1e:e1:7c:fb:d7:6f:73:62:28:
                    f4:45:d3:90:ce:b9:8f:66:db:ab:e2:a1:d3:65:6f:
                    a8:df:c0:b4:2d:b6:93:cb:f1:b9:5e:d5:42:38:dc:
                    62:6b:62:cb:8c:b6:e4:d0:f5:97:e8:c4:74:d5:40:
                    f8:4a:48:6c:21:63:23:a3:1c:b5:b2:ca:71:02:c1:
                    b9:dc:c0:57:69:58:9a:9a:2a:86:f7:26:26:30:73:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:24:9E:1C:BB:D9:19:4D:AD:EF:A5:4F:33:22:5E:BB:00:CA:5E
            X509v3 Authority Key Identifier:
                keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/579B33AE886F11F0A02D4009C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.80.0/21
                  148.66.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:11:6b:d0:53:66:86:32:8c:95:10:f4:43:4e:90:19:ef:2d:
         87:6b:45:87:33:f4:70:ac:dd:3e:40:8c:e0:a5:b2:2e:d4:b1:
         6d:51:d5:0a:e5:37:9c:b7:77:de:37:72:3a:c2:7d:ff:06:26:
         6d:70:aa:82:e6:39:01:5a:97:f6:c8:76:a6:ff:a0:35:e2:f4:
         a2:4b:d8:10:4e:3a:70:2b:74:ab:29:ca:65:94:19:76:bb:a8:
         85:a8:5f:b2:72:ce:50:93:58:ad:ca:7f:ca:a5:9d:bc:f9:be:
         88:8c:91:47:12:76:85:8f:75:d4:46:db:05:68:22:ac:b0:2b:
         fd:67:31:4d:d5:b6:05:37:b2:80:83:81:91:64:97:04:55:f4:
         dc:e4:63:a9:21:b3:fa:88:27:88:3d:7d:d3:2b:1d:a6:ed:4e:
         96:14:ca:e2:65:2b:86:66:1c:96:3c:c4:58:f7:9a:f9:06:dc:
         98:d7:76:fe:f6:5f:17:c3:db:40:6b:75:2d:9c:b1:e9:5b:e2:
         d3:99:93:46:39:48:31:10:bf:4b:3e:d9:48:be:e8:15:5b:e9:
         66:51:a0:81:58:f2:1e:ef:86:ed:bd:dc:9f:29:aa:8d:b5:02:
         26:a6:5b:6c:3d:c0:18:19:60:1f:c8:79:4b:1c:66:2a:da:fe:
         cb:ca:56:12
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0
Q0MxMTZFMDgwHhcNMjYwMjA1MDkyMzI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg0NjE4Zi00MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmNjK0JMnaYGjaSet0hC0F4WhNoaCzbIuXhB/23d6NzTqdYPAmYnXU6j5W4ys
u5OFfjTOLcXXPHIYH/TLpRzdzgcXOI9lheci/SP7MavhFQmsIns6k5JyiJdqcPMr
qgRqli7IUyY2NdVxK3AjXFonZyPE2WNgVQQPL8lCwxv2KRmJhpV0CCOQZe8pklvk
7gxdTxvvcvwPvKILbOR/AH7d19iiRCXrG1unBFce4Xz7129zYij0RdOQzrmPZtur
4qHTZW+o38C0LbaTy/G5XtVCONxia2LLjLbk0PWX6MR01UD4SkhsIWMjoxy1sspx
AsG53MBXaViamiqG9yYmMHPKrwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJZjJJ4c
u9kZTa3vpU8zIl67AMpeMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw
OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBBQzEvM0U5QTRBRTAzMDk3MTFFQ0IyODVBNjRCQzRGOUFFMDIvNTc5QjMzQUU4
ODZGMTFGMEEwMkQ0MDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBANFSFADBASUQjAwDQYJKoZIhvcNAQELBQADggEBAFkRa9BT
ZoYyjJUQ9ENOkBnvLYdrRYcz9HCs3T5AjOClsi7UsW1R1QrlN5y3d943cjrCff8G
Jm1wqoLmOQFal/bIdqb/oDXi9KJL2BBOOnArdKspymWUGXa7qIWoX7JyzlCTWK3K
f8qlnbz5voiMkUcSdoWPddRG2wVoIqywK/1nMU3VtgU3soCDgZFklwRV9NzkY6kh
s/qIJ4g9fdMrHabtTpYUyuJlK4ZmHJY8xFj3mvkG3JjXdv72XxfD20BrdS2cselb
4tOZk0Y5SDEQv0s+2Ui+6BVb6WZRoIFY8h7vhu293J8pqo21AiamW2w9wBgZYB/I
eUscZira/svKVhI=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:04 2026 by rpki-client