Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/D70E2EBA064711F1AE681DED2D3D8C67.roa
File:                     D70E2EBA064711F1AE681DED2D3D8C67.roa (raw, json)
Hash identifier:          1JPAaBxQU9AhpcPFeoIrUjS9mBdhHYUPT9UCOyk2QDY=
Subject key identifier:   47:6A:FE:70:D3:8D:76:15:02:2D:90:3A:34:08:81:4B:65:08:7C:E2
Certificate issuer:       /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial:       02
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/D70E2EBA064711F1AE681DED2D3D8C67.roa
Signing time:             Tue 10 Feb 2026 06:15:04 +0000
ROA not before:           Tue 10 Feb 2026 06:15:04 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154489
IP address blocks:        151.158.152.0/23 maxlen: 23
                          151.158.152.0/24 maxlen: 24
                          151.158.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
                          rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
        Validity
            Not Before: Feb 10 06:15:04 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698acce8-b3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:14:72:4d:0e:c7:07:54:c7:07:28:09:49:
                    1e:c2:46:d1:e7:97:4c:b2:28:a9:23:6e:b7:06:76:
                    49:7b:97:47:3e:66:22:de:c3:da:84:06:fc:56:f3:
                    d1:2b:71:ea:b9:bd:4a:7b:90:42:26:fe:6d:88:10:
                    11:82:c4:29:7f:5e:3d:83:f9:af:62:44:a1:63:5c:
                    ad:a3:cc:84:98:a3:00:5e:71:58:ac:ce:03:1d:c8:
                    7a:fc:3b:cd:d2:c8:f1:a0:53:f1:70:80:55:d5:85:
                    91:5b:b3:3b:35:ea:89:d1:38:b8:6b:ae:06:42:2a:
                    95:24:8b:93:07:1a:f9:f6:c2:80:c1:7b:71:9f:98:
                    74:9c:40:7c:95:f5:1b:ed:07:dd:6f:6b:9f:fd:48:
                    99:c9:94:b5:88:51:9b:cb:aa:36:01:ce:e2:a6:85:
                    e6:4a:a7:e5:3e:d2:5a:8c:eb:3a:a6:2e:cc:b1:4e:
                    91:c0:f3:e2:c2:28:63:c0:a0:07:74:e5:ee:a8:b5:
                    d4:17:77:8d:d1:e1:b8:ff:1e:69:42:93:a8:67:5e:
                    cb:b6:de:47:48:36:a9:6c:8e:10:cd:b2:c6:b8:8c:
                    f1:58:cf:20:cc:b6:fd:69:d7:ff:e4:9b:81:63:24:
                    45:ad:4d:88:e1:8c:b4:fd:e1:85:2e:a0:47:2e:fb:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:FE:70:D3:8D:76:15:02:2D:90:3A:34:08:81:4B:65:08:7C:E2
            X509v3 Authority Key Identifier:
                keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/D70E2EBA064711F1AE681DED2D3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:6e:b4:47:c0:8d:2b:e4:66:ef:2d:3e:2e:8f:4c:52:8f:bc:
         cb:8a:ad:88:48:df:1e:95:2a:0e:63:a5:46:ea:fe:9b:eb:bf:
         c1:6c:de:a7:0d:4a:5f:30:17:7c:6c:4c:fd:4a:8d:d0:08:4d:
         9d:18:bc:f9:b0:c5:a8:f1:e9:73:8c:ea:f4:9e:04:4d:dc:bc:
         02:31:c1:d5:7c:44:9a:64:25:13:97:b8:fb:99:0d:90:82:20:
         eb:03:3a:0b:d1:50:c7:5d:0d:52:4a:dc:9f:ac:42:84:ef:f1:
         80:17:9d:54:c8:56:02:67:50:18:2c:49:95:d1:5d:98:14:53:
         3d:3c:34:b1:a2:36:80:2f:a9:c6:c7:9a:11:45:86:73:3b:68:
         2d:d3:3a:00:83:7c:6f:2f:c2:e0:c2:82:a1:5a:b4:cf:02:8f:
         49:63:d8:d3:8b:12:cf:62:1d:17:db:a2:06:8b:cb:b3:5e:7e:
         21:7a:0f:68:53:db:85:6a:ae:4a:00:d9:67:c2:bb:97:86:ed:
         fd:33:76:f5:44:34:ec:4f:7b:cb:46:38:cb:35:50:5b:37:9f:
         4b:a7:f3:af:0f:e1:ee:32:94:2a:48:5d:52:3a:67:a2:cb:b9:
         0d:60:36:50:72:df:15:f8:1b:07:71:46:d1:de:9d:6a:e7:92:
         df:3f:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:04 2026 by rpki-client