Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/EEF965C0989011EE982B5B23C4F9AE02.roa
File:                     EEF965C0989011EE982B5B23C4F9AE02.roa (raw, json)
Hash identifier:          9Q+HQXXAbRbCindFzL11Sl7xP8MpJ0UkQtCzSJLhKzg=
Subject key identifier:   3E:1E:4B:90:B0:9C:44:7E:A9:02:5F:9E:F6:E8:8C:8F:F7:70:4B:FA
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       019E
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/EEF965C0989011EE982B5B23C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 03:22:41 +0000
ROA not before:           Tue 27 Jan 2026 03:22:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     38136
IP address blocks:        210.87.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Jan 27 03:22:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69782f81-7c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:6b:54:6d:69:dd:34:a3:a1:0e:ac:3c:70:
                    5b:23:ed:02:13:99:a8:45:41:e6:af:be:eb:71:43:
                    e9:f4:16:3f:2f:20:4e:77:ff:ef:bd:f0:f2:aa:0c:
                    52:d3:61:33:db:2b:e0:50:90:00:8c:04:95:9d:9a:
                    02:77:a2:55:e1:da:51:87:cb:39:f3:58:28:d9:3c:
                    0b:b6:98:a6:56:26:36:61:c4:6c:b4:24:d1:44:9a:
                    03:7e:1d:85:b3:7d:15:28:72:9a:b3:aa:1f:71:f4:
                    30:a1:a3:e5:c7:83:ae:58:02:d2:b2:7b:87:17:99:
                    05:e2:c9:70:72:97:26:c1:86:0c:84:a1:5c:a9:ef:
                    f0:98:1b:65:cb:0e:18:5f:b0:4a:84:53:50:6f:7a:
                    d4:43:56:c8:aa:95:d0:e8:1c:39:b2:2c:b9:5a:37:
                    50:3d:ea:39:98:8b:7e:44:9b:19:51:1f:32:6a:22:
                    c0:6d:9f:8e:cb:33:17:67:c9:22:63:31:a2:72:51:
                    a8:de:cc:f5:b3:29:a8:90:51:8a:f9:b8:86:65:b4:
                    cb:ef:a3:4a:1d:55:c8:7f:fe:94:9f:75:d4:9e:1b:
                    f6:bc:2e:e3:05:3b:a0:f2:5b:12:f0:28:6f:70:58:
                    5b:76:e2:d3:d7:25:12:95:ca:19:4d:8d:31:e3:26:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:4B:90:B0:9C:44:7E:A9:02:5F:9E:F6:E8:8C:8F:F7:70:4B:FA
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/EEF965C0989011EE982B5B23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:ef:09:73:bc:87:56:c7:9e:0a:0e:b1:2e:17:92:24:c2:
         a2:e2:88:49:a5:88:17:fc:46:4a:70:0a:ef:80:23:47:4d:08:
         74:08:6c:58:10:fe:a9:80:6b:7a:61:f4:02:67:f2:03:90:cf:
         0c:90:ce:cb:8b:28:47:ea:61:99:9a:39:68:f4:3d:25:2a:ab:
         9e:98:c6:9c:be:b3:69:4a:38:85:19:43:90:b0:2c:98:65:30:
         35:28:81:1f:4d:1a:e2:ae:f8:3b:88:69:99:ed:02:c9:ac:a3:
         7f:e6:6a:a1:38:d1:84:0b:b5:24:98:08:71:e6:31:56:55:52:
         ab:32:2d:a1:c8:64:f6:c1:98:58:99:ea:96:53:6e:eb:8d:c4:
         bc:bc:21:4d:1b:2a:f1:ee:f9:65:af:13:87:9c:d0:ba:78:e8:
         3d:f2:53:c0:0f:db:7b:7c:70:24:09:ee:86:e4:d5:54:1c:01:
         a5:29:01:95:5c:4f:26:b2:99:6c:47:9d:9e:83:1a:b9:fd:3f:
         66:4c:f3:11:78:7f:89:8c:d1:84:dd:be:09:86:7a:4a:82:c1:
         fb:c8:4a:53:67:0c:42:c1:93:a7:04:02:15:85:f2:93:54:72:
         57:22:b2:6b:ff:ab:7e:5a:8d:ac:e0:4f:48:b6:e0:6c:f2:56:
         fc:96:a0:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz
MjVDNUE2MEIwHhcNMjYwMTI3MDMyMjQxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTc4MmY4MS03YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJdrVG1p3TSjoQ6sPHBbI+0CE5moRUHmr77rcUPp9BY/LyBOd//vvfDyqgxS
02Ez2yvgUJAAjASVnZoCd6JV4dpRh8s581go2TwLtpimViY2YcRstCTRRJoDfh2F
s30VKHKas6ofcfQwoaPlx4OuWALSsnuHF5kF4slwcpcmwYYMhKFcqe/wmBtlyw4Y
X7BKhFNQb3rUQ1bIqpXQ6Bw5siy5WjdQPeo5mIt+RJsZUR8yaiLAbZ+OyzMXZ8ki
YzGiclGo3sz1symokFGK+biGZbTL76NKHVXIf/6Un3XUnhv2vC7jBTug8lsS8Chv
cFhbduLT1yUSlcoZTY0x4yZ8wQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD4eS5Cw
nER+qQJfnvbojI/3cEv6MB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz
NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDQyNjEvRDA2NUJDNEM5MzQyMTFFRUE4QzE1NDc4QzRGOUFFMDIvRUVGOTY1QzA5
ODkwMTFFRTk4MkI1QjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHSV24wDQYJKoZIhvcNAQELBQADggEBAJ2d7wlzvIdWx54K
DrEuF5IkwqLiiEmliBf8RkpwCu+AI0dNCHQIbFgQ/qmAa3ph9AJn8gOQzwyQzsuL
KEfqYZmaOWj0PSUqq56Yxpy+s2lKOIUZQ5CwLJhlMDUogR9NGuKu+DuIaZntAsms
o3/maqE40YQLtSSYCHHmMVZVUqsyLaHIZPbBmFiZ6pZTbuuNxLy8IU0bKvHu+WWv
E4ec0Lp46D3yU8AP23t8cCQJ7obk1VQcAaUpAZVcTyaymWxHnZ6DGrn9P2ZM8xF4
f4mM0YTdvgmGekqCwfvISlNnDELBk6cEAhWF8pNUclcismv/q35ajazgT0i24Gzy
VvyWoDM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:19:09 2026 by rpki-client