Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
File:                     5D81654A561E11E7A4FFF329C4F9AE02.roa (raw, json)
Hash identifier:          KsAXbBAtUhVz+UVmegsopThNl/Mv9RZcafSTJFJXVt4=
Subject key identifier:   BA:34:AE:2B:7A:64:2C:A6:F4:C1:AB:0D:5D:D7:A4:34:6C:7F:75:CE
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       358A
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
Signing time:             Wed 04 Feb 2026 15:10:07 +0000
ROA not before:           Wed 04 Feb 2026 15:10:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23755
IP address blocks:        202.7.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13706 (0x358a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Feb  4 15:10:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6983614f-ca6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:18:2c:ea:d6:0c:ac:8a:b3:c8:4d:06:f7:
                    db:9e:56:e0:23:21:f8:2c:fc:ef:4a:0a:7d:9b:40:
                    f9:57:8f:9a:57:1d:9f:0b:d2:93:6f:6a:7f:73:e4:
                    7b:58:30:4d:d1:17:3a:00:4f:51:d8:c0:ba:8b:30:
                    1a:cc:cc:80:b8:15:84:58:31:1a:57:e3:ac:bf:12:
                    a4:c6:43:75:49:51:3a:8b:25:4a:7a:17:90:3e:ac:
                    96:cf:ae:25:52:db:b6:cd:fb:f4:f0:6a:fd:41:cf:
                    d0:65:1e:23:ba:e1:b6:28:a9:d7:12:c7:5f:87:8e:
                    6e:cf:23:08:f5:84:34:1d:92:83:8d:73:da:35:bc:
                    14:b9:9d:fb:21:37:6f:bf:ec:3b:65:c6:fc:f3:3c:
                    0b:23:bb:8e:84:92:1e:20:6e:8a:78:71:e9:10:77:
                    17:fd:24:07:f1:bb:b2:7f:f3:f5:4d:bc:0d:89:29:
                    77:f5:33:1d:48:7b:fe:75:6d:ff:22:2b:93:e7:20:
                    fc:09:1e:12:ec:48:e1:11:47:d9:b4:80:4a:5e:cc:
                    38:7f:9f:75:41:d8:5d:de:02:2f:0c:56:7e:92:71:
                    4e:45:77:31:44:d1:bc:17:df:cf:04:76:94:7c:a4:
                    f0:e8:67:76:b5:49:f6:eb:bd:8c:b1:16:4b:7b:9c:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:AE:2B:7A:64:2C:A6:F4:C1:AB:0D:5D:D7:A4:34:6C:7F:75:CE
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/5D81654A561E11E7A4FFF329C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:c9:37:a7:92:bb:ba:aa:a3:8c:07:3b:2e:07:cb:d6:43:
         46:55:c5:27:c6:dd:0f:13:17:f7:60:c5:4f:37:cd:b4:51:6e:
         74:fb:ea:df:25:27:0d:c8:b4:fe:3a:12:b7:61:d3:4f:e5:8f:
         37:cf:e5:d4:c3:be:2a:1d:fb:53:be:b2:08:bf:db:c2:5a:16:
         22:50:52:45:c5:dd:ba:76:8d:14:ac:3e:e8:30:22:7e:e1:b7:
         1c:ba:2c:90:0e:bf:98:e6:75:cc:b5:e5:15:c2:23:65:9d:10:
         a7:8f:5b:2d:aa:81:66:50:e5:62:5c:0c:07:bb:c1:a7:14:bd:
         d8:90:79:24:84:79:ba:5c:e0:df:7f:5a:84:23:2a:b9:ef:55:
         99:fd:e6:47:e6:7d:ba:f3:0c:e2:89:93:66:d8:b0:79:75:b3:
         30:a9:2e:13:68:29:00:24:b3:30:a7:14:f0:f9:01:6b:ef:e4:
         40:42:42:c0:0e:e2:24:cd:d3:3e:6c:c9:94:42:b4:a8:e6:63:
         bc:ef:16:e6:a0:d8:3d:19:38:c3:da:74:bf:bc:74:31:2b:53:
         f3:f0:5e:49:93:e5:b6:6a:68:45:47:5e:01:2a:43:dd:f8:9e:
         8a:54:ac:0d:7c:f0:a3:7b:4f:2d:33:8f:7f:65:cc:d0:7e:89:
         66:34:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:22 2026 by rpki-client