Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/316EEFD4AAE511E68EBE4D52C4F9AE02.roa
File:                     316EEFD4AAE511E68EBE4D52C4F9AE02.roa (raw, json)
Hash identifier:          DvaVvW3XxT4r0FaLbWETxoeF49zTxsZ4YiFbvf4nYvg=
Subject key identifier:   30:25:52:5A:7F:0E:4D:FC:11:4C:E3:75:2F:C5:6B:5E:21:13:FD:E9
Certificate issuer:       /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Certificate serial:       354A
Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/316EEFD4AAE511E68EBE4D52C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 15:10:04 +0000
ROA not before:           Wed 04 Feb 2026 15:10:04 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     132001
IP address blocks:        198.48.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
        Validity
            Not Before: Feb  4 15:10:04 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983614c-676f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:1a:e2:5d:bc:96:2d:b2:af:30:72:4f:59:
                    0e:a9:4a:bf:12:80:4c:04:6a:7a:b9:60:e7:fc:a8:
                    de:53:e5:92:5a:70:40:b2:a3:48:65:f8:59:c0:9f:
                    ef:94:c1:12:87:bd:e5:42:80:58:80:e2:5d:32:f0:
                    a6:9d:b4:b3:2d:11:52:1f:30:94:cc:31:35:5d:1e:
                    46:f2:31:fb:19:75:ce:c9:2b:f2:e0:f4:e4:4d:b4:
                    23:98:fc:2a:35:aa:ec:35:80:7f:fc:5b:1b:c1:5f:
                    1d:38:e6:a9:b4:44:fe:4f:61:ee:c4:64:3f:57:62:
                    d6:ec:c5:db:13:d1:da:be:81:fb:94:3b:e1:85:44:
                    ac:bc:f8:4a:42:d6:32:23:21:a8:fc:b9:e5:42:11:
                    5a:11:b2:86:1a:87:2f:f7:b5:eb:00:f4:ef:02:25:
                    00:c7:60:8e:16:8e:1f:8e:cb:60:12:cd:97:61:f7:
                    95:68:b0:72:ba:f6:1d:90:31:c8:24:d0:c6:c1:94:
                    d8:cd:02:14:bd:92:e3:09:b9:5e:74:f8:e1:40:03:
                    69:21:08:31:f5:3e:71:97:4c:f2:1b:9d:4d:8f:5a:
                    b1:5a:c4:fc:9a:23:74:2f:ff:f6:86:2c:7b:2a:7b:
                    d4:3d:4f:4f:59:6f:6b:68:a2:68:46:43:ff:84:69:
                    92:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:25:52:5A:7F:0E:4D:FC:11:4C:E3:75:2F:C5:6B:5E:21:13:FD:E9
            X509v3 Authority Key Identifier:
                keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/316EEFD4AAE511E68EBE4D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.48.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:84:5f:f4:65:e4:ca:05:0d:f6:55:25:5d:1a:1a:55:68:22:
         90:13:53:ab:ab:c6:a5:35:8b:e6:31:56:c9:81:3e:a6:5d:4b:
         65:40:e0:ef:91:b1:ce:92:59:8f:e9:bb:b0:70:44:46:56:86:
         76:c9:27:53:91:e2:43:1f:ed:58:76:d7:57:ee:52:8b:da:58:
         0c:b6:f7:08:62:03:b8:42:76:49:55:8a:fd:97:16:8d:1b:f1:
         7e:e3:14:6e:45:29:c8:48:5d:34:2a:97:34:ae:92:f7:4f:e0:
         1f:3d:69:85:46:21:ba:3d:6b:6c:75:39:13:7c:86:c4:a1:d4:
         1e:79:6e:89:e5:70:45:46:e7:e7:26:d5:1b:e6:28:dd:3e:58:
         f3:2e:67:36:9e:9f:d7:9e:e7:9b:dc:fe:c4:5a:46:b5:3b:37:
         f1:ad:32:83:8e:4f:b5:06:0a:a0:37:28:e0:12:d8:4f:76:ee:
         63:76:67:84:08:36:b6:21:9f:22:cb:c8:c5:50:70:fa:a0:d3:
         d2:3f:ff:9b:2f:27:31:29:01:9d:67:77:cd:ac:a7:d7:b9:ba:
         1a:be:6e:54:6a:51:8a:20:08:a4:ad:da:29:40:52:df:0d:fa:
         07:a9:66:0c:34:44:dc:78:55:b9:ff:b6:01:89:81:0d:7c:a8:
         66:28:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 05:58:07 2026 by rpki-client