Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/27C29E5EF94411EDB4C6E91CC4F9AE02.roa
File:                     27C29E5EF94411EDB4C6E91CC4F9AE02.roa (raw, json)
Hash identifier:          Ea7+zzBGRihLv2A+0gzVIkV/x/q+na6QGi8mnF0Mfg8=
Subject key identifier:   FE:51:15:C6:2C:52:2A:B7:B4:59:CB:DF:94:7D:B0:5C:94:98:CD:67
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       06FF
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/27C29E5EF94411EDB4C6E91CC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 15:12:07 +0000
ROA not before:           Mon 02 Feb 2026 15:12:07 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56038
IP address blocks:        185.207.8.0/24 maxlen: 24
                          185.207.9.0/24 maxlen: 24
                          185.207.10.0/24 maxlen: 24
                          185.207.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Feb  2 15:12:07 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6980bec7-ab70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2c:8b:96:89:2e:5c:57:a7:e8:d0:62:52:dc:
                    67:96:22:71:2b:48:9e:43:71:c4:29:09:36:95:fa:
                    42:90:60:4b:87:c0:05:71:90:dd:43:13:ec:f2:a2:
                    f6:5c:fc:f8:d2:e1:a1:ef:d9:c2:0e:07:fd:39:28:
                    b6:3e:40:48:f6:db:64:75:2d:ad:05:58:b1:d1:b1:
                    31:a8:a9:f4:71:ba:3a:27:b8:9b:0e:73:9f:e4:b5:
                    c8:7b:a0:df:2d:89:27:0c:31:9f:0d:56:27:9a:ec:
                    62:aa:32:90:d1:00:fd:4a:b2:4a:bb:42:81:1e:82:
                    5c:36:da:c9:d0:d6:7e:bb:33:97:3a:c6:fa:33:2f:
                    7e:ce:77:55:be:40:ee:94:0b:cd:26:f3:a4:03:40:
                    9e:01:06:d7:a4:eb:a1:cc:b9:74:e2:f5:67:62:28:
                    53:2d:44:c0:d7:7c:dd:2b:d9:43:17:d0:61:e9:14:
                    26:ff:3b:08:65:b7:ff:eb:a2:06:55:d8:9a:1c:66:
                    1d:69:10:17:9b:35:9b:5d:63:71:71:ab:ed:d6:09:
                    99:59:56:fa:b5:ba:ec:1d:f1:bd:66:30:0f:7a:4d:
                    a1:8e:9e:62:39:d3:7a:bf:23:7c:62:78:31:f3:ec:
                    40:f0:fd:2a:e8:b7:d3:1f:14:b3:c0:01:ee:13:e1:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:51:15:C6:2C:52:2A:B7:B4:59:CB:DF:94:7D:B0:5C:94:98:CD:67
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/27C29E5EF94411EDB4C6E91CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ae:17:d2:c9:98:16:c7:32:8f:15:5e:e5:3e:c4:6d:04:22:
         a4:35:bd:09:a5:b4:24:ba:eb:e1:10:0d:89:72:bb:ee:7c:ab:
         b2:71:78:32:4d:fa:2f:c1:8e:e3:c8:d2:6b:b0:0a:5d:1e:dd:
         a2:a6:ad:11:84:29:31:8f:0f:a0:53:f3:8f:4a:21:ca:f9:51:
         78:1f:b8:de:cf:9d:4d:fd:3d:a5:b7:ea:46:79:c6:a1:92:5c:
         b7:f4:36:a1:9d:1c:75:2c:0a:eb:99:37:cc:4b:1b:d7:e1:f0:
         96:a6:8e:3f:d1:dc:d5:bf:dd:6e:21:f0:aa:f6:86:ba:73:29:
         c5:f5:9c:e2:c0:a7:ca:26:50:0f:48:64:53:02:fb:1a:6d:40:
         b6:f0:ff:56:78:29:da:8d:9b:67:5e:f5:ba:a8:69:72:23:7c:
         88:1b:7e:38:fe:3d:f3:a5:6d:ef:d3:60:db:7c:39:b2:f1:65:
         fc:b1:b3:92:fb:9a:7c:ed:2b:3f:51:7c:38:b0:37:d6:05:c7:
         ea:8b:b3:e2:85:0f:83:03:36:42:60:51:13:0d:3d:ac:d2:44:
         d5:f7:ed:3d:52:97:4b:60:d5:e8:f3:db:d0:69:0f:f8:4d:6e:
         5b:92:dd:84:e8:de:ee:72:88:0d:0f:67:39:42:45:e0:1b:c6:
         ff:11:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:03 2026 by rpki-client