Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa
File:                     0B2E53E422B711EFB2B15160C4F9AE02.roa (raw, json)
Hash identifier:          hkmX+wbqOfZqwcWQcucilPnIsz8brKxyO96shebnbg8=
Subject key identifier:   CC:1B:0B:66:A3:41:58:D6:12:B1:9A:65:8B:A9:98:A2:EB:7C:6E:C9
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       016C
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa
Signing time:             Mon 09 Feb 2026 04:23:56 +0000
ROA not before:           Mon 09 Feb 2026 04:23:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150142
IP address blocks:        203.26.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: Feb  9 04:23:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6989615c-e7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:12:8f:15:d1:f9:5a:06:b0:8f:86:dd:16:
                    5c:36:e7:b7:75:7b:c4:4d:d1:e8:ef:d8:74:08:d0:
                    bd:08:04:b2:46:82:7d:24:62:67:52:4a:33:d6:6a:
                    a9:d3:0a:38:42:58:35:9a:f9:60:f4:ce:e6:d6:e8:
                    62:a0:d5:8a:f3:d3:b4:a4:a9:e4:b5:0f:37:75:72:
                    c4:c0:ee:1f:98:3b:29:1c:19:f7:3f:83:05:01:fc:
                    e1:63:62:70:d9:f8:fc:51:0e:f5:98:28:da:7d:5a:
                    40:2a:16:d4:cf:36:70:27:54:70:da:d1:53:7d:f5:
                    b4:19:0b:2f:84:39:77:25:36:9a:6a:4b:f2:24:36:
                    e5:5b:12:e4:c3:41:f4:45:e0:a5:c6:b3:61:e3:e8:
                    6b:e8:af:36:d9:4f:50:fc:92:c9:bb:ac:2b:8d:66:
                    45:e1:95:5e:d9:a1:9d:fe:45:42:87:52:1f:87:a1:
                    ca:ca:50:2e:7c:e7:0d:e5:9f:c5:97:eb:e1:d3:e6:
                    ba:b7:74:5f:4f:e4:13:b7:ad:1e:bc:5e:7c:9b:09:
                    52:df:5e:6c:03:a1:02:e7:b2:34:55:13:bf:05:ad:
                    d4:15:05:88:72:a2:7a:8b:3c:dd:86:b3:98:ee:00:
                    db:9b:42:c0:87:dd:73:78:16:7a:1c:5e:bc:25:aa:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:0B:66:A3:41:58:D6:12:B1:9A:65:8B:A9:98:A2:EB:7C:6E:C9
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:c6:fa:7b:5d:42:15:fa:7e:49:a6:a8:21:66:00:d5:2c:
         70:4f:6a:62:27:84:e3:a0:d8:46:30:12:a7:4c:9e:d6:df:a5:
         ea:00:e2:4b:d8:de:e6:f8:81:26:36:ed:5c:2d:8f:53:7b:b0:
         2a:84:34:d5:39:31:3d:12:6a:82:05:ca:fe:25:19:aa:f8:ee:
         4a:6d:c9:93:6e:e3:55:b0:9d:ae:f7:a8:0f:85:d9:0b:6f:0e:
         f3:cc:35:5f:d9:2a:cd:88:98:6d:39:55:b8:93:84:eb:7f:97:
         21:39:13:dd:88:c3:81:05:e7:98:23:f3:59:9b:1f:67:03:dd:
         cc:57:d9:ea:ad:41:0b:4d:eb:e9:1f:36:89:4c:ec:5b:4d:5c:
         a6:31:5c:41:8a:df:ef:21:f4:6d:20:e0:96:96:f6:4b:75:4a:
         1f:23:2b:3d:46:3f:b7:4f:10:42:cd:8b:c0:ae:c6:59:c6:39:
         16:e5:b7:ca:f8:66:29:7d:05:69:85:9a:80:62:2a:59:f8:26:
         a7:98:8e:cc:bb:27:7a:56:f5:7f:5f:68:2a:f8:2e:bc:d5:87:
         96:04:da:17:e5:25:28:0c:94:3c:b5:8d:ec:61:7b:d9:92:bf:
         0f:74:5c:ea:c8:cf:bc:3b:02:a8:e9:f2:8a:d4:05:d4:47:3f:
         20:7e:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:43:41 2026 by rpki-client