Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/3EE95EC801B211F19B62C4E66C6F56BC.roa
File:                     3EE95EC801B211F19B62C4E66C6F56BC.roa (raw, json)
Hash identifier:          3vXiEZ/BapV8xzTafBsl3BTeOQfwNE0grNCvitbFMro=
Subject key identifier:   91:2B:24:28:8B:81:C9:81:56:02:8E:BC:27:86:FC:84:43:3C:59:81
Certificate issuer:       /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D
Certificate serial:       02
Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/3EE95EC801B211F19B62C4E66C6F56BC.roa
Signing time:             Wed 04 Feb 2026 10:14:10 +0000
ROA not before:           Wed 04 Feb 2026 10:14:10 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138233
IP address blocks:        2001:df6:ad40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D
        Validity
            Not Before: Feb  4 10:14:10 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69831bf1-0073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:19:54:13:b0:02:ae:0d:3e:f9:a9:7c:ff:
                    8a:af:8f:c2:b3:d1:81:91:4b:89:00:41:15:c8:b6:
                    12:92:79:80:90:97:9b:62:67:38:f7:f6:97:74:8f:
                    51:85:fc:1c:bb:a3:8b:fa:35:23:ca:7f:81:bb:fa:
                    82:ad:42:39:5e:a3:06:95:e9:c8:93:b5:c8:a0:21:
                    9a:63:71:3a:0b:4c:18:c5:90:d7:96:5f:ab:35:e8:
                    57:f2:72:24:78:c4:37:7e:24:c0:60:95:9e:fc:5d:
                    9e:79:f4:51:9d:88:64:6f:3d:f5:20:98:35:ce:4b:
                    4c:50:56:80:4b:dc:a4:6d:a4:0c:66:6d:b4:b3:7a:
                    ad:c8:04:ca:4f:d2:4c:b0:d3:7f:65:c0:ac:40:cd:
                    80:89:e0:1e:b1:45:9f:c0:ab:c2:63:1e:48:0c:78:
                    39:5f:9f:f8:61:fc:b9:d2:db:bd:d4:c8:74:e1:38:
                    69:09:96:5a:7e:bd:4a:c0:20:aa:75:09:df:ce:ad:
                    4f:9c:1e:00:bc:16:4a:af:6d:79:36:a2:ef:c2:0d:
                    1e:46:f4:95:6c:2f:e2:d1:52:ba:cd:3e:b2:c8:e9:
                    27:8f:9a:bb:c4:f0:32:0f:10:77:f7:17:5f:16:b8:
                    a3:a9:72:e5:ce:9f:2f:7c:98:df:69:ea:44:a0:1d:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2B:24:28:8B:81:C9:81:56:02:8E:BC:27:86:FC:84:43:3C:59:81
            X509v3 Authority Key Identifier:
                keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/3EE95EC801B211F19B62C4E66C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:ad40::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:d4:03:92:4f:1e:3d:cf:be:eb:c3:64:40:3e:ad:41:30:
         c9:39:37:89:b3:af:1e:7a:1e:d2:d2:c5:ba:31:77:3c:a3:b6:
         5b:98:cb:51:3c:9e:22:b6:74:3e:c2:47:2a:3f:97:61:23:c3:
         8e:cf:23:7d:8d:ed:c3:3c:28:8c:46:84:4e:aa:94:1e:6c:a3:
         52:2a:4d:17:44:b1:b5:1a:9a:3f:d4:b2:ab:3c:e9:c5:49:db:
         65:14:d7:4a:f8:bd:37:1f:83:bc:26:e8:d0:7f:0c:74:c9:16:
         a2:45:16:51:d7:90:d6:9a:82:8f:65:9d:95:8e:c5:cc:08:3c:
         a3:f6:33:49:a5:bf:4b:5c:68:c8:5b:75:59:86:27:52:c1:7a:
         a6:d5:26:a5:46:00:d8:2c:be:1c:fc:d3:78:34:09:05:c5:8b:
         d3:9d:f2:3c:bb:22:da:6f:ac:25:b5:39:56:9a:04:31:fb:6c:
         c9:2c:26:cd:48:31:4c:8b:23:66:ef:63:86:73:25:b5:68:f0:
         b9:19:6c:15:59:a9:2c:79:e0:ca:24:0c:30:b2:cc:41:e5:4b:
         e1:00:90:6f:07:6f:ff:5e:b1:f7:1a:b1:b8:6a:6d:85:3e:c5:
         9d:85:95:64:08:9d:42:6c:0a:63:74:c4:d9:34:6c:63:46:8d:
         7a:be:ab:63
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
RTNDMDExMC8GA1UEBRMoQTVENEUxODhBQjI1RDg2OTQxRTA2QkM1RjBEMkJFOThE
MEE1MEEyRDAeFw0yNjAyMDQxMDE0MTBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODMxYmYxLTAwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkZxlUE7ACrg0++al8/4qvj8Kz0YGRS4kAQRXIthKSeYCQl5tiZzj39pd0j1GF
/By7o4v6NSPKf4G7+oKtQjleowaV6ciTtcigIZpjcToLTBjFkNeWX6s16FfyciR4
xDd+JMBglZ78XZ559FGdiGRvPfUgmDXOS0xQVoBL3KRtpAxmbbSzeq3IBMpP0kyw
039lwKxAzYCJ4B6xRZ/Aq8JjHkgMeDlfn/hh/LnS273UyHThOGkJllp+vUrAIKp1
Cd/OrU+cHgC8FkqvbXk2ou/CDR5G9JVsL+LRUrrNPrLI6SePmrvE8DIPEHf3F18W
uKOpcuXOny98mN9p6kSgHUelAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUkSskKIuB
yYFWAo68J4b8hEM8WYEwHwYDVR0jBBgwFoAUpdThiKsl2GlB4GvF8NK+mNClCi0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFM0MwLzlBOEFEODUyMDFC
MTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcGRUaGlLc2wyR2xCNEd2RjhOSy1tTkNsQ2kwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTNDMC85QThBRDg1MjAxQjExMUYxOUMxRTQyQzE2QjZGNTZCQy8zRUU5NUVDODAx
QjIxMUYxOUI2MkM0RTY2QzZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfatQDANBgkqhkiG9w0BAQsFAAOCAQEANOHUA5JPHj3P
vuvDZEA+rUEwyTk3ibOvHnoe0tLFujF3PKO2W5jLUTyeIrZ0PsJHKj+XYSPDjs8j
fY3twzwojEaETqqUHmyjUipNF0SxtRqaP9SyqzzpxUnbZRTXSvi9Nx+DvCbo0H8M
dMkWokUWUdeQ1pqCj2WdlY7FzAg8o/YzSaW/S1xoyFt1WYYnUsF6ptUmpUYA2Cy+
HPzTeDQJBcWL053yPLsi2m+sJbU5VpoEMftsySwmzUgxTIsjZu9jhnMltWjwuRls
FVmpLHngyiQMMLLMQeVL4QCQbwdv/16x9xqxuGpthT7FnYWVZAidQmwKY3TE2TRs
Y0aNer6rYw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:38 2026 by rpki-client