Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/85CAF6160B3B11F185A1FC3F063D8C67.roa
File:                     85CAF6160B3B11F185A1FC3F063D8C67.roa (raw, json)
Hash identifier:          6UeRe3NXQj8vd/DC3zgnKYfCOKaF6RY9TckLsbzahAQ=
Subject key identifier:   6B:CC:1E:38:B7:03:1F:A0:C4:09:7F:3E:2C:B1:22:38:15:F5:80:FD
Certificate issuer:       /CN=A915BD82/serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB
Certificate serial:       04
Authority key identifier: 4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/85CAF6160B3B11F185A1FC3F063D8C67.roa
Signing time:             Mon 16 Feb 2026 13:29:30 +0000
ROA not before:           Mon 16 Feb 2026 13:29:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149783
IP address blocks:        2001:df6:b340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl
                          rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BD82, serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB
        Validity
            Not Before: Feb 16 13:29:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69931bba-cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:e7:b1:d1:9e:5a:70:3c:de:a4:2b:70:d5:
                    57:36:2e:6c:f1:bd:5f:32:e3:ca:2d:c5:e2:4e:52:
                    b1:f7:73:21:67:fc:70:cc:4e:c2:4a:5e:e9:70:a7:
                    26:62:e9:c5:e5:8f:fc:8a:0b:3e:50:9d:bd:10:b2:
                    ef:de:97:a6:09:ae:4b:fa:be:55:e3:86:50:18:38:
                    78:f4:b4:e9:26:aa:b1:13:13:4e:53:98:92:ac:6a:
                    90:1b:49:cf:a6:54:be:be:c1:7f:f5:ed:0f:cb:35:
                    cb:b0:73:c8:f8:ca:f1:76:e4:ee:cd:6f:a2:90:8d:
                    a7:49:b5:98:62:1d:de:6b:17:60:d8:ce:8c:70:0a:
                    ca:fa:60:5a:47:7c:f9:2b:95:65:c4:93:b4:27:69:
                    32:67:28:e6:b9:14:53:58:45:58:18:d1:c5:c6:30:
                    7a:83:93:da:b1:98:b7:63:8b:b3:b1:f0:f2:62:b3:
                    bf:34:b0:3c:47:7f:58:1e:46:4c:3f:a0:3f:56:a3:
                    a2:20:3e:d2:49:c0:92:9a:c2:ec:65:49:98:47:71:
                    f0:b0:71:2a:4c:20:d5:95:38:df:84:d9:5d:62:6f:
                    99:37:c6:59:e9:65:9a:87:57:cf:7a:2f:99:7e:24:
                    ac:1a:ff:c9:d2:a4:f5:7e:23:59:9b:ed:a9:e3:10:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CC:1E:38:B7:03:1F:A0:C4:09:7F:3E:2C:B1:22:38:15:F5:80:FD
            X509v3 Authority Key Identifier:
                keyid:4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/85CAF6160B3B11F185A1FC3F063D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:b340::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:e3:21:5f:e1:fc:d1:e3:89:04:69:5a:3e:ce:d3:44:10:3f:
         7a:a4:0c:09:eb:1e:97:99:6e:72:4e:31:d6:a1:33:64:c1:bb:
         ce:4b:41:97:6b:c5:ea:94:ac:c7:9b:7e:f8:68:ea:cf:49:d5:
         db:2b:7d:22:67:fe:8d:2a:6a:a2:ce:4b:79:0b:e9:06:d9:9b:
         d5:51:e6:8b:26:b7:de:e2:4b:8f:7e:dd:5b:0c:93:cc:aa:a9:
         6b:dd:b3:4f:e9:cc:21:96:80:5c:c5:01:a7:e1:42:42:b0:d9:
         38:be:2d:7f:42:66:3e:82:21:a6:d9:3c:c6:5e:2c:4f:2a:3a:
         4a:07:e0:2c:ed:dc:78:a8:21:d2:58:54:d2:4e:4a:f4:e3:dd:
         9c:f9:d9:fc:b2:c6:2b:9f:e9:b5:66:ae:a4:c8:eb:5b:2f:53:
         03:48:ae:08:82:28:83:38:ef:7b:49:e7:76:a5:fe:12:75:75:
         8e:77:ed:89:78:0e:ee:b9:9f:ec:d7:e0:ff:28:ed:ca:ec:bc:
         6e:2d:18:41:04:8c:03:59:03:7f:c3:80:c1:eb:10:8a:03:49:
         bf:d0:a5:9f:df:e1:61:35:5a:b3:4c:7a:a5:26:62:33:24:6e:
         15:16:00:02:5d:f9:34:fc:f6:6f:e5:99:f1:73:fc:e1:43:e0:
         43:1c:f2:67
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE1
QkQ4MjExMC8GA1UEBRMoNEI5QjI0Q0QzM0MxRjQzMjk5MUIxQTk1QzA5RUEyMDhD
QkU1RjdEQjAeFw0yNjAyMTYxMzI5MzBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OTMxYmJhLWNiYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxEeex0Z5acDzepCtw1Vc2LmzxvV8y48otxeJOUrH3cyFn/HDMTsJKXulwpyZi
6cXlj/yKCz5Qnb0Qsu/el6YJrkv6vlXjhlAYOHj0tOkmqrETE05TmJKsapAbSc+m
VL6+wX/17Q/LNcuwc8j4yvF25O7Nb6KQjadJtZhiHd5rF2DYzoxwCsr6YFpHfPkr
lWXEk7QnaTJnKOa5FFNYRVgY0cXGMHqDk9qxmLdji7Ox8PJis780sDxHf1geRkw/
oD9Wo6IgPtJJwJKawuxlSZhHcfCwcSpMINWVON+E2V1ib5k3xlnpZZqHV896L5l+
JKwa/8nSpPV+I1mb7anjEKlNAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUa8weOLcD
H6DECX8+LLEiOBX1gP0wHwYDVR0jBBgwFoAUS5skzTPB9DKZGxqVwJ6iCMvl99sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCRDgyLzZENUNGRTQ4MDlB
MjExRjE4NUJGRDlFQTFCM0Q4QzY3L1M1c2t6VFBCOURLWkd4cVZ3SjZpQ012bDk5
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUzVza3pUUEI5REtaR3hxVndKNmlDTXZsOTlzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkQ4Mi82RDVDRkU0ODA5QTIxMUYxODVCRkQ5RUExQjNEOEM2Ny84NUNBRjYxNjBC
M0IxMUYxODVBMUZDM0YwNjNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfazQDANBgkqhkiG9w0BAQsFAAOCAQEAueMhX+H80eOJ
BGlaPs7TRBA/eqQMCesel5luck4x1qEzZMG7zktBl2vF6pSsx5t++Gjqz0nV2yt9
Imf+jSpqos5LeQvpBtmb1VHmiya33uJLj37dWwyTzKqpa92zT+nMIZaAXMUBp+FC
QrDZOL4tf0JmPoIhptk8xl4sTyo6SgfgLO3ceKgh0lhU0k5K9OPdnPnZ/LLGK5/p
tWaupMjrWy9TA0iuCIIogzjve0nndqX+EnV1jnftiXgO7rmf7Nfg/yjtyuy8bi0Y
QQSMA1kDf8OAwesQigNJv9Cln9/hYTVas0x6pSZiMyRuFRYAAl35NPz2b+WZ8XP8
4UPgQxzyZw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:34 2026 by rpki-client