Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/E310D7E2C58B11EFBA44DE34C4F9AE02.roa
File:                     E310D7E2C58B11EFBA44DE34C4F9AE02.roa (raw, json)
Hash identifier:          pdz5V/JZhY7Gds0wNkXeGw7VMWhzxu7bURYipssNojI=
Subject key identifier:   8A:E3:AE:B1:0F:0F:31:34:EF:30:89:81:4B:69:A2:61:F0:D9:1B:B8
Certificate issuer:       /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
Certificate serial:       CC
Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/E310D7E2C58B11EFBA44DE34C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 05:28:12 +0000
ROA not before:           Tue 27 Jan 2026 05:28:12 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137943
IP address blocks:        2001:df4:d2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl
                          rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45
        Validity
            Not Before: Jan 27 05:28:12 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69784cec-c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:56:7b:c3:ca:84:8d:21:9b:01:2c:65:58:
                    49:dd:28:11:2a:96:c4:c1:c2:d1:63:7d:73:f1:c3:
                    76:ec:1f:ad:f4:50:99:2c:ec:65:84:f7:ad:e7:c9:
                    f6:5a:50:27:cc:58:99:0d:e6:09:9e:db:bb:7a:98:
                    e7:03:1d:e8:00:1c:7a:35:ec:5b:f2:7f:22:67:e1:
                    95:12:73:b0:7d:f8:68:fd:5b:42:58:3f:d2:16:0b:
                    21:11:70:4e:1c:e6:29:37:ef:1d:8d:30:cd:e9:63:
                    8a:1c:ca:7b:9e:32:e1:a5:20:d8:d6:ec:52:96:04:
                    97:93:0e:85:32:38:d8:3c:b2:76:ad:37:95:20:e5:
                    63:6c:1a:75:ff:17:18:09:dc:93:4a:51:26:e3:f4:
                    c4:bd:5a:45:94:32:c6:6d:19:9c:3b:22:26:9b:d9:
                    54:f1:86:9c:88:ea:d8:4b:89:ca:2b:7d:0f:b6:37:
                    2e:ae:eb:34:cd:6f:73:98:02:2a:7b:44:da:36:1d:
                    d8:28:34:3c:1a:cd:59:2e:d1:a7:92:6a:3f:5e:90:
                    eb:6c:cf:93:76:92:bd:48:e4:d2:58:ef:db:cd:94:
                    85:ce:b4:95:83:53:ca:5b:3e:99:66:15:b0:66:da:
                    b3:6d:0c:d5:24:75:81:ec:06:a1:04:e0:3c:84:80:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E3:AE:B1:0F:0F:31:34:EF:30:89:81:4B:69:A2:61:F0:D9:1B:B8
            X509v3 Authority Key Identifier:
                keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/E310D7E2C58B11EFBA44DE34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:be:bc:f1:af:dc:98:93:86:a1:7b:88:33:de:48:40:52:
         26:13:4e:5f:b4:f3:3d:db:d7:dc:88:ef:e7:dc:5b:71:47:a4:
         7d:68:a1:3f:2f:0e:76:3a:44:e2:fa:10:6d:77:3f:73:b4:9f:
         b4:ff:81:b2:c1:40:86:61:f9:31:c7:03:a3:85:b9:29:a5:08:
         b3:d3:8d:f1:22:dd:b4:a8:60:98:79:ca:4d:84:2a:9b:67:83:
         39:58:43:23:11:6f:4a:33:c0:0e:da:ef:b8:d0:5c:6e:cd:10:
         a3:bb:93:3e:e0:2d:78:61:fd:cf:f2:1f:a8:99:4d:0e:a7:a3:
         61:20:70:29:b1:b1:19:40:3d:40:f1:45:1d:e0:dd:fa:49:c9:
         fa:a4:78:a8:4b:c4:b5:5b:bb:18:ae:1b:21:4b:30:69:23:44:
         eb:eb:9f:ec:08:3b:49:d1:f0:d1:97:81:7d:75:92:fc:44:c0:
         86:86:a0:66:6b:4f:77:22:bf:c1:ab:05:82:37:23:5a:ef:8c:
         90:33:37:e7:b5:93:a9:14:02:18:94:d4:ba:67:af:f4:23:b5:
         49:22:18:42:df:0c:f3:fd:1d:26:3b:c3:ac:1f:df:78:a0:7f:
         56:19:ab:d5:4f:fe:86:33:f3:23:aa:78:2b:8b:55:c8:2a:61:
         32:5f:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:28 2026 by rpki-client