Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/55903190A67E11F0BBF9853FC4F9AE02.roa
File:                     55903190A67E11F0BBF9853FC4F9AE02.roa (raw, json)
Hash identifier:          IlB2EZfmpxJ19xgW6cLLY4ytwWBGuJk1tpQTFm8bBH0=
Subject key identifier:   B0:E0:B4:18:3F:0B:5D:74:AA:5C:83:03:91:F2:FC:56:27:B6:61:09
Certificate issuer:       /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial:       0D2C
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/55903190A67E11F0BBF9853FC4F9AE02.roa
Signing time:             Wed 18 Feb 2026 18:15:44 +0000
ROA not before:           Wed 18 Feb 2026 18:15:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38556
IP address blocks:        116.212.184.0/23 maxlen: 23
                          116.212.184.0/24 maxlen: 24
                          2401:e6a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
                          rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3372 (0xd2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
        Validity
            Not Before: Feb 18 18:15:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=699601d0-297a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2b:a2:62:87:9f:1c:2c:37:2f:b2:c0:89:66:
                    c9:d1:87:1a:80:89:11:d6:36:50:e3:90:53:1b:fe:
                    50:21:a2:0d:e8:63:d6:f9:47:bf:ae:27:37:22:0a:
                    af:c3:e6:06:16:dd:80:33:8d:45:3c:28:35:2c:38:
                    1a:89:18:5e:86:fa:b7:f3:bb:5d:72:e4:03:a6:36:
                    1b:84:49:ac:a2:a9:d2:ae:ae:dd:4a:83:08:72:e1:
                    5b:7f:c9:4c:b6:a8:fa:b1:df:72:dc:33:dc:e2:9b:
                    b1:f0:99:e9:ae:d1:d8:3a:47:e3:af:1e:2e:d7:7b:
                    53:fd:0b:45:5e:32:e1:9e:17:46:63:27:20:2c:81:
                    90:aa:14:c4:45:83:64:83:cc:e0:9b:39:40:d3:c9:
                    69:ff:7b:16:61:71:e9:a7:64:53:9c:cc:2f:e1:66:
                    82:4c:55:d9:89:ee:59:e3:6b:fc:e9:66:cd:ca:30:
                    6f:d3:c5:95:98:5e:d7:7a:02:7c:49:7e:a3:5d:e3:
                    fe:0a:18:45:25:07:f6:12:df:82:6a:fa:c0:19:0b:
                    62:e3:b2:af:94:e8:79:45:b7:31:d9:fa:7c:2e:10:
                    e3:8f:d5:72:10:15:81:8b:a8:b6:1f:5f:7c:bf:b5:
                    7c:8e:b0:2a:20:74:00:a4:d8:28:df:74:0b:57:aa:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E0:B4:18:3F:0B:5D:74:AA:5C:83:03:91:F2:FC:56:27:B6:61:09
            X509v3 Authority Key Identifier:
                keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/55903190A67E11F0BBF9853FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.184.0/23
                IPv6:
                  2401:e6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:b7:53:fd:8d:72:eb:0b:43:52:97:1f:c9:0d:70:bc:41:
         75:3a:f0:82:c9:60:e9:ec:d1:f7:62:91:b9:36:6f:3e:d1:ca:
         9b:24:67:65:b6:7b:ee:bf:54:5c:05:43:ec:b2:19:2c:36:20:
         6a:7a:27:90:20:c6:36:0a:2d:d2:a4:d9:80:cf:4b:67:f2:eb:
         7d:8c:7e:4f:72:f5:53:13:7e:a8:b6:ac:97:75:66:08:ce:36:
         bd:c0:67:59:ab:cf:ca:23:37:7f:09:96:86:ff:3a:96:a4:50:
         4a:6d:f7:9a:71:0d:4a:6d:38:26:28:03:4e:0a:cc:fd:6a:f1:
         4e:4b:59:a8:50:54:56:cd:78:2a:65:5e:e3:4a:35:3e:a3:f6:
         6b:7d:ab:b7:e9:a4:24:e3:37:c4:5d:4f:85:e0:3a:e4:52:2b:
         65:60:63:e7:af:91:a0:4a:c3:05:6d:0b:74:3b:ff:3f:ac:78:
         4a:f0:ba:b7:f4:69:c4:c1:5d:d9:db:e9:6d:a4:05:72:b9:b5:
         cf:21:d8:40:f3:3b:d2:5d:c0:04:40:97:ff:43:26:fc:92:bf:
         3b:db:10:19:c9:16:af:0e:ce:50:fb:ae:2f:9c:9d:a0:80:85:
         d3:83:0f:e9:45:0e:5f:df:81:7c:b5:ab:f5:74:29:a5:61:65:
         24:d6:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:52 2026 by rpki-client