Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/30CC092AE53011EFA140503EC4F9AE02.roa
File:                     30CC092AE53011EFA140503EC4F9AE02.roa (raw, json)
Hash identifier:          HlxAUsFaXSaLMCRy7Q4HWc6yq1mLABZFTo3ezSaJp7M=
Subject key identifier:   09:A0:F2:D3:82:C9:3B:16:65:B2:E2:11:C8:9C:2F:62:25:7D:F1:04
Certificate issuer:       /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Certificate serial:       C5
Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/30CC092AE53011EFA140503EC4F9AE02.roa
Signing time:             Wed 11 Feb 2026 06:28:34 +0000
ROA not before:           Wed 11 Feb 2026 06:28:34 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     398704
IP address blocks:        163.61.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl
                          rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 06:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
        Validity
            Not Before: Feb 11 06:28:34 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698c2192-471e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:f6:32:2e:0b:c5:98:01:f0:38:f2:9c:70:
                    ff:21:44:17:36:6f:10:2e:14:26:3b:61:de:fa:6e:
                    04:95:cd:d5:fd:c9:e9:62:64:76:cf:8f:ee:c9:5f:
                    b2:e2:ec:6b:d2:25:f9:97:f0:95:6e:55:37:85:af:
                    7b:9c:ba:7d:78:04:24:9b:f9:58:3e:43:3a:f8:73:
                    1d:4c:58:ae:e8:61:61:a7:63:18:a2:cb:0a:48:c9:
                    20:85:16:35:21:42:95:65:68:c4:92:23:66:8a:4c:
                    c4:56:2b:a9:6d:52:9f:60:35:c3:ca:84:a2:45:cd:
                    98:e3:db:6d:d6:d0:5f:04:b4:37:eb:9e:11:d3:8b:
                    93:4b:87:67:44:83:78:a0:56:6a:5d:37:e7:02:df:
                    89:59:79:00:5a:39:71:b7:fe:85:42:f4:33:4a:54:
                    d1:05:dd:53:f9:fd:f2:44:ac:99:5f:cf:52:7b:84:
                    68:a8:c2:18:f4:67:41:0a:02:be:8a:46:ea:1c:fa:
                    27:cc:a7:0d:c3:93:af:79:8c:81:c3:07:ce:d2:53:
                    7d:79:27:6e:90:10:19:94:ec:b9:82:8c:99:be:46:
                    40:fd:aa:6e:e6:95:5b:67:6b:77:74:88:c5:7e:5f:
                    06:3b:3e:0d:34:84:64:57:c5:9b:93:36:2e:05:1e:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A0:F2:D3:82:C9:3B:16:65:B2:E2:11:C8:9C:2F:62:25:7D:F1:04
            X509v3 Authority Key Identifier:
                keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/30CC092AE53011EFA140503EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:53:9e:af:09:4b:f1:23:35:33:d6:f1:92:f8:c5:42:77:e4:
         d0:eb:df:d5:45:0a:b9:35:33:a8:46:eb:56:33:e2:73:fd:31:
         5d:db:23:31:a9:ca:eb:40:05:9b:00:2c:c4:cd:57:e4:02:3a:
         03:21:d1:dd:88:d0:4c:eb:84:9f:3e:cb:72:07:e1:23:f2:81:
         d3:aa:5c:ca:91:71:a9:97:77:16:a4:f0:10:a6:4e:7d:c9:78:
         80:46:d2:1e:a2:34:39:2d:ab:75:f7:fb:34:15:8f:3a:c2:61:
         fd:4d:9f:99:7a:0a:fd:6a:23:fa:d2:7f:46:77:b3:d9:bb:92:
         64:5b:1a:4d:2a:14:df:38:4d:dc:dd:89:c5:ea:70:74:ca:74:
         c0:cb:40:dc:53:53:0a:4a:f0:12:de:66:fa:b2:74:64:e1:c2:
         da:cd:0e:9c:df:af:6a:9d:73:9e:97:bf:47:ae:ba:ee:3a:11:
         2b:e2:3e:a0:b1:a8:b1:9c:d1:61:f7:a7:c7:7b:d9:93:43:1e:
         d3:3b:c7:b0:ed:d2:ba:c3:2d:29:2d:17:34:24:4a:bb:1d:e5:
         4a:92:d9:64:ff:ef:94:a1:17:99:71:a8:4a:7e:67:d6:5b:df:
         9b:b7:47:36:b5:1c:90:c8:15:5f:e0:4a:d1:7a:70:ee:c5:f3:
         aa:bc:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 02:45:43 2026 by rpki-client