Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/727F33429FAD11EAAD1A6744C4F9AE02.roa
File:                     727F33429FAD11EAAD1A6744C4F9AE02.roa (raw, json)
Hash identifier:          ywq526IH2M9B0+Iirc7lHsOQxHhBQLt+oLoB64XxqCw=
Subject key identifier:   0A:56:98:EF:6A:8F:00:8D:D7:05:0A:0F:9E:09:4E:3F:77:E3:E8:20
Certificate issuer:       /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
Certificate serial:       10ED
Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/727F33429FAD11EAAD1A6744C4F9AE02.roa
Signing time:             Fri 06 Feb 2026 17:15:00 +0000
ROA not before:           Fri 06 Feb 2026 17:15:00 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140679
IP address blocks:        2404:9ec0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl
                          rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 17:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4333 (0x10ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF
        Validity
            Not Before: Feb  6 17:15:00 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69862194-8cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:c4:1b:0d:ed:44:13:78:be:6f:5e:91:f6:
                    5c:66:6e:4a:f6:af:b1:93:55:0d:83:43:98:4d:13:
                    a8:d1:29:e3:86:ac:ce:f3:cc:38:e8:b8:fa:1d:dd:
                    fb:6d:37:61:d6:07:d8:96:b4:6e:e3:8e:bc:4d:a0:
                    cf:92:c5:99:4a:ad:b6:65:20:c8:65:dd:80:02:8a:
                    bc:20:29:b7:a0:15:73:ae:80:00:b4:78:f1:dd:b4:
                    19:9d:5c:3c:0f:44:69:98:30:cf:60:70:41:a6:03:
                    b4:ae:15:e2:a7:3c:08:9f:3f:48:5d:52:61:2d:4c:
                    df:e5:23:be:1a:1e:b5:6b:58:c3:ce:2b:37:05:55:
                    a8:21:3a:4b:ba:4d:4d:2e:ec:ee:32:ed:cb:78:7e:
                    c8:e9:62:fe:62:e3:0d:53:3f:6e:c3:a5:88:60:3b:
                    59:3c:a1:09:38:fb:2c:33:13:8a:ec:44:ee:18:90:
                    bc:61:c7:9d:a0:1a:dc:e0:b3:78:96:ed:b8:f6:e3:
                    1f:c6:e0:7f:80:27:56:c9:05:ce:c7:08:94:fd:23:
                    c7:eb:1e:c4:a0:40:7d:43:31:95:f3:6c:93:b5:81:
                    32:e8:00:52:ef:26:de:9f:4f:ec:fd:93:6c:99:c6:
                    3b:09:59:0c:70:75:dc:c5:21:c9:5b:c3:5a:17:67:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:56:98:EF:6A:8F:00:8D:D7:05:0A:0F:9E:09:4E:3F:77:E3:E8:20
            X509v3 Authority Key Identifier:
                keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/727F33429FAD11EAAD1A6744C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9ec0:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:98:52:a7:b3:e6:23:93:aa:83:1f:6b:92:66:57:64:b4:
         24:60:1c:97:f0:5c:18:8a:d1:07:29:2b:3f:66:59:3b:17:dd:
         82:d5:c1:08:f2:41:b5:c3:62:a1:d7:4b:7f:a1:dc:cc:67:d4:
         17:78:b0:c6:c0:e6:59:1f:41:6a:02:d8:d3:6c:d1:1f:87:f9:
         8a:48:9e:ca:e3:cb:43:be:45:7d:c6:bb:97:49:3f:6f:1b:80:
         4b:0a:2f:d7:8f:92:cd:ce:f5:08:a6:49:70:07:81:5f:67:1a:
         5b:81:be:b4:30:65:07:3a:64:f8:81:49:b7:4f:d2:6d:e5:86:
         70:f8:3a:10:ee:34:45:c9:c1:e7:7a:ad:84:72:c0:cd:18:00:
         1b:ed:20:7f:37:92:1f:d0:14:e0:89:68:6d:64:cb:ed:f6:ff:
         74:fb:91:42:14:af:e8:e0:a5:33:8c:92:8c:d2:76:56:b1:f2:
         7e:74:f6:8c:3f:e2:50:99:a7:09:80:8a:47:19:5f:77:23:2b:
         15:dd:7f:9d:66:e2:8e:c6:0b:9f:a9:f4:22:5f:c6:f8:67:92:
         3c:f8:d8:c4:cd:3e:cc:ea:07:bb:35:50:e1:be:50:20:2c:fb:
         78:29:ef:0f:c3:c4:09:ed:ec:7b:8f:3d:c3:64:33:02:9a:34:
         82:1a:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:59:14 2026 by rpki-client