Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/21DB5BC4FAAA11F0A3B995435A6F56BC.roa
File:                     21DB5BC4FAAA11F0A3B995435A6F56BC.roa (raw, json)
Hash identifier:          D66b13hfAft6ZfImClSvrg7dpU8eUXCaUQQfIUG9c+k=
Subject key identifier:   FB:3B:2C:EB:26:7F:98:DD:89:CE:63:20:EA:9B:4C:80:4B:77:6E:A3
Certificate issuer:       /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial:       0C
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/21DB5BC4FAAA11F0A3B995435A6F56BC.roa
Signing time:             Mon 26 Jan 2026 11:28:27 +0000
ROA not before:           Mon 26 Jan 2026 11:28:27 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142217
IP address blocks:        151.158.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Validity
            Not Before: Jan 26 11:28:27 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69774fdb-9a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:67:80:5c:23:95:60:77:78:d1:d6:6c:73:
                    02:9e:63:0f:b7:f7:1a:3c:c6:e0:43:fb:a2:11:f1:
                    41:34:7e:12:76:f6:83:60:35:5f:2b:48:4b:32:77:
                    35:87:4e:cd:3b:66:f2:89:c4:e9:af:60:cf:20:19:
                    1e:27:e9:fd:f0:bd:2e:d0:19:33:87:98:92:69:dc:
                    3d:45:eb:35:f0:b8:d1:be:81:29:09:18:e3:42:24:
                    2c:ed:7a:c4:a6:9e:c3:9a:fb:a3:17:f5:bd:ca:23:
                    c2:19:95:4d:f1:36:b7:03:17:19:0e:31:fd:b8:76:
                    45:3e:90:3e:79:08:f6:8d:46:bf:00:a4:8a:de:04:
                    33:36:f1:40:f1:37:96:61:4c:98:15:4e:b7:ea:4f:
                    9b:be:de:65:6e:f0:d6:56:d7:b6:f2:37:19:f1:95:
                    71:7c:0f:e5:6e:3c:3b:54:fb:32:6a:67:3b:73:76:
                    12:d3:b6:e7:6c:bb:b1:82:0c:13:2a:85:e2:56:28:
                    5e:3e:02:85:8a:84:f9:98:b3:90:6c:b9:05:bc:27:
                    52:49:a0:37:5b:b0:59:2f:1b:93:79:e8:4d:69:0c:
                    ec:07:9b:97:96:65:83:43:94:bd:d9:d4:a7:14:a9:
                    2a:89:f8:1f:98:82:02:fd:3d:6e:09:aa:d4:6a:f6:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:2C:EB:26:7F:98:DD:89:CE:63:20:EA:9B:4C:80:4B:77:6E:A3
            X509v3 Authority Key Identifier:
                keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/21DB5BC4FAAA11F0A3B995435A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3f:9b:f9:b5:9e:51:93:a7:50:3c:e9:f1:d1:a0:1a:a2:65:
         2c:7e:cc:29:28:08:a8:85:56:b5:cc:75:43:01:5d:71:9f:b8:
         af:2a:3f:bc:a9:0c:f7:ba:61:11:f9:85:90:d5:e4:e9:92:63:
         e9:64:39:b7:3d:4e:93:f4:40:53:fc:45:88:ba:5d:52:5a:bc:
         b1:3a:a9:8c:6b:45:3e:93:5e:5b:1c:95:81:a6:bc:43:ab:b9:
         7e:c2:46:c2:53:6a:4d:b9:17:7d:08:c5:f9:9c:33:b7:fc:b3:
         de:9c:05:54:9e:5c:05:b5:7e:76:dd:48:1d:8b:b0:1b:c9:9d:
         56:6b:b0:e9:cb:f9:57:b3:e3:98:31:f9:54:ef:c8:bb:35:71:
         cd:91:1f:c5:94:ac:d8:1e:37:3b:51:25:3c:32:fc:ad:e4:bb:
         a6:76:bf:65:18:a7:21:9c:fb:c1:31:69:19:44:93:39:2a:28:
         84:fd:df:11:56:f5:26:84:b2:17:d1:15:d9:57:17:4b:36:28:
         c6:88:a6:6a:e5:2d:29:8d:0e:aa:ad:d9:3d:2c:99:74:cd:c8:
         70:c6:e4:57:58:cd:12:27:66:ea:13:fc:71:be:1a:0c:9d:02:
         14:a0:73:ac:53:e2:c8:b2:66:6b:50:77:36:99:e5:83:54:69:
         13:d8:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:13 2026 by rpki-client