Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
File:                     DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (raw, json)
Hash identifier:          TrSo/WNo8vRs+k8LhJbJ3jLfLE11BY0adxowcWQuQfs=
Subject key identifier:   62:6F:43:42:2F:EB:23:74:5E:97:EB:6A:E0:75:52:E5:90:72:11:A8
Certificate issuer:       /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial:       D2
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
Signing time:             Sun 11 Jan 2026 05:24:15 +0000
ROA not before:           Sun 11 Jan 2026 05:24:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137410
IP address blocks:        2001:df4:bc40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
        Validity
            Not Before: Jan 11 05:24:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=696333fe-913a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:6f:9b:e4:9f:e2:1a:aa:f9:53:ba:9c:58:
                    e6:61:59:0b:5c:22:5e:bc:1a:2a:2f:bb:18:01:12:
                    28:a3:bb:d7:e0:5d:81:b2:31:e5:d8:7e:8e:39:c6:
                    4d:3c:17:11:19:c0:61:40:99:89:b2:2e:2d:d8:5e:
                    98:8b:3e:71:75:80:da:e1:32:d0:26:7e:3b:00:73:
                    16:f8:c4:9f:ad:4e:79:1c:82:b8:a3:8a:89:1e:75:
                    f4:2a:d3:47:26:89:7f:de:72:2a:71:56:31:3b:3f:
                    fe:ac:b5:53:2b:2e:ba:01:3a:62:65:0a:42:24:44:
                    ef:77:cc:3f:36:3d:e6:18:3b:32:a8:78:d0:9e:1f:
                    96:0e:ab:c2:a5:b5:1d:72:b6:ee:d4:d6:00:cc:01:
                    97:64:94:3d:86:70:ee:f2:1b:1f:90:28:c9:e9:19:
                    ed:fa:63:65:35:ca:4a:68:8f:c3:bf:18:99:96:22:
                    ec:c6:43:90:0a:2f:95:05:ed:da:ce:37:64:09:f7:
                    fa:81:27:d2:68:02:90:07:5e:92:2a:80:1a:43:6c:
                    f1:30:8b:e6:cc:ab:40:f0:e1:f9:1c:86:9d:6e:f8:
                    c0:e0:29:e1:b5:28:5a:d4:ab:0c:c6:6e:85:b1:04:
                    13:75:7f:08:7d:f8:ed:7a:39:1f:36:d8:7b:f1:76:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:43:42:2F:EB:23:74:5E:97:EB:6A:E0:75:52:E5:90:72:11:A8
            X509v3 Authority Key Identifier:
                keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:bc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:67:8f:f6:e9:94:3d:51:23:c3:ca:c5:12:2b:8e:2d:11:ef:
         58:4e:01:71:f2:02:9e:12:e0:f2:af:c1:55:27:46:d6:50:7e:
         fa:df:12:2c:6f:59:fd:43:14:24:aa:4c:c9:e7:7a:dc:b7:b8:
         f9:78:a1:b9:5b:49:71:63:e5:c9:9e:17:5a:da:55:67:90:7f:
         da:3d:8b:c1:29:d3:45:11:6f:3a:ba:25:ac:c8:4c:7c:6a:4f:
         59:7d:b3:04:7c:cc:ce:89:ab:b6:26:1a:2a:00:d6:e2:fc:4a:
         88:0d:86:13:8e:9c:68:d4:07:2d:c9:76:b4:1c:17:3e:91:0f:
         e8:aa:49:dd:86:97:cc:ae:14:ea:d9:1c:0c:38:ca:30:23:56:
         ca:b6:3e:6f:ee:8a:99:ce:28:e5:5c:70:4a:6c:45:05:46:68:
         d2:e9:46:ef:02:c7:a2:8b:87:20:bd:dd:36:14:a6:f0:fc:81:
         2e:83:8c:2a:aa:54:32:03:9a:a4:07:39:9d:7e:14:67:61:bf:
         46:3d:c0:9d:b5:2a:8a:23:92:6e:6e:f8:9d:cc:cb:a0:1a:b2:
         da:75:17:d3:8e:a9:bb:44:73:a4:b1:5d:f1:8a:89:29:c2:89:
         68:79:b7:31:06:60:ce:e2:cb:94:27:d0:8a:c5:b6:4b:9f:cd:
         89:f2:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:38:57 2026 by rpki-client