Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/0A72D294006511F1BE07F947566F56BC.roa
File:                     0A72D294006511F1BE07F947566F56BC.roa (raw, json)
Hash identifier:          /nSjDkDwZukK3H60lcra1a4qvj9RZBW3Em5XmUDHDDo=
Subject key identifier:   2E:17:FF:3F:C2:57:AE:34:4D:45:B1:AB:6D:62:F8:4E:67:BE:E3:AB
Certificate issuer:       /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial:       09B5
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/0A72D294006511F1BE07F947566F56BC.roa
Signing time:             Mon 02 Feb 2026 18:28:59 +0000
ROA not before:           Mon 02 Feb 2026 18:28:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151048
IP address blocks:        2400:17a0:6::/48 maxlen: 48
                          2400:17a0:7::/48 maxlen: 48
                          2400:17a0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
                          rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
        Validity
            Not Before: Feb  2 18:28:59 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6980eceb-5891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:af:da:3e:40:3e:b0:9a:99:4d:af:c2:32:
                    89:46:0f:99:08:c7:eb:d5:3c:5f:d3:d1:f2:93:72:
                    b5:db:42:8e:3d:b4:2a:0e:b1:83:42:2c:19:96:5a:
                    a8:8d:9e:09:d6:0a:df:40:dc:d3:d1:79:31:ea:50:
                    db:a7:35:15:58:47:1d:52:d1:08:5f:d8:4b:62:19:
                    f7:c9:00:14:9b:18:4b:c9:2c:06:f7:88:f9:50:a9:
                    db:39:0b:80:52:f2:b4:64:11:11:34:0d:25:9f:c2:
                    ab:d1:17:91:d2:a2:5d:dc:cf:f7:42:65:aa:6c:f8:
                    60:f6:75:67:35:3f:54:82:23:01:9b:19:c8:e7:b2:
                    91:c9:5c:52:5c:16:9a:7c:f2:19:1a:b0:39:db:5a:
                    0c:03:8c:2f:77:0b:25:be:52:ed:b8:7b:8e:43:3c:
                    3a:49:31:4e:aa:5a:05:80:7f:77:66:0c:43:53:f6:
                    70:71:82:7c:09:10:2a:80:cd:20:7f:6b:65:60:c7:
                    96:68:33:53:2d:5e:cd:4f:af:e3:60:59:bd:dc:9c:
                    62:cd:cc:75:17:18:2a:36:00:e8:f3:e6:d6:6a:3f:
                    62:4d:09:3b:44:4f:ae:96:03:64:67:d4:83:ee:06:
                    7e:32:88:46:7f:f7:a1:a6:57:7c:54:88:03:5e:75:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:FF:3F:C2:57:AE:34:4D:45:B1:AB:6D:62:F8:4E:67:BE:E3:AB
            X509v3 Authority Key Identifier:
                keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/0A72D294006511F1BE07F947566F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:17a0:6::-2400:17a0:8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         09:b1:bf:4a:b5:c9:a4:74:22:a7:27:6c:6d:46:2c:af:d3:66:
         2b:a4:46:c7:bd:70:dc:f7:a6:c8:d0:06:c8:d3:49:80:87:87:
         6f:45:68:7b:43:d8:26:ec:9a:1e:7a:5d:3c:f0:08:0c:4d:e8:
         87:1d:2a:8d:30:65:17:d4:99:08:c7:bc:0b:d2:5d:14:6d:53:
         49:9d:36:38:19:8a:70:a0:b7:5b:48:50:85:5a:d1:79:1b:0c:
         78:24:29:54:b8:b9:57:4a:3d:64:c6:b7:04:83:0d:24:a1:f4:
         b0:ae:01:62:84:96:f7:70:40:a4:af:0b:21:7a:ca:91:4d:bf:
         99:4e:8a:17:91:b8:aa:b9:dc:60:14:ed:d2:65:20:8d:d9:50:
         c4:e8:55:91:1b:eb:be:00:ba:73:c0:8e:3f:20:f7:9e:c4:0a:
         91:e0:96:7a:72:6e:48:4d:86:d4:f0:ac:9c:ae:29:2d:4a:27:
         8b:0e:66:63:1c:56:ac:39:cb:ea:c0:6d:c8:a7:89:09:74:37:
         48:9f:b1:be:18:55:07:7e:9c:00:11:3e:e4:9f:6a:db:e9:17:
         78:49:82:66:16:14:34:0e:aa:49:06:e4:2d:71:52:49:3b:d3:
         37:35:0f:b4:8d:1c:fc:1b:ed:ad:2a:72:7c:cb:db:2f:f3:7f:
         5a:57:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:18 2026 by rpki-client