Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/B5885EF852D411EC8C8CE26CC4F9AE02.roa
File:                     B5885EF852D411EC8C8CE26CC4F9AE02.roa (raw, json)
Hash identifier:          KSd87kYfN+cVDiwWy8vlRr1Y12RS3oWEKFNDzPhKEAw=
Subject key identifier:   ED:23:20:03:DC:27:4D:78:26:29:FC:E1:81:94:48:67:C6:2D:33:78
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       358B
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/B5885EF852D411EC8C8CE26CC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 15:10:08 +0000
ROA not before:           Wed 04 Feb 2026 15:10:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24548
IP address blocks:        110.173.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Feb  4 15:10:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69836150-e4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:ed:ce:10:58:ec:71:d9:06:3a:a1:91:19:
                    2b:06:5d:89:97:e4:85:ff:dd:b5:34:13:ee:69:35:
                    b8:bb:a1:35:69:0f:c1:5a:ca:79:05:9a:5e:54:0c:
                    a4:7b:72:a9:c7:b2:93:73:8e:33:0b:10:a5:13:26:
                    9f:2c:b7:0d:82:84:b6:ba:1e:3d:fb:80:31:49:b7:
                    5f:f2:e7:f9:e6:d8:9b:35:b0:9c:6e:c3:82:0e:de:
                    ad:e4:a3:d6:1e:91:eb:24:0e:1a:80:5f:55:14:19:
                    9e:f6:e9:be:6d:b9:06:da:e8:1c:94:9a:31:44:33:
                    ec:0b:3a:5e:5c:8e:7b:1c:57:f0:90:10:28:f0:e9:
                    b9:10:85:45:78:b6:8d:ad:56:96:8e:1f:9f:fe:06:
                    30:21:c6:b3:5f:b2:49:df:e9:6b:d2:f7:20:b6:05:
                    fc:d0:7b:3b:c3:db:4a:01:d0:dd:0d:47:6d:d6:5f:
                    8f:fc:2c:58:17:55:45:df:f8:e2:2f:48:c3:58:41:
                    77:5b:71:56:fc:1f:a1:cd:be:32:7b:8e:ae:09:28:
                    b9:c2:ff:7c:51:ba:1f:16:07:8c:e6:9d:7c:bf:f3:
                    af:16:f4:c8:5a:ba:f4:32:26:89:03:da:c2:a9:1a:
                    a7:28:61:a7:06:53:b7:2f:e8:b1:32:bc:3e:10:4a:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:20:03:DC:27:4D:78:26:29:FC:E1:81:94:48:67:C6:2D:33:78
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/B5885EF852D411EC8C8CE26CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:dc:2e:c3:e5:bf:97:c7:7b:99:8a:25:8f:89:69:e7:2e:4d:
         cf:61:57:60:58:07:85:80:5f:04:70:b4:23:93:f7:0f:c8:9d:
         df:1d:fd:e1:87:0f:45:97:f6:e4:1c:ad:8e:d0:98:53:d2:54:
         16:3e:c9:30:91:cd:f6:1c:c7:7f:ac:32:11:81:15:05:f6:b4:
         e8:74:da:c7:7d:95:86:1a:ea:7c:52:c1:6f:98:60:b6:4a:6c:
         04:1a:d7:0c:23:33:3e:72:13:a5:b6:1b:63:a8:ee:1a:39:69:
         3b:b8:bb:d5:0a:5a:1a:2e:0d:4d:7f:fa:a0:30:5a:02:26:a6:
         37:a7:cf:fe:d9:7e:3f:41:e7:2f:12:7b:35:3d:cb:34:d3:c4:
         ab:cb:10:34:3b:da:f7:74:c1:b6:75:82:f5:a4:ad:77:b0:c1:
         35:ae:b2:06:70:c0:dc:45:24:9c:26:d2:99:2c:b1:9c:a2:61:
         91:4a:31:94:68:ed:13:c0:c8:dd:85:18:60:af:9c:4b:9e:95:
         78:a4:c9:c1:0f:36:d5:51:fe:ca:f5:43:74:45:76:be:b6:46:
         60:6c:54:0c:34:08:18:64:a9:f4:2f:a3:92:7f:92:a7:c8:25:
         c1:83:38:7c:1f:8e:6f:d5:34:16:a7:c6:c9:b2:9a:36:c8:0a:
         f2:a6:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:03 2026 by rpki-client