Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/6295E05C002811F1A0212657466F56BC.roa
File:                     6295E05C002811F1A0212657466F56BC.roa (raw, json)
Hash identifier:          oqLBbm8kCg9CJHQT01fjwI/EX81E/m9CKFnOZgaKTjY=
Subject key identifier:   08:AC:E8:C4:2A:87:08:75:DB:C6:6C:B0:C8:1E:E8:0F:74:76:94:D8
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0BDC
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/6295E05C002811F1A0212657466F56BC.roa
Signing time:             Mon 02 Feb 2026 11:14:48 +0000
ROA not before:           Mon 02 Feb 2026 11:14:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     197450
IP address blocks:        45.115.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3036 (0xbdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Feb  2 11:14:48 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69808728-205b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:42:78:d3:eb:7b:0f:9e:22:e3:68:b1:84:
                    d4:26:03:c1:51:10:bd:d1:52:85:d7:b0:e8:61:79:
                    a7:8c:e1:cf:eb:bb:f9:4a:fa:23:04:07:ff:63:03:
                    fb:03:9d:c2:af:84:45:ae:95:7f:63:58:fb:6a:3c:
                    23:62:74:e2:f5:9f:21:97:44:ce:04:ac:1a:a3:34:
                    88:5c:c8:c8:ae:50:01:71:b4:81:1a:cc:c8:55:10:
                    84:58:21:27:35:48:4e:28:da:a9:01:9c:97:d5:70:
                    55:be:9f:a9:27:f7:e9:af:b7:30:40:31:75:f1:fa:
                    25:f2:59:fa:28:0e:70:83:33:b3:14:05:a8:ea:56:
                    fa:fa:4c:1b:0b:b5:81:3e:27:b0:db:13:2b:3c:0b:
                    f4:6c:bf:d9:26:47:95:2b:4c:21:30:bf:54:6f:46:
                    31:b2:4c:90:e7:3f:5b:0b:c2:a8:59:c9:f5:cb:7a:
                    d9:f4:79:99:62:56:88:c4:75:65:5c:2e:5a:34:85:
                    77:bd:dc:8d:17:60:8f:0d:ab:65:16:f4:91:2a:9a:
                    71:7b:ca:79:55:6a:fd:0f:d0:90:3c:85:b1:02:af:
                    64:b2:e1:8a:4c:3f:02:a0:8d:0e:ec:86:bf:6a:5b:
                    0a:85:f9:11:9a:fe:04:db:55:a7:0c:46:50:bc:c7:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:E8:C4:2A:87:08:75:DB:C6:6C:B0:C8:1E:E8:0F:74:76:94:D8
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/6295E05C002811F1A0212657466F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:0e:24:bf:b7:19:80:97:6e:b8:f8:d3:be:18:9f:57:88:e9:
         4d:33:8d:2c:17:c0:2b:be:26:20:b5:0c:b0:88:ba:2a:fb:a7:
         ce:73:b5:3b:4f:d5:fd:d0:19:fd:6b:03:4c:dd:ae:01:2d:28:
         bd:9a:5c:f4:04:46:11:2b:a0:d4:f8:59:53:1e:46:da:ee:1d:
         59:7f:8a:dd:b3:95:36:7f:79:ea:30:71:50:35:6c:b8:17:d0:
         79:4e:ce:c0:99:ce:9c:aa:2e:e0:58:9a:7b:fd:25:87:74:b7:
         78:34:95:92:9d:a3:62:68:d9:40:4e:a6:5c:25:d7:f5:0b:94:
         68:44:cc:f8:8d:1c:31:77:44:53:cf:7e:ea:23:96:30:dc:67:
         30:81:5d:da:93:82:6b:1e:82:4b:0b:f1:40:78:43:77:6f:25:
         6d:e0:58:3c:6c:dd:c5:59:df:64:02:68:50:7b:d4:91:77:88:
         90:3c:5b:be:28:70:5a:cf:02:91:80:93:c5:fd:46:d1:da:81:
         48:e4:29:ff:51:a5:35:5f:12:c6:13:ae:57:19:f8:08:94:5f:
         3d:f8:f9:d0:de:ff:f3:c4:c2:d4:5a:5e:23:98:51:1f:a6:37:
         1b:fa:cf:f7:1d:43:39:ff:c1:d4:68:51:f0:59:f7:4f:1c:cc:
         1d:0c:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:17 2026 by rpki-client