Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/82755B58021E11F1B34B19A3496F56BC.roa
File:                     82755B58021E11F1B34B19A3496F56BC.roa (raw, json)
Hash identifier:          +3bQoW7+TX3mvXYXyNn9ZTb3WcSJl5IwC2593Rk7j/8=
Subject key identifier:   97:66:38:ED:1B:7D:4B:57:1D:37:AB:F8:2E:0C:E1:CE:97:33:84:64
Certificate issuer:       /CN=A915EA14/serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
Certificate serial:       02
Authority key identifier: BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/82755B58021E11F1B34B19A3496F56BC.roa
Signing time:             Wed 04 Feb 2026 23:09:09 +0000
ROA not before:           Wed 04 Feb 2026 23:09:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142265
IP address blocks:        2402:4c20::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
        Validity
            Not Before: Feb  4 23:09:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6983d194-a545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:c2:65:8c:c6:46:6d:bd:75:1f:89:1d:f9:
                    72:39:69:ce:89:1c:07:5d:6c:b3:8a:bc:b4:6f:07:
                    65:32:46:2e:8f:ed:ae:eb:33:bc:50:40:a2:d6:32:
                    df:35:f3:41:26:01:cd:89:ac:cb:07:28:b6:29:eb:
                    c8:74:24:c6:50:ea:4d:25:42:c0:a4:78:c4:8b:94:
                    32:5e:ed:1e:6c:b3:cd:4e:d7:85:64:88:c3:8f:80:
                    32:5c:a7:25:3d:4a:9f:c7:76:76:1d:33:33:7e:c6:
                    02:b5:13:ca:8c:72:bd:18:98:c0:ab:21:80:8e:ae:
                    dd:98:b7:46:e7:c0:a2:57:b0:d9:b5:11:42:1f:3a:
                    76:64:5a:ef:95:90:ce:01:19:d6:55:aa:b5:f1:40:
                    ed:cd:1d:8b:f1:d0:cf:48:56:b4:9a:57:a5:c7:2c:
                    6c:47:4b:33:02:f0:c2:d3:e7:1b:7f:cd:3c:8c:b9:
                    5e:b1:e3:5c:0a:83:fe:c5:88:f8:a9:40:3d:dd:af:
                    9b:38:85:c8:88:48:e3:19:d7:72:d8:59:5b:9f:a7:
                    82:6a:b4:30:f9:15:c0:0f:17:6b:7b:9b:13:f6:29:
                    63:48:0e:09:9b:da:89:f1:0c:78:80:0b:8d:2b:e3:
                    ef:3b:eb:e3:18:2d:34:a2:68:98:a8:32:3f:4d:01:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:66:38:ED:1B:7D:4B:57:1D:37:AB:F8:2E:0C:E1:CE:97:33:84:64
            X509v3 Authority Key Identifier:
                keyid:BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/82755B58021E11F1B34B19A3496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:24:21:da:ef:a2:ab:08:46:98:02:b6:70:1f:0a:1d:7f:35:
         aa:ae:45:09:ea:91:0a:cf:7d:10:9e:c2:fc:29:e9:59:12:29:
         ca:37:d7:6f:f3:37:55:c2:ae:df:4d:7d:8a:b5:46:96:f0:aa:
         00:8e:4a:77:46:6c:ef:f8:cf:cd:d8:36:ad:03:f8:9c:85:4f:
         ce:52:fd:f5:d2:26:fe:17:cb:26:e9:55:fd:97:ca:c3:43:2b:
         70:be:0f:7e:3d:31:bd:52:bd:70:0d:e4:af:ff:d5:2b:ad:03:
         df:7d:23:06:1a:fd:96:58:4e:4a:6c:66:fa:4b:9e:2c:75:ae:
         0b:d4:e7:0c:28:76:9a:6a:5f:f2:46:a1:12:7f:f1:cc:f7:aa:
         66:06:29:a0:cd:38:e5:8a:74:13:e0:c7:14:5d:15:4e:67:ac:
         bc:df:8e:86:48:67:34:58:e3:16:60:93:58:e4:d7:d6:ee:ec:
         af:33:c3:5b:e8:d7:40:7b:10:1c:8a:8f:a3:40:90:5a:f0:cc:
         0c:15:74:7a:15:f2:ec:71:ce:48:78:2c:ac:52:aa:24:e3:24:
         bf:08:ae:22:da:6b:f5:dd:e8:eb:68:f3:2a:36:a2:9f:41:cd:
         e3:77:dd:01:b3:da:6a:59:f6:00:f8:3b:1d:40:6f:87:c2:c2:
         c4:b6:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:20 2026 by rpki-client