Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
File:                     2F02BC96718D11EE97E3E022C4F9AE02.roa (raw, json)
Hash identifier:          mYYZxIgcK1y/6L2Be9bucBJQ4d5ohpULEChgpLxdOmU=
Subject key identifier:   3A:09:EF:4A:9D:F9:8D:85:98:4D:A4:30:D3:3A:17:DD:62:D1:4F:9A
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       020A
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 02:23:06 +0000
ROA not before:           Tue 03 Feb 2026 02:23:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        157.120.160.0/23 maxlen: 24
                          157.120.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Feb  3 02:23:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69815c0a-ea44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:e9:1c:3b:e2:3e:e2:6c:22:a5:8f:d2:11:
                    95:11:c2:46:ad:68:68:4b:ad:5d:7c:76:26:d2:9f:
                    d1:1f:3a:4c:fe:10:6c:86:2d:26:17:ef:eb:5b:d6:
                    88:8d:8e:46:d8:83:ad:f7:08:7d:b6:91:85:93:80:
                    b2:24:ae:03:5f:c6:fd:d7:d0:4e:0c:0a:73:47:01:
                    f6:51:c9:74:b7:d8:d9:75:a6:d6:4c:f8:39:63:77:
                    3b:67:98:30:85:ac:ce:32:1d:f5:bc:42:ab:bc:e3:
                    3d:ff:25:b4:a0:b6:c1:7a:c8:7e:06:3d:10:95:17:
                    3b:8b:2e:fa:e3:c5:4a:c0:0f:d5:c6:2f:f5:66:4f:
                    fa:54:31:9e:62:57:d8:0f:a3:fe:df:10:53:cd:c1:
                    1e:c4:84:7e:58:97:d0:91:93:42:ee:28:f2:89:d6:
                    98:e6:9a:66:7f:c5:4e:2a:63:b8:93:83:f0:f6:53:
                    1e:b4:eb:69:85:ed:cf:a7:69:66:73:88:5c:84:57:
                    5d:be:5a:82:03:1a:d6:a4:d7:46:a9:55:0d:a1:8d:
                    75:04:03:27:c3:ed:eb:4d:d5:c7:c5:54:d5:83:fb:
                    34:9b:ac:05:11:81:0d:8f:e0:8a:ce:d6:9d:73:d1:
                    72:9f:4f:b3:09:ca:72:53:da:44:a6:2a:e6:ae:56:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:09:EF:4A:9D:F9:8D:85:98:4D:A4:30:D3:3A:17:DD:62:D1:4F:9A
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/2F02BC96718D11EE97E3E022C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.160.0-157.120.162.255

    Signature Algorithm: sha256WithRSAEncryption
         23:44:53:d8:b4:6f:09:c8:77:e3:7b:5e:d9:e8:46:36:7f:f2:
         a0:e9:31:69:ef:3d:e1:3f:08:c4:c1:69:8f:1b:6f:7a:18:b2:
         ec:a6:ca:89:88:43:cf:22:9a:b6:91:a5:d2:1a:88:16:2f:c0:
         cb:a6:77:0f:b8:49:d3:5a:0a:6e:1e:9c:50:62:1c:14:83:c9:
         d1:ba:ee:bd:12:b3:78:ed:56:3f:74:e3:84:e4:e9:44:c1:3a:
         cd:0e:de:a1:83:69:c6:46:fa:41:ca:f5:f7:3e:62:49:bb:80:
         84:86:d4:a6:1c:d7:a5:89:11:19:ee:92:43:8e:02:57:f1:07:
         65:24:21:1b:fb:6c:37:2a:40:1d:98:0f:61:9c:00:57:c9:96:
         0c:c0:6c:b3:e8:31:6a:b1:33:fd:d7:fa:3a:da:6d:7d:9b:6b:
         ed:68:04:76:1f:66:9b:11:f3:8b:c5:8d:8a:04:8c:6f:dc:80:
         9d:13:e4:01:70:2d:de:43:ca:39:a0:f4:c3:7c:b0:45:01:30:
         84:68:95:09:cf:2e:a1:69:fe:14:5a:d1:f3:ad:b1:40:6b:7c:
         fc:fe:83:a6:c1:f2:3b:ee:20:e3:fc:7e:25:a2:98:04:7a:4a:
         3f:35:af:ed:b2:00:3d:7f:04:c2:7f:e7:ec:bd:05:b4:2d:4b:
         c7:bd:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 07:19:45 2026 by rpki-client