Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
File:                     63A0A458F38811EFB8E2D638C4F9AE02.roa (raw, json)
Hash identifier:          nKn0xkJ+HC9Z1+GBjN0KPBRjonIMWaafPGO1gpjIUac=
Subject key identifier:   9F:A7:67:B8:7A:79:EC:86:42:85:28:BB:F3:5E:9C:D8:F8:31:19:63
Certificate issuer:       /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial:       0121
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
Signing time:             Thu 19 Feb 2026 05:31:17 +0000
ROA not before:           Thu 19 Feb 2026 05:31:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153362
IP address blocks:        160.187.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
                          rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
        Validity
            Not Before: Feb 19 05:31:17 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6996a024-cdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:93:49:7b:bf:d2:38:67:2d:9f:7f:65:42:
                    a8:c2:0d:30:fb:25:16:e7:a5:77:a3:1f:55:e0:f2:
                    3a:22:94:05:c8:39:3e:d8:ab:3c:fa:8e:2e:e6:f3:
                    fd:2c:3e:0a:79:06:08:37:7c:88:7e:e9:26:1a:5f:
                    d5:38:ac:80:40:70:67:dc:d8:47:35:88:03:5e:55:
                    c9:a9:5b:58:17:70:2b:80:42:d1:2b:67:32:4f:9e:
                    9c:57:2c:a9:fe:00:20:62:20:60:b3:09:05:a0:01:
                    7c:f4:c5:ff:18:f7:2c:2e:2b:63:b5:4d:e1:7d:8b:
                    96:26:2e:94:8f:98:bb:00:06:48:ea:74:24:d7:33:
                    4e:5d:87:17:53:5d:bd:97:d2:ac:a7:1e:90:07:de:
                    43:7e:0d:e5:e8:ec:cc:0b:85:6d:0c:ef:13:f6:97:
                    40:7c:f8:59:b6:3b:9e:32:48:07:db:54:42:c9:f9:
                    14:48:69:da:62:18:6d:0f:5e:23:1d:64:6c:b6:41:
                    38:e8:16:fe:06:29:0e:25:64:46:56:2e:0e:bf:a0:
                    85:1f:79:50:d0:63:d2:6a:cc:19:13:59:5d:dd:be:
                    df:b2:3c:61:ef:ca:97:00:76:c8:a3:2c:e4:42:0e:
                    f1:78:c5:40:bc:1f:c2:3e:90:83:6d:8a:79:cc:ba:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A7:67:B8:7A:79:EC:86:42:85:28:BB:F3:5E:9C:D8:F8:31:19:63
            X509v3 Authority Key Identifier:
                keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/63A0A458F38811EFB8E2D638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:60:a1:eb:d2:57:be:fd:46:58:b2:c9:eb:00:c8:d2:f3:f5:
         7e:9e:80:3a:06:e5:cd:69:6b:f0:1c:12:16:50:18:97:23:dd:
         cd:d7:69:ce:02:83:b8:98:b7:ca:ea:a3:85:12:3a:3d:19:59:
         d1:6f:c1:2f:de:8c:1e:3c:51:00:f9:a6:84:89:5b:e7:7b:f2:
         b1:fc:bd:78:5b:c8:01:d9:6c:b8:b2:55:76:02:07:d5:8e:20:
         f7:50:1f:83:5c:0a:b5:20:40:ba:47:76:89:94:95:eb:c3:35:
         ad:a9:13:82:e0:37:4e:d9:a2:f7:6c:e7:88:65:ce:7a:f6:da:
         2e:28:9d:6b:7d:d9:03:58:1c:0e:6a:59:e9:0c:6e:ce:14:97:
         7e:05:fc:f8:bb:54:c9:6f:82:69:a0:55:3c:4e:22:6d:c3:54:
         ad:eb:e5:5a:fe:23:cd:62:ad:26:6e:07:c1:f4:e4:32:52:06:
         10:6b:c6:a9:2e:89:b6:6d:ac:5f:4e:cc:ea:9b:23:8f:30:64:
         ef:60:d6:f0:9f:e8:ca:3a:74:48:74:55:f6:4c:b7:15:f2:e9:
         c2:f2:19:f0:8d:1a:67:a5:ce:88:e8:4e:00:1b:f9:e6:51:6d:
         9b:18:ec:e5:79:70:b8:1e:bd:63:bc:59:d5:21:5a:df:e0:a1:
         02:6b:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:23 2026 by rpki-client