Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/5C5B89FAFF1D11F09172691B85EE528E.roa
File:                     5C5B89FAFF1D11F09172691B85EE528E.roa (raw, json)
Hash identifier:          z2QIltrcSQaqvYrXYWkehkkyydyNtNl8zpD6v7MdsWw=
Subject key identifier:   95:8B:D4:C4:5D:93:3B:E3:C6:84:2A:23:E5:ED:03:F5:7B:DB:E5:58
Certificate issuer:       /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1
Certificate serial:       01C3
Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/5C5B89FAFF1D11F09172691B85EE528E.roa
Signing time:             Tue 03 Feb 2026 03:22:56 +0000
ROA not before:           Tue 03 Feb 2026 03:22:56 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     149250
IP address blocks:        203.175.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl
                          rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1
        Validity
            Not Before: Feb  3 03:22:56 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69816a10-6e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:65:4e:89:e9:30:95:f2:45:69:a9:67:2c:
                    ae:4a:3c:51:b4:cc:a6:24:3b:83:d4:f1:57:0d:68:
                    20:f3:d2:77:94:39:f5:0c:c8:1e:e4:a6:a2:9f:56:
                    69:00:c1:5a:ae:c4:44:31:dd:b9:5d:9d:e8:77:86:
                    eb:f2:eb:c3:b2:ce:5f:7e:29:39:af:79:16:4b:3f:
                    02:0f:7b:c9:63:5d:c1:10:d8:d5:27:0b:c2:e6:bc:
                    73:49:3c:0e:50:62:43:28:05:cd:53:92:68:9a:ac:
                    14:4b:a7:00:d0:b8:78:15:7f:97:44:11:31:77:9a:
                    8d:72:57:4d:20:9b:28:66:36:e0:cd:b6:38:16:22:
                    c4:fe:cc:c9:d9:64:c9:e9:a6:d2:82:8b:bf:bf:54:
                    3b:e8:c0:bc:f9:76:19:cc:d5:11:39:10:c4:fd:83:
                    d9:c6:13:9e:e6:1a:eb:0b:6f:21:d7:a8:96:60:9b:
                    2a:e1:ef:de:b6:c6:07:f7:54:26:b6:24:2d:a5:17:
                    ec:d5:5e:21:55:e1:67:6a:b5:d6:77:b9:23:98:85:
                    25:b1:87:7d:94:de:39:18:10:fc:73:a6:6d:e3:d1:
                    d0:f2:d9:be:f4:74:4a:b8:31:f3:00:1d:3a:eb:a1:
                    d6:34:dd:0d:a1:4b:98:d7:43:66:65:c3:bf:b3:7a:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8B:D4:C4:5D:93:3B:E3:C6:84:2A:23:E5:ED:03:F5:7B:DB:E5:58
            X509v3 Authority Key Identifier:
                keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/5C5B89FAFF1D11F09172691B85EE528E.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:df:02:c8:fe:7f:04:ca:80:08:c9:65:3c:e4:87:9e:a3:64:
         98:98:56:cf:f1:21:4f:1f:72:33:85:31:66:fd:96:2d:95:13:
         e0:96:d7:ce:8f:1a:b7:29:38:e9:b9:fd:f4:ef:61:38:72:46:
         4d:15:39:38:21:b9:f6:f6:da:76:29:77:ce:11:b5:e1:eb:7c:
         d8:45:43:85:54:0f:36:16:4f:4e:42:ad:14:9c:28:78:7b:d7:
         02:ee:5a:8e:d4:6a:8e:ac:a1:3c:5a:82:c2:c0:7b:ef:02:08:
         1b:73:54:82:b9:71:b2:68:ca:93:d8:61:c6:25:71:03:47:e5:
         17:ec:1b:f4:e6:80:f4:49:29:c7:b9:2d:22:eb:0f:94:63:7a:
         74:19:39:6c:8c:28:8d:39:fd:90:1c:f3:9d:8d:c9:5f:8b:90:
         f1:f8:69:b1:2c:cd:c3:bc:5f:f9:28:fa:8a:a5:f6:18:ac:e4:
         12:a3:c0:0f:15:d2:b6:84:ed:59:38:aa:70:61:8c:7f:ce:11:
         1e:78:e8:88:52:a0:23:7a:b1:6b:98:d4:8b:be:98:db:59:d5:
         6a:1a:b4:0b:17:17:7c:87:7c:d2:b8:88:7e:1a:cb:7a:9c:7b:
         90:71:a0:a6:89:ab:4c:c9:dc:da:03:62:10:6e:2a:d5:21:02:
         7d:68:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:36:04 2026 by rpki-client