Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7375238236E411F0A95FB239C4F9AE02.roa
File:                     7375238236E411F0A95FB239C4F9AE02.roa (raw, json)
Hash identifier:          K9z+IuhKFH34b/IsV2vI8Ng5yteZaKRAPIQpXsjiQGM=
Subject key identifier:   52:35:BA:AC:15:6E:52:DA:2A:0B:0B:A4:20:B8:22:13:4D:A5:E5:FC
Certificate issuer:       /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial:       D4
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7375238236E411F0A95FB239C4F9AE02.roa
Signing time:             Sat 07 Feb 2026 06:24:43 +0000
ROA not before:           Sat 07 Feb 2026 06:24:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135040
IP address blocks:        2001:df4:e141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
        Validity
            Not Before: Feb  7 06:24:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6986daab-4756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:3b:6d:6e:25:4a:b3:5f:db:fb:05:45:77:
                    13:42:3f:c4:a9:15:a7:d2:67:7c:ff:07:bb:d6:ca:
                    af:6d:7a:6e:70:ff:71:c2:5d:0f:3f:c7:74:2b:5d:
                    13:de:4a:a7:59:2a:c3:ab:e9:c6:b6:af:ea:24:17:
                    44:24:2e:01:95:ad:a9:87:03:09:ab:25:27:1b:92:
                    a7:da:44:e0:11:f5:05:9c:89:02:f5:1c:30:0f:dc:
                    7a:2e:56:d3:0e:10:d9:cb:fd:75:d3:32:14:1b:60:
                    f4:15:68:e0:64:f4:3d:94:cc:47:dd:a6:e1:b2:c7:
                    cf:2f:9c:1c:b8:a9:02:45:83:19:97:56:40:60:c4:
                    4c:17:d1:88:76:14:c5:11:a4:fd:9e:9d:38:4a:dc:
                    a2:23:41:b3:77:c4:49:76:db:3f:c4:1b:b1:c1:1e:
                    93:3d:14:26:f3:50:f5:f4:4e:c6:af:10:36:32:d4:
                    76:23:ed:48:89:da:1e:ac:35:8d:0c:8f:6e:42:75:
                    ee:7a:7e:6f:dc:12:92:46:f2:c5:f5:d2:82:06:45:
                    f2:fb:4e:f7:6d:37:bc:72:4b:5b:b2:f3:7a:71:7b:
                    b1:22:4f:09:dc:8e:00:3c:1b:b1:97:35:61:2c:ca:
                    69:ce:53:10:a8:01:2e:dd:24:fc:93:42:99:6a:99:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:35:BA:AC:15:6E:52:DA:2A:0B:0B:A4:20:B8:22:13:4D:A5:E5:FC
            X509v3 Authority Key Identifier:
                keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7375238236E411F0A95FB239C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e141::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:63:cd:a9:03:fc:8d:9d:9d:74:c7:af:de:e6:88:1b:2c:
         cf:d3:de:93:29:7c:95:87:07:e7:09:e3:76:3c:5a:f5:7b:a1:
         67:99:88:f1:ff:86:eb:00:38:d0:ac:dd:64:74:91:57:70:94:
         29:07:3d:86:fd:69:d5:10:67:53:fe:7a:4e:59:72:d6:b7:db:
         50:f6:df:ad:cd:5a:7d:ff:e8:0e:c3:64:d5:79:9b:a8:39:42:
         00:3f:7e:9e:e7:20:1b:d4:35:b8:4d:83:8c:96:cb:14:14:c3:
         f7:ac:26:d5:55:f0:e6:e5:c1:07:cb:46:35:6c:96:72:34:9d:
         17:bb:8e:dc:6f:b5:2a:ae:9f:63:53:7b:ef:19:2e:e8:d7:ef:
         28:03:e7:bc:34:0c:ea:ca:b3:7b:87:8b:9b:58:c9:1a:bf:59:
         f8:3e:31:98:a4:86:34:6d:b2:c5:e1:f9:88:06:e2:53:5c:92:
         dd:d4:f3:6b:59:b1:cf:f9:d9:66:0b:96:d1:df:82:2a:fe:24:
         0a:3e:ae:fc:0b:ef:c7:cb:3f:8f:a0:1f:28:3f:be:b5:36:c9:
         da:ff:a3:9a:ec:e5:fb:d3:fd:36:ba:24:fc:a4:5c:9b:ef:9b:
         3e:1d:da:19:1e:9c:8a:9a:aa:0c:a8:39:af:77:2a:6f:a2:16:
         0f:9a:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:32 2026 by rpki-client