Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa
File:                     234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (raw, json)
Hash identifier:          16oSe/T5ERt6QIvpUx8Uhu7bkY0/Rsy2A9wnLQLgyi8=
Subject key identifier:   22:0A:D7:A8:AF:F7:CC:90:82:C5:B9:E9:CF:08:CA:F1:81:F7:80:D3
Certificate issuer:       /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
Certificate serial:       68
Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa
Signing time:             Fri 13 Feb 2026 06:26:42 +0000
ROA not before:           Fri 13 Feb 2026 06:26:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153529
IP address blocks:        2001:df4:efc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 06:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77
        Validity
            Not Before: Feb 13 06:26:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698ec422-bd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c2:92:74:23:b4:d4:07:f5:09:66:53:43:43:
                    06:2e:47:4a:76:a6:bf:46:5a:90:00:fa:3c:5e:8c:
                    58:a3:21:f4:db:be:1c:35:87:be:bf:f5:c7:19:5f:
                    cf:6a:62:05:fe:91:75:be:9a:17:e3:33:09:18:02:
                    77:bf:8a:f3:a9:e7:8d:de:fc:21:ff:f0:5e:29:54:
                    00:82:bc:2e:e7:21:96:0c:f3:7c:32:19:39:88:f1:
                    92:19:cc:9c:34:63:9c:80:18:67:61:ac:92:f0:5a:
                    0f:62:12:15:d1:aa:4e:d1:0b:69:7a:8d:57:a8:9f:
                    ca:8c:21:10:5f:82:e0:46:e2:57:68:19:9d:4d:7f:
                    ee:d7:2d:0f:d6:ad:c5:50:90:77:9c:15:0a:79:c8:
                    29:64:79:cb:6a:20:69:3b:f8:af:dc:3d:9a:7c:4d:
                    a8:7f:71:74:c4:14:b1:23:92:fc:3e:ea:26:11:91:
                    50:0e:ef:36:a7:07:0f:a2:4b:b4:6f:c8:3e:e8:76:
                    c0:0c:b3:ca:04:4b:93:d7:58:4b:39:52:52:ae:5d:
                    5a:32:dc:b2:90:e0:6e:a8:77:52:cf:ff:2f:6a:c3:
                    0f:6d:a4:0d:dd:4d:1f:86:ee:5f:78:6d:f3:71:95:
                    08:bf:3b:b9:61:5e:35:98:3e:e6:9c:67:4d:a4:04:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:D7:A8:AF:F7:CC:90:82:C5:B9:E9:CF:08:CA:F1:81:F7:80:D3
            X509v3 Authority Key Identifier:
                keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/234A6D0E6E8911F0AEEA0B14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:efc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:32:5e:fb:20:8c:28:78:3b:98:bd:0f:67:de:d3:6f:7a:
         a4:97:c7:ed:9b:ee:30:4b:42:94:9a:da:5b:a4:26:4b:fd:ba:
         2b:39:a0:61:fa:a2:1c:4c:4a:0b:b5:68:1f:d1:86:99:16:8b:
         2d:13:5e:25:e9:ef:3a:c7:87:d6:23:fa:2f:99:4b:42:99:fc:
         98:c2:4e:89:3f:73:fa:0e:21:78:9f:0d:23:0a:a4:b0:b7:7a:
         1c:72:af:9f:bb:e9:88:05:e0:9c:07:cc:d4:97:24:a1:c2:6d:
         bd:e3:64:b2:4d:67:13:14:32:e3:a1:87:44:b7:ff:f9:5d:58:
         09:f5:08:c2:ec:79:b8:55:1f:b0:c1:d9:2f:6d:66:e2:44:ae:
         f0:23:7d:06:b1:ca:9b:f2:1d:90:45:1b:2d:3f:85:43:63:7d:
         62:b5:82:15:bf:d3:a3:76:2f:e4:46:54:c4:c7:ee:48:af:ab:
         bd:cd:7e:11:cc:c6:3b:b2:22:75:04:ca:93:a7:80:5b:38:ab:
         c5:7c:2a:1a:2c:cb:8e:1e:f8:42:19:f6:a0:a8:95:81:ef:b4:
         25:60:0b:1b:88:d7:5f:00:48:eb:c0:d4:12:7a:df:2f:43:46:
         b0:f4:99:b1:a3:c2:40:24:e5:57:ce:e1:97:4a:34:92:fd:28:
         e7:2c:a6:56
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB
NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE
NkFERkE3NzAeFw0yNjAyMTMwNjI2NDJaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OGVjNDIyLWJkNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNwpJ0I7TUB/UJZlNDQwYuR0p2pr9GWpAA+jxejFijIfTbvhw1h76/9ccZX89q
YgX+kXW+mhfjMwkYAne/ivOp543e/CH/8F4pVACCvC7nIZYM83wyGTmI8ZIZzJw0
Y5yAGGdhrJLwWg9iEhXRqk7RC2l6jVeon8qMIRBfguBG4ldoGZ1Nf+7XLQ/WrcVQ
kHecFQp5yClkectqIGk7+K/cPZp8Tah/cXTEFLEjkvw+6iYRkVAO7zanBw+iS7Rv
yD7odsAMs8oES5PXWEs5UlKuXVoy3LKQ4G6od1LP/y9qww9tpA3dTR+G7l94bfNx
lQi/O7lhXjWYPuacZ02kBNYvAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUIgrXqK/3
zJCCxbnpzwjK8YH3gNMwHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4
ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkY1Ni85MTNDQTZFODZFODgxMUYwQUQ1RDFBMTJDNEY5QUUwMi8yMzRBNkQwRTZF
ODkxMUYwQUVFQTBCMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABDfTvwDANBgkqhkiG9w0BAQsFAAOCAQEAMf8yXvsgjCh4
O5i9D2fe0296pJfH7ZvuMEtClJraW6QmS/26KzmgYfqiHExKC7VoH9GGmRaLLRNe
JenvOseH1iP6L5lLQpn8mMJOiT9z+g4heJ8NIwqksLd6HHKvn7vpiAXgnAfM1Jck
ocJtveNksk1nExQy46GHRLf/+V1YCfUIwux5uFUfsMHZL21m4kSu8CN9BrHKm/Id
kEUbLT+FQ2N9YrWCFb/To3Yv5EZUxMfuSK+rvc1+EczGO7IidQTKk6eAWzirxXwq
GizLjh74Qhn2oKiVge+0JWALG4jXXwBI68DUEnrfL0NGsPSZsaPCQCTlV87hl0o0
kv0o5yymVg==
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:53 2026 by rpki-client