Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/651FCE60FAAA11F098D3B5455A6F56BC.roa
File:                     651FCE60FAAA11F098D3B5455A6F56BC.roa (raw, json)
Hash identifier:          ZtNHTo+25HPMtUJZWYk3o/IBuwtSAsaxCzxiOAqlAAo=
Subject key identifier:   BC:A1:39:8E:EC:B8:02:19:CB:18:E1:97:A0:A1:FC:23:38:3C:CE:42
Certificate issuer:       /CN=A9197A55/serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
Certificate serial:       06
Authority key identifier: 49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/651FCE60FAAA11F098D3B5455A6F56BC.roa
Signing time:             Mon 26 Jan 2026 11:30:20 +0000
ROA not before:           Mon 26 Jan 2026 11:30:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136141
IP address blocks:        2001:df6:9940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=49784D55953DE7B8F3CBF2D451E31233CC733D41
        Validity
            Not Before: Jan 26 11:30:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6977504c-02bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:25:c6:73:16:87:88:0a:1d:10:c9:57:93:
                    ba:6a:1e:cf:32:9d:f7:ee:5a:89:d6:b3:d0:dc:81:
                    36:6c:24:2b:b3:25:97:b7:31:af:61:b4:73:07:a8:
                    7f:09:90:24:b5:06:27:a3:06:ff:98:d0:ea:e3:6c:
                    3e:10:af:d2:e2:d1:89:97:9b:6f:11:50:eb:b8:86:
                    ff:79:fe:5f:50:d3:f0:61:51:0f:1a:fd:68:41:3e:
                    9c:88:0f:cb:f1:b0:e9:f5:a5:3c:57:2c:68:e7:9b:
                    87:e5:23:de:7c:95:88:31:84:d2:92:c1:f4:1d:3a:
                    56:cf:21:a0:31:b0:80:d6:ac:f4:fd:ea:18:4e:d2:
                    37:aa:00:54:58:80:6b:fd:e6:fa:32:fe:26:f6:dc:
                    ad:37:46:d3:ce:64:57:85:28:04:da:9e:59:af:8b:
                    25:ac:a9:00:2f:f6:ef:bd:85:35:00:cc:e1:d1:8b:
                    5b:6f:54:06:bf:c5:81:84:5d:99:26:0c:00:ca:12:
                    a6:d1:ed:6e:9f:3e:2a:0a:0f:4a:26:d3:1a:03:ed:
                    62:c0:2e:49:a7:c6:84:1f:6f:94:c5:f9:d5:40:a5:
                    ef:4d:99:a9:da:61:e8:7d:40:ab:e2:3d:52:74:5c:
                    c9:af:bc:02:e7:7e:b4:65:ad:90:cb:f7:be:7b:d3:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A1:39:8E:EC:B8:02:19:CB:18:E1:97:A0:A1:FC:23:38:3C:CE:42
            X509v3 Authority Key Identifier:
                keyid:49:78:4D:55:95:3D:E7:B8:F3:CB:F2:D4:51:E3:12:33:CC:73:3D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/SXhNVZU957jzy_LUUeMSM8xzPUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXhNVZU957jzy_LUUeMSM8xzPUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/98229368F7A511F087E51F16556F56BC/651FCE60FAAA11F098D3B5455A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:9940::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:01:ed:5e:13:ff:dc:ee:46:d4:51:85:57:23:9c:8f:4c:
         2c:69:03:e3:f8:e7:66:0f:37:26:77:9d:a1:a4:1f:22:2a:21:
         0c:bb:8b:39:8c:39:15:73:04:ac:78:e6:31:ad:cf:f7:e5:80:
         1c:2d:85:df:b3:ce:2c:a7:85:ce:52:cb:28:25:d5:f8:3d:08:
         c4:ff:d6:ba:b1:9c:7b:af:82:10:14:40:8e:b3:86:9c:e7:4b:
         63:92:ca:f3:9a:29:50:eb:7f:10:12:d2:41:71:0c:01:85:6f:
         b1:b1:6e:cb:5d:88:d6:46:93:ca:54:b0:75:02:5e:a1:9d:31:
         90:46:ec:cd:63:a1:7a:97:65:16:0a:6b:04:da:d2:f4:c3:f5:
         c8:93:e4:fd:6a:e8:d5:41:da:4f:c5:94:7f:9c:0f:96:53:85:
         60:85:fa:af:f7:e4:54:42:f1:18:34:29:24:12:4d:ed:6f:24:
         08:1e:f1:c9:b7:b4:81:c8:1b:08:b2:31:40:70:a9:25:d0:3b:
         7d:95:20:99:7b:9c:2b:7f:7e:c7:3c:be:25:ee:8c:45:81:03:
         6a:4b:37:3f:5b:55:0d:2b:ce:50:63:0e:9b:40:b7:9d:09:2b:
         f6:95:dc:b3:ea:69:0e:3e:36:c6:2a:a6:db:49:fa:05:c7:fb:
         5c:8e:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:40 2026 by rpki-client