Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/87A33C66B79D11EF9A384C65C4F9AE02.roa
File:                     87A33C66B79D11EF9A384C65C4F9AE02.roa (raw, json)
Hash identifier:          ET8EBUn5PkI12pY2bb8r5iG038fp+9VUkGDWUvRBLWI=
Subject key identifier:   A7:7A:6E:98:06:2C:A4:CF:E0:63:8C:1E:76:AF:B0:5F:62:A6:A6:4A
Certificate issuer:       /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial:       E1
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/87A33C66B79D11EF9A384C65C4F9AE02.roa
Signing time:             Fri 13 Feb 2026 05:24:46 +0000
ROA not before:           Fri 13 Feb 2026 05:24:46 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        157.15.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 04:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
        Validity
            Not Before: Feb 13 05:24:46 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698eb59e-5e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:37:bc:62:02:a6:f3:9c:de:7f:6d:04:06:
                    3e:0d:24:7a:21:97:3e:e7:dc:d5:f8:79:d8:2c:84:
                    09:fc:14:c5:15:4a:d9:d3:74:aa:74:1e:b7:c9:97:
                    45:fe:6e:b2:b3:8a:bf:9d:a0:fe:18:00:23:4b:74:
                    ea:33:b2:f1:1d:0f:89:58:c8:ae:3c:d6:c6:e0:ee:
                    38:83:a2:fb:a6:86:ab:62:b7:1c:4f:e8:08:1d:92:
                    0b:67:6f:79:51:42:35:97:2a:19:29:1e:1d:fa:99:
                    91:93:b4:54:0f:84:26:b8:8d:c3:f2:39:6f:a6:74:
                    dd:a8:36:76:d1:0a:7c:7e:ac:d9:5d:40:4b:be:6e:
                    bf:44:fb:50:84:79:3f:84:8a:86:a6:91:c1:05:4a:
                    b7:97:10:81:cc:29:6d:a6:47:7f:81:77:06:4b:7f:
                    b9:b1:b9:c2:76:51:0e:98:1e:b1:41:e8:07:ea:5c:
                    3e:0e:e5:a9:c3:2d:30:0c:ac:71:b6:c9:2a:bb:54:
                    40:92:06:39:a5:28:64:4c:82:ce:9a:b3:63:3d:80:
                    f0:25:37:5f:76:3c:2f:69:98:06:4d:4a:4e:00:f8:
                    8d:c3:e3:32:49:d1:19:79:46:00:2b:3c:e9:3d:ea:
                    2c:3a:af:01:8f:82:b5:1d:d2:01:60:66:66:b2:d3:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7A:6E:98:06:2C:A4:CF:E0:63:8C:1E:76:AF:B0:5F:62:A6:A6:4A
            X509v3 Authority Key Identifier:
                keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/87A33C66B79D11EF9A384C65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:c0:af:a8:31:36:97:5e:99:af:5b:7b:a9:72:4f:30:45:4b:
         01:49:9c:64:cb:0d:26:dd:96:b9:e5:d9:7e:05:ff:5b:5e:71:
         28:d3:0a:6a:3a:61:66:83:c0:f6:e2:64:f5:b1:4e:cc:58:50:
         1f:79:29:53:27:40:1c:6a:10:9d:04:1a:fb:dd:83:7a:aa:1f:
         b4:06:61:85:5d:a9:2b:b7:96:19:4b:05:fd:72:89:ae:f7:26:
         fd:21:6b:9a:16:8b:0e:1d:b7:64:57:5b:d6:3f:03:89:c2:06:
         b8:ee:d1:ad:05:93:56:3b:74:40:22:a4:3d:16:e1:05:a6:85:
         68:d6:63:8b:64:be:4d:36:6d:a7:b8:12:40:9c:e8:11:e3:3a:
         85:50:a3:d9:bf:c9:91:8e:d6:1a:e3:48:2e:75:8f:9e:fa:09:
         d1:6f:58:e9:2e:48:0c:c3:9c:fa:eb:1c:64:34:53:b1:b5:af:
         d8:df:32:a9:62:ad:58:34:16:e1:d0:37:57:08:ef:45:82:c3:
         27:26:e9:0f:d7:62:45:51:92:45:83:56:01:62:2e:11:e5:f4:
         4c:e7:a0:83:f4:ea:37:1c:34:6e:48:75:4f:70:0f:aa:7e:bc:
         21:26:f1:88:59:c5:cd:64:d2:27:90:cc:d7:69:dc:58:3b:8b:
         3a:de:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:11:01 2026 by rpki-client