Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/14EC8116B10B11E58EB48F13C4F9AE02.roa
File:                     14EC8116B10B11E58EB48F13C4F9AE02.roa (raw, json)
Hash identifier:          GhHnCwYe2zJxM5qH+kr9CEnQ9KqcXmSau3Q4lL5IV3k=
Subject key identifier:   5D:0F:D8:08:1B:1F:77:05:1D:C5:9C:8D:BA:56:6B:B8:0C:C1:7C:E7
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       2852
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/14EC8116B10B11E58EB48F13C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 16:12:55 +0000
ROA not before:           Mon 02 Feb 2026 16:12:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132124
IP address blocks:        43.224.124.0/22 maxlen: 22
                          103.11.32.0/22 maxlen: 22
                          2402:cb00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10322 (0x2852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Feb  2 16:12:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6980cd07-c240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:53:09:f1:27:bd:8b:c9:59:2f:f8:c8:df:
                    93:59:7a:e4:c2:b4:54:12:fa:d3:e4:3c:6a:52:1d:
                    cd:cc:6e:af:9d:62:ba:c7:11:8b:ce:a0:1d:d2:4d:
                    6a:e0:98:f7:7c:b2:51:59:89:f6:d1:7f:ce:b0:7c:
                    2c:85:73:59:5c:f7:5b:98:63:41:79:2f:5e:62:c2:
                    ba:8f:d5:ca:ba:4a:9d:83:f6:9f:16:29:db:c2:43:
                    d9:07:76:e7:3b:bd:95:41:a9:41:e6:7a:6e:94:2b:
                    b5:76:ed:e7:2d:77:ff:c4:42:79:94:ec:d7:f1:02:
                    5b:16:6a:94:57:65:b1:0f:e7:a8:7e:1d:46:bc:c8:
                    74:33:77:e7:ef:17:d9:b7:88:a8:3e:8d:ed:63:d0:
                    0b:25:48:e1:6e:7c:b5:1f:5f:ce:b8:93:22:59:d6:
                    50:89:c1:07:4b:9d:73:99:fd:4a:c7:35:5a:35:e1:
                    88:99:88:39:d0:57:b6:95:73:3e:19:81:dc:8c:32:
                    8a:d8:ef:e3:7c:5a:33:d1:9d:97:6c:80:8a:e7:fa:
                    de:58:06:c1:a6:0e:60:35:b8:9d:ff:37:e4:b9:4e:
                    34:64:3f:da:9e:c2:8a:a6:a5:c6:8f:c8:63:e9:1b:
                    76:93:6d:24:73:dc:8e:46:e6:aa:e4:5a:8e:1e:6f:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:D8:08:1B:1F:77:05:1D:C5:9C:8D:BA:56:6B:B8:0C:C1:7C:E7
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/14EC8116B10B11E58EB48F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.124.0/22
                  103.11.32.0/22
                IPv6:
                  2402:cb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:36:02:23:89:7e:1a:8c:6e:b0:8f:52:09:14:b4:54:2b:
         30:3a:ca:e0:eb:ed:02:09:35:7c:13:df:7c:10:a7:0c:f4:cb:
         be:3f:0d:2a:43:7d:ea:dd:9e:d2:33:89:a4:7d:80:17:7d:6a:
         ea:9b:3d:57:76:36:83:f0:48:25:d5:af:d0:e2:83:e4:35:d8:
         f9:31:39:fe:f3:a6:9f:23:aa:79:b4:f3:76:4c:c6:d3:7b:59:
         18:4b:34:3f:8a:f1:24:28:4d:54:cf:68:f6:bb:48:88:8c:b7:
         1a:57:c5:37:79:06:10:89:57:a7:80:ea:29:24:90:71:aa:e7:
         f2:98:8a:da:ca:93:c9:e9:24:a9:c1:73:32:fb:e5:5b:8b:83:
         95:45:89:2d:41:2b:bb:ae:ef:79:b4:e3:56:66:0f:b7:23:a1:
         c8:d2:33:77:1c:4a:87:74:7b:de:4f:69:8d:73:ca:18:e3:c0:
         d2:db:1c:d1:45:8c:fb:18:b9:67:ae:1a:6d:05:af:db:e4:14:
         0f:32:a9:11:ab:ff:a4:c7:2c:3a:a9:5c:b8:85:39:69:fd:6f:
         d4:ea:f4:a5:e7:37:1a:e2:b4:e3:bb:3a:52:62:30:69:d7:1e:
         ce:64:a3:11:6f:96:ce:c9:8b:3e:7e:ff:59:60:a0:0b:b9:21:
         d8:73:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:20 2026 by rpki-client