Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/FC4E4156FB3411F0841666933D6F56BC.roa
File:                     FC4E4156FB3411F0841666933D6F56BC.roa (raw, json)
Hash identifier:          qDEHsrZmjQD6VKNuGD3XKEhF0ojBgc2Fnm8IYs7ltc8=
Subject key identifier:   77:86:9C:29:4D:CA:13:15:70:E2:11:3F:FF:D8:AB:E6:B9:61:3C:45
Certificate issuer:       /CN=A914E1BD/serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Certificate serial:       03
Authority key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/FC4E4156FB3411F0841666933D6F56BC.roa
Signing time:             Tue 27 Jan 2026 04:02:24 +0000
ROA not before:           Tue 27 Jan 2026 04:02:24 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142232
IP address blocks:        2001:df6:9ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
                          rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
        Validity
            Not Before: Jan 27 04:02:24 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697838d0-fa89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:2d:6b:1b:89:5e:9f:f8:26:fc:1d:77:4d:
                    8e:2d:e0:49:67:c4:e9:8d:8b:39:06:aa:ae:18:ff:
                    2b:06:b9:49:66:5f:62:b8:de:da:a0:14:c7:09:fc:
                    61:5c:a1:46:6a:19:7a:07:aa:2d:16:53:d6:23:11:
                    9e:fe:6c:1f:d2:e4:15:77:76:9e:d1:e7:ff:ec:a1:
                    ba:94:49:d7:61:15:4a:6c:b3:0d:ec:ad:97:ad:c0:
                    b0:98:1f:99:e0:41:7b:5e:57:a6:b6:a3:a1:7c:07:
                    d5:45:ed:d8:5c:3e:39:f7:3d:2d:19:e2:0c:99:ac:
                    01:cd:e5:aa:ea:65:6c:17:11:b7:96:ce:20:32:6b:
                    05:cf:88:41:3f:7b:a5:cb:13:aa:d5:4d:1f:b0:11:
                    b6:84:15:42:bc:d6:46:b0:95:ff:eb:f5:b5:0b:e2:
                    81:d9:5c:ee:14:48:fd:af:7c:68:e7:36:69:9b:f7:
                    59:46:67:75:41:7c:ab:65:fa:77:35:dc:ae:fa:00:
                    84:8a:76:37:fc:83:9b:be:d3:07:33:ac:92:45:14:
                    ee:93:66:28:6a:c2:33:ed:34:aa:ea:16:2a:c2:e1:
                    ec:50:20:25:b7:7c:ca:14:92:fd:d2:6e:63:45:39:
                    d7:3e:d0:9c:b9:0d:40:93:72:23:45:b3:8f:e5:4b:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:86:9C:29:4D:CA:13:15:70:E2:11:3F:FF:D8:AB:E6:B9:61:3C:45
            X509v3 Authority Key Identifier:
                keyid:AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/FC4E4156FB3411F0841666933D6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:9ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:90:0e:31:0a:66:cf:5e:44:80:c8:0e:63:39:26:78:20:71:
         2f:86:7e:84:51:9f:bb:50:4f:c4:89:59:4d:85:e1:82:cd:85:
         d8:c2:30:45:c8:ab:ae:42:69:0a:82:72:c7:28:1d:3e:b9:9f:
         ad:88:75:af:7c:04:32:56:c9:54:49:67:28:b5:f1:6b:58:9c:
         5c:13:e7:39:be:8c:8a:f2:0a:20:3e:ea:f8:97:4a:c8:d5:a5:
         6d:98:47:f1:26:c1:bc:18:9f:61:3f:d9:0a:03:62:6f:04:bb:
         58:b8:0a:45:61:79:d8:fb:a8:5f:20:bd:4e:2d:3a:5e:e2:4f:
         0b:57:ea:b4:7a:6a:24:1c:6d:68:0d:bc:7f:ef:9d:51:46:8a:
         9a:3a:04:e8:0d:bc:b1:21:ef:df:dd:79:aa:c3:79:7d:66:96:
         dc:c5:96:6d:f2:ce:80:26:38:91:73:9f:8c:bd:d2:f5:45:0a:
         40:f5:97:4f:80:31:7a:72:e4:dd:e0:e8:f8:af:76:a8:dd:ee:
         b9:f6:e4:52:de:09:62:e2:d3:6b:63:90:d6:64:13:83:b2:1c:
         25:89:05:be:af:60:0b:46:11:5b:cf:e5:8d:ca:2c:c7:04:21:
         96:3b:df:4a:8c:c8:27:d4:52:d1:a3:02:cb:56:92:68:f5:3e:
         f0:94:70:8e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0
RTFCRDExMC8GA1UEBRMoQUJBMjZDN0I3NTAxNTU5QUM0MTA5QjhGNUFGRjJERjQz
MzcxNTNGQzAeFw0yNjAxMjcwNDAyMjRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NzgzOGQwLWZhODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJ9C1rG4len/gm/B13TY4t4ElnxOmNizkGqq4Y/ysGuUlmX2K43tqgFMcJ/GFc
oUZqGXoHqi0WU9YjEZ7+bB/S5BV3dp7R5//sobqUSddhFUpssw3srZetwLCYH5ng
QXteV6a2o6F8B9VF7dhcPjn3PS0Z4gyZrAHN5arqZWwXEbeWziAyawXPiEE/e6XL
E6rVTR+wEbaEFUK81kawlf/r9bUL4oHZXO4USP2vfGjnNmmb91lGZ3VBfKtl+nc1
3K76AISKdjf8g5u+0wczrJJFFO6TZihqwjPtNKrqFirC4exQICW3fMoUkv3SbmNF
Odc+0Jy5DUCTciNFs4/lSwtbAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUd4acKU3K
ExVw4hE//9ir5rlhPEUwHwYDVR0jBBgwFoAUq6Jse3UBVZrEEJuPWv8t9DNxU/ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMUJELzY0NjhGREEwRkIx
MDExRjA5NDdEQjg1Njc0NkY1NkJDL3E2SnNlM1VCVlpyRUVKdVBXdjh0OUROeFVf
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTZKc2UzVUJWWnJFRUp1UFd2OHQ5RE54VV93LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTFCRC82NDY4RkRBMEZCMTAxMUYwOTQ3REI4NTY3NDZGNTZCQy9GQzRFNDE1NkZC
MzQxMUYwODQxNjY2OTMzRDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfaewDANBgkqhkiG9w0BAQsFAAOCAQEAgpAOMQpmz15E
gMgOYzkmeCBxL4Z+hFGfu1BPxIlZTYXhgs2F2MIwRcirrkJpCoJyxygdPrmfrYh1
r3wEMlbJVElnKLXxa1icXBPnOb6MivIKID7q+JdKyNWlbZhH8SbBvBifYT/ZCgNi
bwS7WLgKRWF52PuoXyC9Ti06XuJPC1fqtHpqJBxtaA28f++dUUaKmjoE6A28sSHv
3915qsN5fWaW3MWWbfLOgCY4kXOfjL3S9UUKQPWXT4AxenLk3eDo+K92qN3uufbk
Ut4JYuLTa2OQ1mQTg7IcJYkFvq9gC0YRW8/ljcosxwQhljvfSozIJ9RS0aMCy1aS
aPU+8JRwjg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:37 2026 by rpki-client