Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/275E04E80BB711F1A64B03C6263D8C67.roa
File:                     275E04E80BB711F1A64B03C6263D8C67.roa (raw, json)
Hash identifier:          C+aGnL+q8xcQxFoJO2YhBMigD5Uc6rUq7no+A68zeBI=
Subject key identifier:   65:DB:21:9E:E7:1B:BF:F3:CB:2E:E5:1C:30:27:8C:44:12:BD:AB:6D
Certificate issuer:       /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Certificate serial:       2F
Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/275E04E80BB711F1A64B03C6263D8C67.roa
Signing time:             Tue 17 Feb 2026 04:14:29 +0000
ROA not before:           Tue 17 Feb 2026 04:14:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142205
IP address blocks:        2402:3660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
        Validity
            Not Before: Feb 17 04:14:29 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6993eb25-7c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:0d:a1:ff:95:ae:a4:43:c9:7d:00:a4:23:
                    8e:44:6a:89:19:22:25:e1:4b:f1:de:4d:44:cf:0e:
                    fa:84:ad:c4:92:e9:22:5e:63:ce:f6:03:c8:e9:16:
                    d0:68:57:c4:3e:54:33:b0:4b:73:ce:83:28:23:0b:
                    6d:99:1e:b8:8b:6e:4a:7e:47:1c:b6:8a:b9:ec:2b:
                    8f:b5:87:40:82:4f:41:cc:24:09:53:f4:81:2a:fd:
                    c7:b9:02:a1:ae:98:12:5b:53:88:7a:cf:58:65:0b:
                    60:c0:a4:17:52:f2:04:e2:07:93:c5:21:a3:6a:8f:
                    27:26:37:09:2e:22:7d:2e:22:15:cf:19:34:2d:a2:
                    75:d5:cd:c4:f3:0c:28:32:19:f0:8d:fd:ee:cc:93:
                    f7:ff:d1:3d:b0:2a:19:27:61:ad:70:96:f0:55:92:
                    c7:37:56:54:02:c5:b8:3f:8d:ae:79:9b:a0:18:2b:
                    29:ce:83:bf:2d:45:9b:93:f7:0f:9a:15:db:c6:ee:
                    f4:7b:b8:d1:e5:80:3a:8d:47:7f:ce:2b:ed:b4:1a:
                    5e:cb:7a:e6:eb:16:ce:84:5b:1e:51:a4:b4:68:6a:
                    ce:da:3f:07:89:7f:09:3c:bf:ac:8c:e6:69:02:8b:
                    59:0e:71:9f:f6:00:d9:e6:46:b3:4a:03:3c:85:bf:
                    e0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:21:9E:E7:1B:BF:F3:CB:2E:E5:1C:30:27:8C:44:12:BD:AB:6D
            X509v3 Authority Key Identifier:
                keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/275E04E80BB711F1A64B03C6263D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:e3:d9:d8:8f:4f:67:82:17:5a:e5:a2:46:a6:07:ef:67:
         23:9d:b5:0b:f6:bd:fd:fa:3e:27:e7:5f:d1:2f:46:51:7e:99:
         85:57:c6:ee:be:c3:31:4a:ab:68:2b:d5:e9:17:7b:b5:80:88:
         cc:fe:18:4f:58:02:46:d3:e5:c6:72:e8:27:aa:ca:51:e7:e3:
         74:8f:31:c8:a2:bc:d7:61:48:c6:39:a1:5f:28:f4:50:35:89:
         b2:42:3f:3a:e3:8f:0d:91:6a:53:1d:25:d4:de:95:0e:8f:60:
         42:ed:bf:88:a7:35:a8:d8:cc:8a:62:20:e1:58:64:c2:d6:50:
         07:0e:99:fc:05:a1:c9:a1:06:3e:e8:4f:dc:47:0d:4d:c9:e0:
         98:09:c9:2f:25:62:28:0a:57:62:92:05:07:2a:41:73:1c:4a:
         dc:f5:6f:15:39:a3:41:75:88:77:c4:84:93:0a:46:e5:5c:09:
         d2:06:c6:db:96:27:ad:1d:ec:8c:0c:36:e1:b0:10:eb:be:fa:
         14:e9:f0:b1:29:e9:74:d8:03:88:05:a6:66:70:4f:de:8a:d1:
         86:9e:60:f8:12:7e:b6:98:2a:59:a0:b8:04:96:dc:9c:d4:81:
         65:96:1e:fb:cc:e5:99:89:66:53:37:1d:7a:73:b7:90:1c:38:
         94:b5:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:02 2026 by rpki-client