Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/26CA159E0BB711F1A64B03C6263D8C67.roa
File:                     26CA159E0BB711F1A64B03C6263D8C67.roa (raw, json)
Hash identifier:          rpyV5Yh3O64IRW79gXDBF7NMhSiRGtpMd2OWWfs0BDg=
Subject key identifier:   BC:42:F0:6A:14:05:E8:FB:FD:12:9B:70:BE:8A:90:05:30:43:6F:E5
Certificate issuer:       /CN=A9142187/serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
Certificate serial:       2D
Authority key identifier: D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/26CA159E0BB711F1A64B03C6263D8C67.roa
Signing time:             Tue 17 Feb 2026 04:14:28 +0000
ROA not before:           Tue 17 Feb 2026 04:14:28 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142205
IP address blocks:        138.252.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=D0CC098EBB96DF6D1C5C28EE9B55F0A9B829FDA9
        Validity
            Not Before: Feb 17 04:14:28 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6993eb24-b46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:a5:6d:57:0b:85:2e:91:6f:fe:b9:55:5e:
                    f1:08:e1:26:b7:c3:34:22:3e:15:d3:10:02:f6:d2:
                    11:5e:82:74:ea:aa:5b:07:9b:cd:35:b7:a5:66:ae:
                    0c:b6:8c:4f:ac:14:94:07:a2:2a:bb:cf:08:8f:4b:
                    52:e1:7f:80:89:c6:a9:91:62:6d:35:a8:30:53:1d:
                    fe:8a:d5:33:05:fc:c6:48:e7:c9:bd:2a:da:a2:db:
                    66:16:5b:12:51:b8:60:82:35:bc:c7:61:79:5b:c1:
                    56:04:78:5e:c6:f8:fe:b0:f3:e0:f3:d0:82:6a:a8:
                    a4:d8:2c:61:1d:b3:a0:66:c6:35:a3:eb:58:0a:f5:
                    04:35:62:91:54:00:6a:42:5f:18:cb:2c:8b:c0:1d:
                    89:03:f8:1a:d7:83:27:aa:42:39:0f:73:58:fa:3b:
                    6b:09:3f:c7:67:8a:44:91:3a:ce:4a:ad:6c:36:8c:
                    1c:b4:0a:5e:37:0d:bd:22:8b:2e:5b:21:e5:cf:b3:
                    09:86:9d:86:a5:48:a5:c9:20:c6:ec:90:cd:c2:69:
                    e7:8c:9f:ff:71:74:3b:9b:ad:d1:81:43:67:db:56:
                    20:93:1b:83:1a:3f:b4:05:9e:e4:e3:e8:16:7a:fd:
                    0e:b5:4e:dd:00:aa:25:a1:c5:cc:32:2a:2b:86:19:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:42:F0:6A:14:05:E8:FB:FD:12:9B:70:BE:8A:90:05:30:43:6F:E5
            X509v3 Authority Key Identifier:
                keyid:D0:CC:09:8E:BB:96:DF:6D:1C:5C:28:EE:9B:55:F0:A9:B8:29:FD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/0MwJjruW320cXCjum1Xwqbgp_ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0MwJjruW320cXCjum1Xwqbgp_ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/303E772CCA5911F08399846BC4F9AE02/26CA159E0BB711F1A64B03C6263D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:aa:91:ed:df:31:06:4d:1d:eb:97:5c:c5:5c:0f:bc:9b:
         17:c0:75:9a:12:b1:f8:16:59:d1:d4:8a:0f:46:0b:53:eb:48:
         e2:ab:6a:f1:93:bb:67:27:bb:47:e7:14:d8:c7:61:aa:59:9e:
         53:0a:fc:a1:e6:f3:18:98:ff:98:fc:5f:6c:e5:b9:25:63:22:
         94:d8:3a:7d:83:2c:5b:a9:ec:75:17:70:e6:0f:4e:6c:3a:0b:
         39:7f:b0:df:21:76:90:b6:5c:66:07:c6:c3:6a:20:95:f0:e6:
         06:7f:75:23:0b:08:81:19:81:d2:63:80:0b:fd:b5:b9:b6:1c:
         99:10:82:1d:1b:eb:d0:7b:ad:38:d8:bc:df:ed:97:60:52:11:
         1c:f3:1a:4b:13:5c:4c:fe:f1:73:44:f7:fb:d6:67:7f:38:4e:
         6c:c8:1a:c2:c2:51:d6:c5:8f:dd:3f:e2:88:39:28:80:1c:48:
         8f:b8:92:d5:00:0a:d7:f1:fb:b7:37:64:6a:bf:53:15:ad:68:
         2d:f2:e8:ec:24:87:a2:f9:7a:da:95:85:63:9a:d4:b9:2d:f9:
         0b:d6:41:f4:f1:ad:3c:03:c3:bc:7d:44:4a:0e:d8:a5:38:4e:
         02:7a:44:d6:80:0d:6c:7f:8f:5b:ce:0c:ff:77:8e:e7:e8:b0:
         68:e3:56:a2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjE4NzExMC8GA1UEBRMoRDBDQzA5OEVCQjk2REY2RDFDNUMyOEVFOUI1NUYwQTlC
ODI5RkRBOTAeFw0yNjAyMTcwNDE0MjhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OTNlYjI0LWI0NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCn1aVtVwuFLpFv/rlVXvEI4Sa3wzQiPhXTEAL20hFegnTqqlsHm801t6Vmrgy2
jE+sFJQHoiq7zwiPS1Lhf4CJxqmRYm01qDBTHf6K1TMF/MZI58m9Ktqi22YWWxJR
uGCCNbzHYXlbwVYEeF7G+P6w8+Dz0IJqqKTYLGEds6BmxjWj61gK9QQ1YpFUAGpC
XxjLLIvAHYkD+BrXgyeqQjkPc1j6O2sJP8dnikSROs5KrWw2jBy0Cl43Db0iiy5b
IeXPswmGnYalSKXJIMbskM3CaeeMn/9xdDubrdGBQ2fbViCTG4MaP7QFnuTj6BZ6
/Q61Tt0AqiWhxcwyKiuGGYgtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvELwahQF
6Pv9EptwvoqQBTBDb+UwHwYDVR0jBBgwFoAU0MwJjruW320cXCjum1Xwqbgp/akw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzMwM0U3NzJDQ0E1
OTExRjA4Mzk5ODQ2QkM0RjlBRTAyLzBNd0pqcnVXMzIwY1hDanVtMVh3cWJncF9h
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvME13SmpydVczMjBjWENqdW0xWHdxYmdwX2FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjE4Ny8zMDNFNzcyQ0NBNTkxMUYwODM5OTg0NkJDNEY5QUUwMi8yNkNBMTU5RTBC
QjcxMUYxQTY0QjAzQzYyNjNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYr8fjANBgkqhkiG9w0BAQsFAAOCAQEAMtKqke3fMQZNHeuX
XMVcD7ybF8B1mhKx+BZZ0dSKD0YLU+tI4qtq8ZO7Zye7R+cU2MdhqlmeUwr8oebz
GJj/mPxfbOW5JWMilNg6fYMsW6nsdRdw5g9ObDoLOX+w3yF2kLZcZgfGw2oglfDm
Bn91IwsIgRmB0mOAC/21ubYcmRCCHRvr0HutONi83+2XYFIRHPMaSxNcTP7xc0T3
+9ZnfzhObMgawsJR1sWP3T/iiDkogBxIj7iS1QAK1/H7tzdkar9TFa1oLfLo7CSH
ovl62pWFY5rUuS35C9ZB9PGtPAPDvH1ESg7YpThOAnpE1oANbH+PW84M/3eO5+iw
aONWog==
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:48 2026 by rpki-client