Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/D693D3C2064711F1AE681DED2D3D8C67.roa
File:                     D693D3C2064711F1AE681DED2D3D8C67.roa (raw, json)
Hash identifier:          ymAoWdWG14rfo2pZczq4rQ4uXWgXOzVPy20jsmz5pjI=
Subject key identifier:   88:73:F6:BC:F0:0E:82:A8:57:DB:BB:DA:B2:FC:B6:44:17:37:76:F5
Certificate issuer:       /CN=A912465F/serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
Certificate serial:       02
Authority key identifier: 3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/D693D3C2064711F1AE681DED2D3D8C67.roa
Signing time:             Tue 10 Feb 2026 06:15:04 +0000
ROA not before:           Tue 10 Feb 2026 06:15:04 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154489
IP address blocks:        2001:df6:b0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl
                          rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912465F, serialNumber=3E7AEB29FE5AA329C4AF49FE3603987FF1E85898
        Validity
            Not Before: Feb 10 06:15:04 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698acce8-9be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:1e:d4:8a:6d:2a:b8:b4:1b:b3:a6:82:d6:
                    9f:6c:42:b0:3f:28:ac:45:91:74:aa:62:67:83:02:
                    ec:8e:1c:99:78:bb:76:69:02:c0:5f:3f:ed:71:0c:
                    80:33:4d:05:26:f8:2c:db:40:4d:bd:b2:1b:25:7d:
                    f2:79:6a:72:73:91:dc:34:cb:ed:1f:b8:11:ff:38:
                    41:3c:ca:27:fb:fe:5f:d8:13:95:94:f4:f6:ef:3a:
                    47:f9:83:4c:00:69:40:74:b9:d9:d4:f8:bb:5e:33:
                    8f:c3:dd:61:19:bc:14:55:03:61:3a:10:c8:24:71:
                    f0:93:32:4f:36:21:c0:38:c4:86:0f:43:d2:00:09:
                    df:f6:03:e3:d2:0b:2a:4f:4a:e1:2b:11:00:46:ec:
                    56:a0:2f:a7:c0:6e:31:3c:ce:dc:d4:e7:b1:c7:dc:
                    85:d2:6c:25:ad:7b:a4:1c:d1:6e:6a:07:75:0d:b6:
                    d5:71:7e:c5:d4:8d:0c:c2:21:f2:4b:1b:c6:bb:ac:
                    16:f4:3a:73:25:16:fa:70:24:d6:b6:49:e6:79:e9:
                    8f:0b:95:20:8a:2c:95:fa:6e:9a:0c:45:66:a0:9d:
                    d7:8d:28:96:87:97:b1:9a:97:57:bf:22:4e:43:60:
                    67:da:92:3f:7d:91:a8:4d:b4:ee:1e:c4:5b:93:31:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:73:F6:BC:F0:0E:82:A8:57:DB:BB:DA:B2:FC:B6:44:17:37:76:F5
            X509v3 Authority Key Identifier:
                keyid:3E:7A:EB:29:FE:5A:A3:29:C4:AF:49:FE:36:03:98:7F:F1:E8:58:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/PnrrKf5aoynEr0n-NgOYf_HoWJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnrrKf5aoynEr0n-NgOYf_HoWJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/5560CDAA064711F1B4BAFBC52D3D8C67/D693D3C2064711F1AE681DED2D3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:b0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:1e:de:45:5d:b0:56:04:7d:79:da:fa:01:32:cc:39:65:84:
         70:01:4c:b9:e9:db:a6:03:ac:b6:36:c1:c6:fe:41:ed:93:df:
         9c:73:fb:43:f5:fb:0b:16:39:83:e8:19:65:ac:55:9e:8d:23:
         a9:0d:d1:78:8c:a5:40:cc:f4:85:42:90:df:ab:c6:6a:3f:2e:
         11:aa:ec:0f:34:f7:c5:db:33:58:84:6a:dc:c2:63:24:89:fe:
         42:60:a9:b1:69:f7:8b:5c:6d:e3:7e:49:2e:32:c8:4f:04:7b:
         1e:20:4f:aa:e2:b6:4d:f2:9e:a0:66:80:1a:e1:7b:36:e1:96:
         3d:f9:97:51:f9:68:7f:18:47:4d:4f:9c:74:32:92:ac:29:69:
         a0:2c:e7:01:ae:c1:35:3b:f6:ca:09:d5:37:6b:9b:60:b3:f1:
         22:c8:40:d0:87:a0:45:2f:34:6c:3e:87:bc:21:c0:5c:50:17:
         d1:ee:e2:95:9f:06:4a:26:34:21:e2:47:78:0a:17:90:42:74:
         6f:4a:a8:d4:de:9b:08:31:d3:81:f5:e4:f4:c6:d4:82:fb:d6:
         2a:2d:36:f5:b7:a1:b2:4c:ed:63:ba:b8:be:dc:33:e9:28:11:
         11:1e:78:ab:17:c9:5c:8d:19:75:a6:6d:d0:dd:9d:b3:46:ea:
         e2:d2:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:41 2026 by rpki-client