Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/E868677C0D9D11F18932BDBE2D3D8C67.roa
File:                     E868677C0D9D11F18932BDBE2D3D8C67.roa (raw, json)
Hash identifier:          Jj5HRhiGJyfbbOioT3NIMCAcom0jYl2N5jpPx6Zq8h0=
Subject key identifier:   14:D1:77:ED:9C:FB:B6:88:A5:9E:E5:B7:3B:71:32:5B:13:FF:3A:EB
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       054D
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/E868677C0D9D11F18932BDBE2D3D8C67.roa
Signing time:             Thu 19 Feb 2026 14:18:48 +0000
ROA not before:           Thu 19 Feb 2026 14:18:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        113.20.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 23:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Feb 19 14:18:48 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69971bc8-60f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:76:23:1e:7e:08:cc:e3:9a:ca:d7:af:31:
                    34:3d:8a:c8:0f:82:d2:f1:38:bb:ed:83:89:d1:ce:
                    69:f2:ea:7c:8c:56:bd:04:3f:3f:ff:2e:5c:1c:90:
                    cc:d5:de:c6:7d:47:ac:2c:25:ef:4d:09:d5:54:4a:
                    8d:da:8b:26:ec:d1:61:c3:9c:81:25:2a:79:c1:e1:
                    7e:d4:7c:f5:7d:26:64:07:68:61:5c:4e:fa:18:b3:
                    46:28:78:30:fc:76:0a:d0:db:7a:fa:b9:5e:b8:46:
                    17:05:54:d3:87:75:f8:fa:52:53:00:6f:b0:4a:4d:
                    6e:05:96:ff:4c:ef:12:4e:71:a0:39:6c:7d:94:5d:
                    cb:bd:3f:bd:a4:b2:1b:50:23:fe:10:da:fc:7b:2b:
                    90:49:0d:fb:2c:2b:22:eb:66:40:f5:87:0d:9a:51:
                    e8:b6:ed:8f:6f:8c:29:61:41:61:09:31:b0:be:30:
                    c4:c2:e6:09:35:62:f6:3f:49:c0:f0:91:19:c7:62:
                    f8:9b:d7:22:78:64:21:8a:9f:55:9c:92:c4:d4:9e:
                    71:e6:e4:3f:fd:31:b9:d1:da:05:2d:f8:32:33:1a:
                    f0:24:9e:68:18:38:46:cb:05:ae:98:cb:91:29:cf:
                    13:f9:5e:21:f2:46:44:21:33:11:e1:d3:22:20:d2:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D1:77:ED:9C:FB:B6:88:A5:9E:E5:B7:3B:71:32:5B:13:FF:3A:EB
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/E868677C0D9D11F18932BDBE2D3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:94:9c:c4:58:80:af:47:81:72:07:40:16:03:87:41:59:
         a5:47:8c:c4:62:e6:bd:47:da:b3:91:06:c8:f0:79:6c:a7:2d:
         a8:8f:fe:21:cb:bf:8f:83:b8:9c:4e:69:d8:32:bb:8d:58:90:
         ce:d4:d6:88:7f:ac:16:90:f2:c8:1c:d5:bb:f0:2b:01:99:34:
         2d:d0:36:2a:1a:a2:86:9d:24:f2:05:33:c2:f1:06:a4:65:6e:
         28:c2:2d:5e:1a:83:f0:cf:7a:e2:cd:0d:1a:2a:6b:b9:00:be:
         bd:f1:4f:71:7c:a6:4a:64:8d:35:b9:6c:28:73:60:03:68:e6:
         b5:40:87:ee:96:12:e0:1d:40:25:11:ff:bb:54:66:bc:24:2b:
         0c:98:9f:16:c0:e9:eb:e0:e1:91:07:77:66:0e:c3:3f:f0:c7:
         58:82:92:2d:0f:b2:6a:47:72:ae:08:34:95:0e:6b:54:64:34:
         c4:95:0c:f9:43:18:77:27:2a:8f:97:92:e5:e8:97:54:f9:4a:
         57:aa:7e:8a:ac:7c:d7:b6:4f:ee:c9:26:b4:de:ab:30:98:7a:
         ba:70:ee:b1:b9:ea:00:3c:6d:f3:ad:64:e4:80:48:52:99:81:
         d2:fa:79:74:38:8d:72:0b:35:14:7d:3c:02:bb:0d:bd:80:e4:
         84:62:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:14 2026 by rpki-client