Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/09B2D8EC704C11ED97935E7DC4F9AE02.roa
File:                     09B2D8EC704C11ED97935E7DC4F9AE02.roa (raw, json)
Hash identifier:          6UDQ6Jatp0U7ZCTMuLGr7C5MHqlMA6rDDS6NuXkbdJE=
Subject key identifier:   BF:B8:17:BD:60:A8:AF:7B:D4:1E:70:CA:02:FB:69:51:99:54:EE:06
Certificate issuer:       /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial:       0482
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/09B2D8EC704C11ED97935E7DC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 23:20:08 +0000
ROA not before:           Mon 02 Feb 2026 23:20:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     132077
IP address blocks:        193.149.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
                          rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
        Validity
            Not Before: Feb  2 23:20:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69813128-1b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:2b:8d:c2:d0:04:23:c7:65:33:02:31:1c:
                    5d:17:f8:bd:9d:f1:02:c7:a9:0a:67:44:fa:4b:7c:
                    3a:61:bc:00:cd:a8:39:5d:3b:0e:f2:16:20:67:e0:
                    b9:84:be:9e:08:62:9b:42:7d:79:21:9f:1a:92:0f:
                    d3:dd:88:59:fc:83:22:b8:2d:e7:91:ee:00:c9:95:
                    5f:b9:b5:14:8c:35:12:33:e9:89:2c:05:24:d1:ac:
                    eb:51:de:e2:05:da:aa:e9:37:8e:39:ef:54:d1:2e:
                    38:c1:88:e6:e9:29:be:fd:f3:6d:d3:bc:34:3a:12:
                    e8:40:41:86:ff:2f:cf:9d:e5:99:bc:9a:9a:fd:4d:
                    72:bb:f5:74:6b:30:56:4d:fe:81:47:6b:8b:07:4e:
                    74:38:d4:d3:70:82:bc:8d:86:bd:6a:68:38:d3:3f:
                    c2:95:03:e2:b6:f5:4f:25:2f:92:ce:bd:44:65:b0:
                    6c:66:10:cf:df:ba:02:f8:99:06:f5:a6:5f:a6:7f:
                    3b:40:4f:16:23:4a:df:e3:d1:1c:7d:cf:c8:36:f2:
                    69:4d:0b:89:89:5b:0f:73:b1:e7:5a:1b:e9:3e:ea:
                    88:f1:1e:9f:a9:ad:80:0a:02:5a:f2:6e:e2:3e:a6:
                    dd:3a:a6:97:18:11:4f:20:e8:69:6d:1b:f8:81:20:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:17:BD:60:A8:AF:7B:D4:1E:70:CA:02:FB:69:51:99:54:EE:06
            X509v3 Authority Key Identifier:
                keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/09B2D8EC704C11ED97935E7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:10:cb:a2:7f:be:50:40:87:97:9e:5b:4f:16:0e:3b:70:
         f2:35:d2:9e:7d:1c:75:f0:19:9a:12:fb:de:93:91:d1:dc:c6:
         25:5b:ca:50:bf:78:95:be:2d:66:80:6e:bb:35:b5:fc:f3:f2:
         80:18:1f:49:a7:08:49:09:1b:91:c4:13:c8:8d:50:49:79:95:
         44:3e:2a:3f:95:83:17:a1:36:93:b0:33:36:26:e4:85:e9:ed:
         09:98:91:64:aa:5b:82:57:8c:bb:aa:6f:26:98:08:b3:93:73:
         cd:e1:83:36:2c:71:a6:c3:a9:58:f9:16:81:39:d9:12:3f:89:
         f4:6f:74:72:80:f5:ac:9f:00:f4:84:22:f0:d6:92:c2:f9:49:
         ad:a9:8a:db:5e:9e:5a:4f:7d:ba:9a:47:db:60:7d:02:75:63:
         c2:8c:39:81:07:99:8e:e6:f9:24:09:96:a3:ec:a2:b1:10:fa:
         a8:6d:b4:ac:23:7d:17:fd:58:60:3b:b9:57:69:82:f3:8d:1f:
         50:3f:b4:6b:08:e6:b0:e5:4b:7b:66:7e:34:e5:19:e2:36:50:
         6a:6c:f3:35:bf:51:de:1b:43:b0:73:16:f4:6d:e9:98:d3:39:
         c4:d5:af:18:de:c5:b1:a1:ec:e2:fa:92:d1:3a:da:6e:34:5d:
         b3:95:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:43:22 2026 by rpki-client