Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/DDFD7F92A36311F0BCF40B3CC4F9AE02.roa
File:                     DDFD7F92A36311F0BCF40B3CC4F9AE02.roa (raw, json)
Hash identifier:          u/ef+wLT7FMIGaLkpQxZZeykZ8rHM5KkEvDLjP/UbhI=
Subject key identifier:   C6:80:C4:F6:02:B4:73:EF:F6:00:39:1A:49:B7:CD:70:78:60:1A:F9
Certificate issuer:       /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial:       0192
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/DDFD7F92A36311F0BCF40B3CC4F9AE02.roa
Signing time:             Sun 15 Feb 2026 04:24:57 +0000
ROA not before:           Sun 15 Feb 2026 04:24:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     150180
IP address blocks:        157.10.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
        Validity
            Not Before: Feb 15 04:24:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69914a99-cd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:31:78:0f:fe:1a:46:bb:60:a3:00:e3:2f:
                    1e:79:1e:24:d7:04:73:1b:fb:a5:a6:70:6e:6b:6b:
                    46:19:29:06:f9:29:ce:4d:cd:5c:66:c0:3a:64:c8:
                    db:55:36:8c:08:4c:6e:b2:94:47:61:ee:f2:a6:9c:
                    5c:7d:5c:d6:88:be:d8:b9:d8:18:db:76:fb:19:23:
                    5b:2c:e9:0f:27:26:a7:07:15:45:d8:3f:3f:69:73:
                    b3:76:68:b5:03:71:2d:f7:e6:ca:ec:ae:1a:74:08:
                    f7:a1:fb:70:a3:46:33:bf:de:0a:d4:3f:46:d2:32:
                    65:8a:91:52:97:8f:f6:47:8e:b7:a9:ba:46:ef:de:
                    13:aa:c0:cb:d1:51:c7:a9:ab:2e:f6:50:55:55:14:
                    bb:3f:b0:12:d5:8a:b7:20:b6:ce:29:49:3a:a7:34:
                    c0:90:08:41:87:51:db:9c:08:b0:a4:8e:20:3f:10:
                    0f:e8:79:a7:40:eb:ca:d1:b5:ee:53:82:49:c0:3f:
                    78:40:f4:2e:96:a1:20:58:f4:61:f5:1e:76:f6:6d:
                    d0:26:22:43:38:23:4b:e4:e7:e1:0e:98:5e:e0:2b:
                    b5:aa:41:7a:c7:27:66:0e:72:88:05:ed:61:e2:37:
                    40:bb:14:e3:3d:17:4b:88:5f:f2:a7:2a:fa:a9:20:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:C4:F6:02:B4:73:EF:F6:00:39:1A:49:B7:CD:70:78:60:1A:F9
            X509v3 Authority Key Identifier:
                keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/DDFD7F92A36311F0BCF40B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:4d:2e:36:fc:f6:0f:a3:63:22:81:31:37:11:ca:48:d4:
         92:24:05:69:9f:a6:0f:1c:6b:6f:3a:f9:94:81:f2:dc:99:ad:
         1b:47:fc:ca:24:08:da:93:a3:b9:eb:b3:50:48:51:95:f0:e8:
         b0:d4:58:5f:30:f4:f5:0e:d1:26:19:d8:83:6c:40:6e:b3:0b:
         5e:6d:4f:3c:05:e3:2c:6f:0f:62:e8:17:9d:e6:5b:da:c1:0c:
         5a:2d:e7:5e:22:b7:4b:7d:5b:2b:b4:8b:f6:2f:0b:49:d7:62:
         71:66:df:ee:7c:58:c2:20:61:8c:fb:c5:96:80:56:59:d5:52:
         e9:61:f1:31:af:a2:f3:69:01:22:52:b9:66:8d:ee:c9:92:18:
         f5:64:c0:31:15:c4:71:89:f2:0b:1c:a6:ca:5c:1f:35:f8:36:
         0c:43:23:61:19:bf:b5:b7:99:75:13:95:41:4f:9d:67:c2:27:
         00:4d:83:fa:f3:f4:1d:08:90:ea:0e:07:06:66:e8:31:b6:b8:
         5f:43:58:bf:7d:7b:1a:3a:a0:d1:13:3b:0f:bf:bf:01:7a:14:
         30:65:6e:08:ca:2b:03:4a:26:98:88:5e:c1:71:f8:13:56:80:
         47:e1:bd:4f:36:95:82:8b:fc:49:73:68:3d:eb:b8:d8:68:bc:
         24:e7:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:50:14 2026 by rpki-client