Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/4167035C0B3B11F1969C9C36063D8C67.roa
File:                     4167035C0B3B11F1969C9C36063D8C67.roa (raw, json)
Hash identifier:          OaXhmw4BL7SNe1m05+ORQh6Q+svQ3GqWXffHXPX9Lss=
Subject key identifier:   7A:17:CE:E6:26:78:C1:4A:69:A6:F4:D9:D7:64:1A:10:F9:17:12:2D
Certificate issuer:       /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial:       09
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/4167035C0B3B11F1969C9C36063D8C67.roa
Signing time:             Mon 16 Feb 2026 13:27:35 +0000
ROA not before:           Mon 16 Feb 2026 13:27:35 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149783
IP address blocks:        151.158.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
                          rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
        Validity
            Not Before: Feb 16 13:27:35 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69931b47-3bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:7d:ce:ed:a8:57:f7:03:14:39:1b:26:ad:
                    da:80:c6:23:d8:b4:15:fa:1c:c6:44:64:db:90:43:
                    bd:be:97:da:77:ae:69:96:17:f8:a5:54:44:de:bf:
                    c3:e7:c6:4b:00:27:dd:76:13:8d:76:26:9b:b5:4f:
                    6b:45:a7:bf:51:35:49:0a:ad:78:f0:4f:87:9b:cb:
                    eb:89:c0:3d:fb:5b:3e:e0:28:87:c3:c6:01:9f:28:
                    71:b6:68:88:9c:00:8b:94:ec:4d:c8:61:f3:92:eb:
                    58:90:e8:9f:ad:3b:43:29:7d:5c:24:fd:f7:72:cc:
                    d7:fc:c7:e5:00:73:c8:95:46:97:fd:5a:6d:96:5c:
                    d6:f1:a0:cd:18:23:94:ef:32:8a:16:b7:3b:45:3e:
                    90:16:ce:43:67:7c:a1:69:04:1d:8e:9f:e4:55:48:
                    47:24:24:20:c4:c3:03:43:1e:5c:0f:d9:d6:42:b1:
                    8a:ac:65:e8:b1:e0:82:bd:10:85:11:63:71:25:53:
                    66:71:14:84:4a:45:65:e5:04:63:93:82:e2:5e:82:
                    fb:da:20:53:c5:57:ed:02:32:b6:96:90:e0:ff:94:
                    f2:fd:5d:51:91:04:1a:85:15:4b:c5:72:01:fa:da:
                    86:0f:86:95:bf:e0:33:f5:9f:eb:dd:7c:55:b8:0b:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:17:CE:E6:26:78:C1:4A:69:A6:F4:D9:D7:64:1A:10:F9:17:12:2D
            X509v3 Authority Key Identifier:
                keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/4167035C0B3B11F1969C9C36063D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:5c:03:c1:f2:03:4e:43:d3:2e:da:e0:9c:c0:03:00:19:
         52:b5:71:51:c1:9a:52:4b:bb:2c:5b:df:0c:5d:d6:85:22:2a:
         4a:17:f8:f7:c2:86:8c:03:eb:8c:eb:14:43:c9:30:49:1e:7d:
         ee:20:51:9c:ef:45:12:48:d7:c9:17:1a:97:da:2d:05:b9:bf:
         eb:cc:f0:3b:e2:58:9d:0a:d0:56:0e:51:da:b7:ee:f7:0b:e8:
         9e:f2:e4:7d:36:32:e5:3e:87:c7:ad:fc:a7:77:89:15:86:9b:
         bc:8a:60:54:53:52:60:6c:c3:79:22:20:cc:e7:0f:79:98:65:
         4e:85:74:65:71:5c:22:52:b9:ee:0b:23:4c:e4:94:b4:19:e5:
         ed:20:d1:86:9e:e2:60:f6:cb:85:1d:9e:83:5b:ae:57:4c:6d:
         b8:c1:ed:dd:81:a3:e8:97:48:19:4d:02:1f:9e:d9:6b:73:1b:
         95:8c:5b:20:cf:f7:93:79:14:1b:c3:b6:83:03:6f:a9:4f:48:
         a0:39:03:92:ad:66:0c:24:0a:ed:15:59:d3:1f:e1:e3:36:8a:
         ed:5b:64:6e:7d:1c:28:f4:de:b5:e2:16:70:42:82:e1:8a:7a:
         86:5b:66:c8:2f:fd:d5:08:68:a8:12:35:92:b8:b4:f8:3f:88:
         69:34:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:09 2026 by rpki-client