Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7404496836E411F0A95FB239C4F9AE02.roa
File:                     7404496836E411F0A95FB239C4F9AE02.roa (raw, json)
Hash identifier:          C6HBIEdHjGhMruWBR2Oz8f+R1xT6x6nc/ShhYHiCv/0=
Subject key identifier:   42:41:ED:49:A9:B8:19:F9:2D:0A:BB:50:5C:48:D2:FD:28:2E:8F:63
Certificate issuer:       /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial:       D5
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7404496836E411F0A95FB239C4F9AE02.roa
Signing time:             Sat 07 Feb 2026 06:24:44 +0000
ROA not before:           Sat 07 Feb 2026 06:24:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139358
IP address blocks:        2001:df4:e141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
        Validity
            Not Before: Feb  7 06:24:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6986daac-d4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:28:1b:87:e6:32:8e:64:e4:e8:1a:ee:ea:
                    66:e8:a3:55:37:93:84:62:bc:9d:6f:5d:7d:7f:1a:
                    e6:aa:f9:9d:b8:3f:cf:9e:a8:5a:bb:d6:71:cc:57:
                    45:20:6a:ee:ce:d0:69:7b:6a:24:51:33:a0:1b:57:
                    6a:9c:ff:13:cd:a2:9b:67:6f:e1:1c:49:d8:8d:c4:
                    6f:54:97:79:f7:c6:f4:6a:8a:5a:35:e9:09:74:4e:
                    71:49:be:83:a3:60:66:93:5f:97:56:e8:0d:aa:a4:
                    a1:f8:ea:31:d9:b2:a3:aa:da:18:7c:cb:03:4e:d9:
                    1c:47:2e:51:13:24:8e:2c:9a:2a:90:76:23:da:aa:
                    10:a7:c0:9f:44:f0:29:1b:b5:6a:cc:81:0c:89:48:
                    03:4e:10:b9:6e:a0:b4:8c:e7:9c:ba:03:6a:fa:1a:
                    ad:3e:33:fa:72:29:70:f4:4a:50:2d:80:52:75:03:
                    9e:46:6c:67:54:af:d4:02:9b:dc:64:09:40:90:dc:
                    23:76:ab:d1:6a:34:34:84:be:36:9a:84:78:a0:00:
                    e1:a8:ab:ef:2e:cb:68:c1:a9:77:6a:d1:96:b0:79:
                    c2:7c:9d:c3:cc:f4:70:cd:08:78:62:e8:ec:90:f5:
                    ff:60:06:42:f4:ea:e5:20:79:ae:59:ac:2d:66:93:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:41:ED:49:A9:B8:19:F9:2D:0A:BB:50:5C:48:D2:FD:28:2E:8F:63
            X509v3 Authority Key Identifier:
                keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7404496836E411F0A95FB239C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e141::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:9e:b5:39:e4:c9:9e:78:f1:c4:04:5d:6d:16:dc:2a:1a:
         2c:1b:3d:09:e9:f5:02:89:a5:fd:24:35:d6:0e:6c:3b:db:1b:
         a6:d3:4d:b7:8e:04:9a:86:b5:02:46:dd:31:a4:93:6e:da:53:
         a5:bd:67:c0:4d:96:39:a9:82:3b:4a:9e:27:2b:38:f4:88:bb:
         a8:23:d4:68:85:01:67:37:47:dc:c7:6e:6b:4b:6f:ff:bd:64:
         b2:6a:b9:91:01:99:21:7d:ff:e6:0f:b3:4d:94:ee:93:7b:60:
         2c:1c:81:2f:f5:53:2f:d9:99:f8:2e:f9:bd:c9:28:e7:9d:45:
         37:1b:6b:b2:02:e9:69:2f:19:a3:95:d4:6a:71:31:9d:c0:80:
         99:04:14:0c:e7:14:ed:39:ef:22:0c:5c:24:12:24:41:98:3d:
         58:41:ee:f6:00:44:04:23:f0:a0:73:67:70:e8:33:b3:c9:00:
         4b:c5:bf:c5:97:21:cc:84:01:fc:23:41:3e:cd:c7:08:ce:0e:
         53:fb:ac:15:e1:3b:aa:cd:2d:b4:dc:08:52:25:58:28:5e:9c:
         33:73:7e:84:a0:33:df:91:49:ab:ad:4f:12:5f:70:15:5a:59:
         f2:24:37:d8:46:e5:3c:fc:ac:d9:6d:a5:98:de:15:67:cf:fd:
         6e:c6:b3:66
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1
Q0YzODcxODYwHhcNMjYwMjA3MDYyNDQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTg2ZGFhYy1kNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8rMoG4fmMo5k5Oga7upm6KNVN5OEYrydb119fxrmqvmduD/Pnqhau9ZxzFdF
IGruztBpe2okUTOgG1dqnP8TzaKbZ2/hHEnYjcRvVJd598b0aopaNekJdE5xSb6D
o2Bmk1+XVugNqqSh+Oox2bKjqtoYfMsDTtkcRy5REySOLJoqkHYj2qoQp8CfRPAp
G7VqzIEMiUgDThC5bqC0jOecugNq+hqtPjP6cilw9EpQLYBSdQOeRmxnVK/UApvc
ZAlAkNwjdqvRajQ0hL42moR4oADhqKvvLstowal3atGWsHnCfJ3DzPRwzQh4Yujs
kPX/YAZC9OrlIHmuWawtZpOOjQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEJB7Ump
uBn5LQq7UFxI0v0oLo9jMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw
MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODdCQUMvQzZBRDNFMEFEMDJDMTFFRkI1NTg0OTE1QzRGOUFFMDIvNzQwNDQ5Njgz
NkU0MTFGMEE5NUZCMjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ304UEwDQYJKoZIhvcNAQELBQADggEBAIS7nrU55Mme
ePHEBF1tFtwqGiwbPQnp9QKJpf0kNdYObDvbG6bTTbeOBJqGtQJG3TGkk27aU6W9
Z8BNljmpgjtKnicrOPSIu6gj1GiFAWc3R9zHbmtLb/+9ZLJquZEBmSF9/+YPs02U
7pN7YCwcgS/1Uy/Zmfgu+b3JKOedRTcba7IC6WkvGaOV1GpxMZ3AgJkEFAznFO05
7yIMXCQSJEGYPVhB7vYARAQj8KBzZ3DoM7PJAEvFv8WXIcyEAfwjQT7NxwjODlP7
rBXhO6rNLbTcCFIlWChenDNzfoSgM9+RSautTxJfcBVaWfIkN9hG5Tz8rNltpZje
FWfP/W7Gs2Y=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:58 2026 by rpki-client