Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa
File:                     2E1E405E712D11EDA8C64C3DC4F9AE02.roa (raw, json)
Hash identifier:          HgBCprvLEMUdtECvNrG2BfQhC3eNx2q8+YWFMo+rJHU=
Subject key identifier:   72:7E:FE:56:A0:5C:3B:E0:D8:D0:0A:BA:EA:68:C2:A9:BB:3E:A6:0A
Certificate issuer:       /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial:       18C7
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa
Signing time:             Thu 05 Feb 2026 22:47:03 +0000
ROA not before:           Thu 05 Feb 2026 22:47:03 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45873
IP address blocks:        180.94.236.0/23 maxlen: 24
                          2401:e880::/32 maxlen: 32
                          2401:e880:4::/48 maxlen: 48
                          2401:e880:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
                          rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6343 (0x18c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
        Validity
            Not Before: Feb  5 22:47:03 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69851de7-1ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:58:18:4e:a0:2e:ec:db:38:6b:cd:30:8c:
                    1b:b5:52:20:0f:16:ea:5c:11:50:28:e8:ba:56:71:
                    5d:c2:d3:e4:74:24:af:c6:e8:d2:76:1c:de:a0:8c:
                    f3:2d:bd:a7:7e:2a:0c:e2:3f:bc:68:b6:db:c4:29:
                    bc:be:f4:1f:a0:38:29:c1:98:b6:3e:6c:3c:0e:41:
                    12:83:3f:46:49:d0:9f:3c:0e:bd:f7:fb:4f:b8:2f:
                    99:da:38:5e:76:ca:8c:4b:25:2d:1a:e6:c1:37:b7:
                    cf:d8:f7:e0:62:f1:4c:19:33:de:68:46:eb:12:08:
                    7c:6c:68:ee:f7:79:09:fc:31:7e:35:56:0d:ea:fe:
                    d1:df:d4:dc:93:a6:56:14:23:23:c3:f0:80:04:5a:
                    12:c7:ce:ab:4e:05:52:44:ce:12:b7:94:c0:1a:18:
                    ca:2a:2e:e0:7d:8b:69:be:15:ce:78:eb:e0:82:54:
                    ce:ce:f0:db:20:ce:67:5b:16:92:e5:ab:48:52:bc:
                    2b:ac:d3:c1:3d:6f:e4:1c:5a:53:c8:ba:6c:12:7a:
                    0e:2b:55:91:14:a8:fa:ef:e1:fa:44:43:4b:be:d9:
                    2a:74:15:99:bb:78:80:3d:3a:d6:3c:b0:fc:a4:c4:
                    68:a4:35:49:ce:08:5b:ba:d9:93:84:29:e7:11:14:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:FE:56:A0:5C:3B:E0:D8:D0:0A:BA:EA:68:C2:A9:BB:3E:A6:0A
            X509v3 Authority Key Identifier:
                keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.236.0/23
                IPv6:
                  2401:e880::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:02:69:4b:38:2f:18:f7:6b:74:c9:11:a3:97:b2:57:6f:c3:
         a7:40:bf:7d:52:52:be:ed:ac:41:0c:09:88:90:e5:49:7b:6e:
         31:b1:dd:7b:e1:c5:75:81:10:43:6f:69:9a:06:ec:9b:49:fd:
         98:67:79:3d:ae:2b:b1:bf:aa:8b:16:bd:0f:0e:d1:df:60:aa:
         e9:44:cc:8a:d3:1e:6f:61:be:7a:fd:ff:6f:46:ac:50:db:08:
         41:66:60:58:8b:59:c3:bb:3b:d5:73:e3:01:ed:da:ea:c8:d8:
         ff:0e:dd:cc:53:e5:6d:18:80:e8:11:34:1b:f2:30:92:fa:43:
         7b:52:cd:33:ac:9d:18:5b:07:ca:7f:85:c1:9a:7f:41:fa:90:
         a9:d6:f6:21:9c:d2:df:58:18:89:5a:03:0d:0b:b2:cb:a1:3a:
         f7:c6:64:7e:ae:96:99:d7:40:66:a7:0c:1c:6e:28:c7:43:b2:
         79:dd:1b:16:ad:0f:16:ec:97:16:43:18:d4:b6:40:86:25:73:
         c4:a7:6a:57:9b:63:4d:06:04:14:26:87:32:93:78:d4:ef:d8:
         42:f1:a8:6b:17:8e:67:4a:5d:de:c0:b8:1b:b0:6c:85:0d:53:
         a1:58:9c:86:27:84:d9:0c:5d:bd:4f:1a:ef:0d:6e:7c:68:3d:
         30:ec:63:80
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICGMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw
MTgwMkE5NUMwHhcNMjYwMjA1MjI0NzAzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg1MWRlNy0xYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgBYGE6gLuzbOGvNMIwbtVIgDxbqXBFQKOi6VnFdwtPkdCSvxujSdhzeoIzz
Lb2nfioM4j+8aLbbxCm8vvQfoDgpwZi2Pmw8DkESgz9GSdCfPA699/tPuC+Z2jhe
dsqMSyUtGubBN7fP2PfgYvFMGTPeaEbrEgh8bGju93kJ/DF+NVYN6v7R39Tck6ZW
FCMjw/CABFoSx86rTgVSRM4St5TAGhjKKi7gfYtpvhXOeOvgglTOzvDbIM5nWxaS
5atIUrwrrNPBPW/kHFpTyLpsEnoOK1WRFKj67+H6RENLvtkqdBWZu3iAPTrWPLD8
pMRopDVJzghbutmThCnnERS2QwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHJ+/lag
XDvg2NAKuupowqm7PqYKMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw
QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFFRDQvQkVDOUFDODJCMEJEMTFFNzkyQTJCRjMwQzRGOUFFMDIvMkUxRTQwNUU3
MTJEMTFFREE4QzY0QzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAG0XuwwDQQCAAIwBwMFACQB6IAwDQYJKoZIhvcNAQELBQAD
ggEBAHkCaUs4Lxj3a3TJEaOXsldvw6dAv31SUr7trEEMCYiQ5Ul7bjGx3XvhxXWB
EENvaZoG7JtJ/ZhneT2uK7G/qosWvQ8O0d9gqulEzIrTHm9hvnr9/29GrFDbCEFm
YFiLWcO7O9Vz4wHt2urI2P8O3cxT5W0YgOgRNBvyMJL6Q3tSzTOsnRhbB8p/hcGa
f0H6kKnW9iGc0t9YGIlaAw0LssuhOvfGZH6ulpnXQGanDBxuKMdDsnndGxatDxbs
lxZDGNS2QIYlc8SnalebY00GBBQmhzKTeNTv2ELxqGsXjmdKXd7AuBuwbIUNU6FY
nIYnhNkMXb1PGu8NbnxoPTDsY4A=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:42 2026 by rpki-client