Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
File:                     0DFFB0D2989111EEB7938523C4F9AE02.roa (raw, json)
Hash identifier:          Af5Dk6PvZbcdMA4DkF0hlb165xcGBe8IuWniIFEXzBQ=
Subject key identifier:   B0:30:3E:8B:A7:62:E8:E9:70:FF:5B:D7:30:25:FF:7C:AE:02:96:38
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       019F
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 03:22:43 +0000
ROA not before:           Tue 27 Jan 2026 03:22:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9664
IP address blocks:        2001:df3:3fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Jan 27 03:22:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69782f82-d8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:2f:77:b4:6a:68:1a:c0:6e:61:96:6f:f3:
                    b7:56:8e:b4:40:99:95:53:f4:24:96:b4:da:b5:bd:
                    5f:c5:e8:b0:ba:34:20:55:59:a2:4d:fd:b8:a3:da:
                    6d:50:2b:6f:0c:d9:3a:08:73:16:ce:31:9b:30:20:
                    ea:34:35:92:1b:13:c5:a2:dd:9b:8b:70:e3:fc:40:
                    6f:ce:3d:84:e0:bb:1f:99:ed:01:f0:94:e4:0f:ec:
                    e5:8f:37:14:12:b6:73:25:44:4c:e7:f9:b9:ff:f9:
                    7f:da:c0:89:1b:e0:f0:51:c3:62:c2:ae:29:5a:96:
                    dc:6e:5a:a0:f0:5b:b1:91:bb:94:46:dc:09:43:7a:
                    72:b6:79:8e:d5:fd:5f:85:ec:8e:9d:ce:ed:6d:f6:
                    bf:ed:b9:43:45:51:07:4d:4e:d9:40:2d:40:4d:b3:
                    b9:30:09:7e:99:0e:1e:f0:69:51:27:18:36:45:e2:
                    62:19:69:f3:61:11:a6:7a:94:c2:02:fa:54:17:96:
                    e5:6f:43:64:12:d2:78:d3:49:c6:db:0a:00:46:94:
                    da:88:e6:17:15:17:3a:26:2f:2d:5f:99:04:e2:22:
                    13:fa:64:fa:e9:42:b7:ff:c4:ef:ab:9b:d6:fa:80:
                    e5:3d:44:ab:83:b5:dd:e3:5f:ef:ff:43:5b:e0:fa:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:3E:8B:A7:62:E8:E9:70:FF:5B:D7:30:25:FF:7C:AE:02:96:38
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:3fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:35:62:45:00:21:ed:43:91:0c:9b:05:31:5b:28:89:9a:20:
         99:91:ff:fe:cd:34:a8:e9:e9:fe:bf:c8:bb:88:81:25:27:12:
         4d:cd:9d:45:70:f4:58:e9:9c:23:1c:a8:8c:bc:86:c7:ef:7a:
         d7:27:89:dd:57:b9:51:ea:ea:e0:fd:28:6e:ca:2e:93:b6:d1:
         90:5a:30:15:5f:f9:8f:61:2a:a1:26:e6:68:1c:86:2b:fa:13:
         c7:62:42:9b:8f:1b:a5:7d:17:ea:a0:30:de:fc:31:1c:60:53:
         9d:29:55:ed:2b:23:9b:4c:c5:36:c4:e3:92:40:60:d2:ae:00:
         9f:df:b1:2d:48:65:61:95:34:a5:23:08:44:af:ab:36:1f:74:
         16:7b:b4:63:a7:3a:42:ff:e9:96:86:44:18:b5:05:ca:e3:de:
         2f:a1:a9:fb:33:6e:2b:e8:4e:8c:0a:00:0c:c3:ee:0f:9c:8f:
         4e:40:e3:c2:2a:e7:2d:d7:8e:34:80:d5:ff:b3:94:fe:87:cf:
         e5:09:93:8b:44:6a:1c:ba:65:0c:12:fd:f4:80:3f:14:71:ca:
         66:15:68:4b:5f:72:93:5c:87:23:c3:3b:39:2d:fc:26:4d:a3:
         5d:de:a5:1a:6b:f4:d2:d0:75:ee:01:26:cc:19:e3:f4:31:64:
         98:72:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:17:37 2026 by rpki-client