Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/82F60B4A021E11F1B34B19A3496F56BC.roa
File:                     82F60B4A021E11F1B34B19A3496F56BC.roa (raw, json)
Hash identifier:          6zmCcwHOT3UsvWF1idpS6QbdoPajL8WQxxjVr20R/WQ=
Subject key identifier:   E7:52:BE:59:38:A9:22:0C:7C:4C:8D:B0:B0:FC:0D:93:67:83:D5:71
Certificate issuer:       /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
Certificate serial:       02
Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/82F60B4A021E11F1B34B19A3496F56BC.roa
Signing time:             Wed 04 Feb 2026 23:09:09 +0000
ROA not before:           Wed 04 Feb 2026 23:09:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142265
IP address blocks:        151.158.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14
        Validity
            Not Before: Feb  4 23:09:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6983d195-36ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:9b:ca:f2:28:97:6d:7f:b4:29:c4:fc:b8:
                    64:bc:c2:66:e1:bf:ab:82:07:f4:cf:9a:b1:b1:5f:
                    6a:9a:3d:7a:86:8b:46:41:b6:a9:94:8c:09:4f:63:
                    f3:9d:03:b7:40:05:bf:e8:b9:30:01:e4:ec:e9:ee:
                    2c:b7:1f:78:af:81:b6:38:e7:6f:e2:5f:33:eb:12:
                    47:05:9e:5f:36:37:21:00:c5:9d:6b:80:3d:fd:05:
                    6d:f7:a5:cf:2d:89:8d:7b:0b:31:9a:bf:b7:c4:0c:
                    b5:2f:32:41:8c:62:82:9f:57:49:bd:27:dd:5f:14:
                    3e:2a:63:94:33:93:3d:48:24:4f:32:60:b0:ee:3a:
                    1a:ba:4d:3d:29:10:0e:9a:e1:ef:c2:5f:23:18:15:
                    19:17:17:ec:f8:8d:e4:72:68:45:47:8a:b9:5b:3f:
                    98:b3:d5:ff:98:cc:99:17:b3:f3:55:55:5b:fa:64:
                    cb:68:95:5f:5b:71:09:c3:bb:52:b5:0a:89:6c:f4:
                    f7:25:a2:6d:60:bd:51:31:0e:fa:d5:db:14:27:b0:
                    b4:bf:09:22:a7:8c:66:8b:07:6e:8c:c4:b8:d2:95:
                    46:78:9d:d4:a4:b9:99:fb:61:a7:b9:7d:3d:80:05:
                    0d:3c:c9:6e:88:a2:87:b4:9f:b6:93:83:44:85:76:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:52:BE:59:38:A9:22:0C:7C:4C:8D:B0:B0:FC:0D:93:67:83:D5:71
            X509v3 Authority Key Identifier:
                keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/82F60B4A021E11F1B34B19A3496F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:f9:66:c0:aa:61:1d:fb:8b:9c:6f:ea:3c:35:9a:36:a9:
         aa:2b:48:17:cc:81:a4:5f:e4:38:6e:2a:2a:85:cd:3e:f2:8a:
         cf:60:83:a9:c4:b0:76:96:44:cd:7b:34:bd:c3:91:19:9f:45:
         7a:52:8c:1d:a9:b3:f0:c3:dc:84:2f:26:cb:67:e9:6f:48:4b:
         95:6d:84:83:9b:00:a7:50:23:ba:52:00:38:15:fc:59:db:d5:
         ea:60:68:33:bc:20:99:4a:26:59:53:eb:a0:c0:c8:ab:aa:f9:
         1e:3b:aa:d4:f4:e0:bc:d9:5d:b4:99:a5:38:7a:64:bd:14:15:
         f0:67:62:12:83:81:c6:5b:92:23:ac:ee:4b:8c:5d:fd:ba:e2:
         92:71:f8:fe:9e:e8:91:55:5c:d9:eb:68:b3:95:4d:9d:c0:ac:
         14:0d:16:85:86:dd:f0:b6:8f:80:8f:61:d5:b5:57:00:db:03:
         0c:9f:8d:5b:f5:02:e2:95:fa:88:df:f0:4d:16:e8:8b:5e:9d:
         2a:aa:66:10:cb:c4:47:60:ce:69:4b:48:31:22:76:3f:b4:4f:
         07:6f:63:bd:7e:7f:b7:ef:f8:88:17:fe:3a:d6:4d:a2:b2:f2:
         93:84:27:e6:4c:ed:37:41:89:12:d4:3d:7b:7e:13:b3:3e:10:
         4d:3b:25:c8
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE1
RUExNDExMC8GA1UEBRMoRTM3MUEzQjZDMzkxMjYyQjZCQjg1QjZFNjhBQ0MxRkND
MDdBNEUxNDAeFw0yNjAyMDQyMzA5MDlaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODNkMTk1LTM2Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxKpvK8iiXbX+0KcT8uGS8wmbhv6uCB/TPmrGxX2qaPXqGi0ZBtqmUjAlPY/Od
A7dABb/ouTAB5Ozp7iy3H3ivgbY452/iXzPrEkcFnl82NyEAxZ1rgD39BW33pc8t
iY17CzGav7fEDLUvMkGMYoKfV0m9J91fFD4qY5Qzkz1IJE8yYLDuOhq6TT0pEA6a
4e/CXyMYFRkXF+z4jeRyaEVHirlbP5iz1f+YzJkXs/NVVVv6ZMtolV9bcQnDu1K1
Cols9Pclom1gvVExDvrV2xQnsLS/CSKnjGaLB26MxLjSlUZ4ndSkuZn7Yae5fT2A
BQ08yW6Iooe0n7aTg0SFdq+fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU51K+WTip
Igx8TI2wsPwNk2eD1XEwHwYDVR0jBBgwFoAU43GjtsORJitruFtuaKzB/MB6ThQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTE0L0Q3Mjg0RUE0MDIx
RDExRjFBQjU2MjgyRjQ5NkY1NkJDLzQzR2p0c09SSml0cnVGdHVhS3pCX01CNlRo
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvNDNHanRzT1JKaXRydUZ0dWFLekJfTUI2VGhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUExNC9ENzI4NEVBNDAyMUQxMUYxQUI1NjI4MkY0OTZGNTZCQy84MkY2MEI0QTAy
MUUxMUYxQjM0QjE5QTM0OTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZeegDANBgkqhkiG9w0BAQsFAAOCAQEAbC75ZsCqYR37i5xv
6jw1mjapqitIF8yBpF/kOG4qKoXNPvKKz2CDqcSwdpZEzXs0vcORGZ9FelKMHamz
8MPchC8my2fpb0hLlW2Eg5sAp1AjulIAOBX8WdvV6mBoM7wgmUomWVProMDIq6r5
Hjuq1PTgvNldtJmlOHpkvRQV8GdiEoOBxluSI6zuS4xd/briknH4/p7okVVc2eto
s5VNncCsFA0WhYbd8LaPgI9h1bVXANsDDJ+NW/UC4pX6iN/wTRboi16dKqpmEMvE
R2DOaUtIMSJ2P7RPB29jvX5/t+/4iBf+OtZNorLyk4Qn5kztN0GJEtQ9e34Tsz4Q
TTslyA==
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:02 2026 by rpki-client