Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
File:                     5FCE01D8EDFA11EF8193933AC4F9AE02.roa (raw, json)
Hash identifier:          I5huBOz3rQqcfQPzKykUC04QnBvu/k7BrApglMT5Y8s=
Subject key identifier:   F6:69:84:69:D1:BD:22:34:B1:73:DD:70:32:6F:59:CD:FC:20:73:80
Certificate issuer:       /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
Certificate serial:       BB
Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
Signing time:             Fri 13 Feb 2026 05:25:17 +0000
ROA not before:           Fri 13 Feb 2026 05:25:17 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153587
IP address blocks:        163.61.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl
                          rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
        Validity
            Not Before: Feb 13 05:25:17 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698eb5bd-08ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:32:d6:52:a6:b4:fc:78:a6:20:06:a3:1e:
                    35:9e:17:46:9a:f9:48:ea:45:9d:cd:01:a2:13:e6:
                    0b:d2:6f:9d:bc:d6:03:97:d3:c3:ad:8f:7d:fa:6a:
                    71:99:f2:8c:fd:e7:68:b1:53:78:2c:2e:33:fe:ad:
                    50:18:51:37:96:90:e8:3d:d4:9b:ef:75:dd:df:ef:
                    2a:c7:b4:a3:fe:ee:b5:69:d1:27:63:ea:e4:57:8c:
                    22:a6:cc:1d:74:1a:d2:15:4e:38:be:8e:ec:63:01:
                    96:85:88:e7:06:6a:95:02:e7:a4:b3:72:67:4a:9f:
                    1a:9c:b8:7c:01:05:47:e7:6a:18:f5:81:42:2f:7f:
                    6d:42:1a:fb:dd:aa:8c:d0:d6:ef:cd:0b:f8:84:e9:
                    6e:b9:20:b0:27:4f:14:5a:14:38:2c:a9:d2:cf:2c:
                    32:cf:4e:aa:42:d5:9a:5b:ce:e0:39:ae:31:24:9b:
                    b4:a5:0a:2a:c1:54:d2:e0:ba:df:f3:22:0b:76:60:
                    f6:cd:79:b1:39:c5:ab:fb:c1:99:43:12:44:47:c3:
                    ea:f0:68:9f:0a:8c:a2:24:d4:94:dc:0a:26:4c:6e:
                    ba:d2:99:49:e2:5a:78:d3:23:98:cc:c2:90:b4:df:
                    2c:d2:3f:0a:77:10:32:a7:76:fe:eb:87:75:fb:d6:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:84:69:D1:BD:22:34:B1:73:DD:70:32:6F:59:CD:FC:20:73:80
            X509v3 Authority Key Identifier:
                keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:0f:57:c6:c1:3b:a9:70:bd:e1:ff:7f:b8:73:54:f4:2a:ce:
         92:de:2e:a7:ca:57:fa:5a:54:ba:4c:46:33:d0:98:08:93:e4:
         db:65:65:c4:62:bb:35:75:a5:c4:80:63:42:a8:cf:c7:6c:f4:
         09:d3:46:c1:9a:45:9d:85:5c:af:3a:32:79:31:d8:97:3d:33:
         27:b7:e8:f2:54:ad:70:21:e3:94:ca:e3:f7:db:cf:79:7e:f6:
         a7:13:69:da:5f:77:2f:d4:d6:d8:99:db:cf:40:27:3f:e6:1a:
         84:44:ab:29:cf:1b:31:88:a8:86:35:a0:6d:f1:2f:63:72:9a:
         56:19:66:c4:65:4d:21:5d:e3:0d:6b:e9:51:f8:a6:b7:5b:f4:
         2b:b7:0d:37:75:5f:61:c9:2a:de:8a:89:3d:e3:e3:33:ef:91:
         f5:be:22:6a:72:17:ea:b1:b7:2f:e4:2f:64:6a:ab:24:a6:ea:
         c8:b9:6d:41:07:2e:66:da:9d:62:15:a7:81:e7:3e:23:43:8e:
         ff:38:fc:5f:f2:d4:25:5c:2c:30:4a:2e:52:50:99:7b:cb:ad:
         27:88:5f:62:fc:2d:46:6f:e1:33:29:30:7d:3c:99:c3:86:39:
         c5:2f:6e:61:b6:94:16:81:51:dd:12:b8:c2:22:dc:db:01:ba:
         0f:82:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:11 2026 by rpki-client