Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F830F4564F3611F0A970852BC4F9AE02.roa
File:                     F830F4564F3611F0A970852BC4F9AE02.roa (raw, json)
Hash identifier:          20gBKLUbxTZLw3SoVbERoemIBgHkt79co0kXR8V+eBQ=
Subject key identifier:   08:12:26:A2:3C:BC:3E:89:18:02:C8:1E:9E:70:04:8A:51:D7:CF:5F
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       0139
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F830F4564F3611F0A970852BC4F9AE02.roa
Signing time:             Tue 17 Feb 2026 05:26:22 +0000
ROA not before:           Tue 17 Feb 2026 05:26:22 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137385
IP address blocks:        163.61.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Feb 17 05:26:22 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6993fbfe-7ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:6c:e7:68:10:f6:fa:e5:fc:4f:bc:1e:05:
                    12:91:a5:19:7f:49:09:c5:b9:d9:96:c3:10:a6:82:
                    31:3d:af:8f:32:09:84:75:a4:ac:e8:27:c2:17:b7:
                    74:44:ec:18:85:2d:7c:81:c2:02:ee:cc:1f:bf:d5:
                    fa:4f:54:ef:8b:8a:95:8e:69:76:a9:64:6c:7d:e6:
                    82:41:42:4f:4a:da:32:97:54:38:92:59:d1:fa:87:
                    7e:71:af:9e:eb:6d:1a:6e:29:34:23:64:05:73:17:
                    61:1e:fa:39:a4:3f:0a:38:00:02:0f:16:19:d6:59:
                    ee:21:dc:59:01:ca:18:5f:2c:20:74:59:ca:b5:1e:
                    b9:17:00:85:14:b7:51:c3:bf:1d:50:c4:f0:9c:f2:
                    0a:ca:21:3f:fd:e5:05:d8:01:f2:ef:7c:6c:be:41:
                    26:33:5b:da:ae:86:20:b9:2a:b6:d5:e1:2c:db:f6:
                    26:c3:4b:5c:43:c7:0c:62:7e:c1:12:44:7a:34:a9:
                    16:ad:e6:0b:67:95:2b:3c:27:52:d0:bd:c5:5c:49:
                    76:f2:93:7b:c4:2d:78:70:c5:27:de:36:ee:c2:73:
                    4c:c2:57:53:6d:f6:eb:68:bb:63:26:b3:6e:80:92:
                    b9:f3:cc:95:81:51:b1:21:85:92:ea:59:79:b5:de:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:26:A2:3C:BC:3E:89:18:02:C8:1E:9E:70:04:8A:51:D7:CF:5F
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F830F4564F3611F0A970852BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:61:06:fc:eb:3d:28:b9:da:64:d8:3c:66:2d:88:09:d3:89:
         dc:5e:e3:6b:77:aa:23:b5:60:a2:30:8c:85:a2:7d:d1:15:c6:
         bd:78:ff:99:c0:15:8b:76:7b:a9:bb:1c:18:2f:39:d4:38:b0:
         0c:0a:0a:fe:20:fb:9e:99:6b:08:44:4c:85:45:7c:82:39:0c:
         9a:11:36:6f:c2:cd:48:9f:7c:d2:a2:c0:39:9a:2e:52:6e:37:
         33:69:e8:8b:88:c6:d2:cb:40:8f:0f:92:32:6d:43:18:a4:7d:
         0a:58:49:fb:22:b8:ba:28:fe:46:00:19:31:59:ac:f2:c3:d3:
         62:a8:66:09:ec:ba:8c:dc:16:1b:42:ad:22:61:0b:1c:7e:5d:
         13:eb:ad:eb:74:60:e9:9f:3b:33:02:97:5a:0b:e3:94:6c:18:
         e3:f0:54:9e:fb:91:ab:3a:c6:eb:56:c4:ee:d1:8e:6c:6c:67:
         e7:bf:e5:2c:3f:f7:a4:0a:55:59:c6:eb:f8:13:14:4b:06:c4:
         80:23:a7:63:75:4d:92:5e:34:9a:dd:3b:51:a1:5f:78:36:ef:
         3b:e4:5c:dd:23:d9:c9:c3:02:b4:1a:ab:75:53:a9:91:c6:60:
         53:11:2c:fc:55:1f:e2:33:20:3a:36:e9:b0:1b:34:64:5c:51:
         e8:e9:3a:2c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NzU2NDgxMTAvBgNVBAUTKDJDMUMwN0QxNTEyNzE5NjlFMTNFMUNGRDE2MUIxRjYw
NzcwRTI5MEQwHhcNMjYwMjE3MDUyNjIyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTkzZmJmZS03Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+xs52gQ9vrl/E+8HgUSkaUZf0kJxbnZlsMQpoIxPa+PMgmEdaSs6CfCF7d0
ROwYhS18gcIC7swfv9X6T1Tvi4qVjml2qWRsfeaCQUJPStoyl1Q4klnR+od+ca+e
620abik0I2QFcxdhHvo5pD8KOAACDxYZ1lnuIdxZAcoYXywgdFnKtR65FwCFFLdR
w78dUMTwnPIKyiE//eUF2AHy73xsvkEmM1varoYguSq21eEs2/Ymw0tcQ8cMYn7B
EkR6NKkWreYLZ5UrPCdS0L3FXEl28pN7xC14cMUn3jbuwnNMwldTbfbraLtjJrNu
gJK588yVgVGxIYWS6ll5td5lKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAgSJqI8
vD6JGALIHp5wBIpR189fMB8GA1UdIwQYMBaAFCwcB9FRJxlp4T4c/RYbH2B3DikN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTY0OC8yMThGMjY4QURD
OUUxMUVGOEI2MkRENUZDNEY5QUUwMi9MQndIMFZFbkdXbmhQaHo5RmhzZllIY09L
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU2NDgvMjE4RjI2OEFEQzlFMTFFRjhCNjJERDVGQzRGOUFFMDIvRjgzMEY0NTY0
RjM2MTFGMEE5NzA4NTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACjPREwDQYJKoZIhvcNAQELBQADggEBACVhBvzrPSi52mTY
PGYtiAnTidxe42t3qiO1YKIwjIWifdEVxr14/5nAFYt2e6m7HBgvOdQ4sAwKCv4g
+56ZawhETIVFfII5DJoRNm/CzUiffNKiwDmaLlJuNzNp6IuIxtLLQI8PkjJtQxik
fQpYSfsiuLoo/kYAGTFZrPLD02KoZgnsuozcFhtCrSJhCxx+XRPrret0YOmfOzMC
l1oL45RsGOPwVJ77kas6xutWxO7RjmxsZ+e/5Sw/96QKVVnG6/gTFEsGxIAjp2N1
TZJeNJrdO1GhX3g27zvkXN0j2cnDArQaq3VTqZHGYFMRLPxVH+IzIDo26bAbNGRc
UejpOiw=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:22 2026 by rpki-client