Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/B66603C6025C11F0BDF41912C4F9AE02.roa
File:                     B66603C6025C11F0BDF41912C4F9AE02.roa (raw, json)
Hash identifier:          PofId3a0j3rHUvyy949KyEekIyYkoZzi18JBnT3rS3A=
Subject key identifier:   DD:40:B2:E3:8F:1E:73:B4:3D:A4:46:9D:F4:91:E9:C8:67:BA:73:F6
Certificate issuer:       /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
Certificate serial:       9F
Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/B66603C6025C11F0BDF41912C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 06:24:52 +0000
ROA not before:           Thu 15 Jan 2026 06:24:52 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133464
IP address blocks:        2001:df4:cac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E
        Validity
            Not Before: Jan 15 06:24:52 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69688833-026d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:ce:f4:37:d1:9d:99:a1:26:be:22:9c:5c:
                    22:68:94:8d:2e:58:60:4a:aa:eb:cf:17:e4:8a:17:
                    81:dc:57:9a:a9:7e:3e:e9:7c:14:ed:7d:7e:95:39:
                    fa:2d:a0:d6:85:da:db:c7:2f:9c:c4:a1:80:77:8c:
                    da:c1:50:ae:b0:4e:7f:c0:38:ef:67:ab:2d:36:e9:
                    b5:10:2c:4a:2a:2d:f0:fa:e8:e9:bf:cd:ea:f7:3d:
                    80:e8:f9:09:2f:24:6f:70:af:11:e8:e2:8f:5c:38:
                    c8:93:e8:b1:83:c6:a4:7c:10:a6:8f:e0:e3:b1:12:
                    79:28:74:b7:ac:e7:5c:fe:2a:0b:3c:53:52:b0:6f:
                    7d:c3:4b:2a:44:eb:16:c9:34:c1:a6:bd:81:33:4f:
                    23:38:39:fe:fe:c0:21:8c:f9:fc:46:c2:87:55:37:
                    46:e1:37:48:eb:8f:8d:dd:a0:4d:f5:d0:ca:64:3c:
                    52:f6:42:e1:a6:5f:bf:96:2e:2b:89:5a:7b:da:22:
                    e8:15:fd:61:df:26:1a:c4:89:1b:78:9a:8d:19:d6:
                    e9:9a:77:70:64:5e:c1:99:ce:6e:47:ee:44:ca:08:
                    53:db:50:2b:60:0f:e5:56:3c:e6:3a:61:c8:0e:59:
                    2a:b0:7f:ab:b8:c3:c3:52:68:79:76:fb:ef:4a:c1:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:40:B2:E3:8F:1E:73:B4:3D:A4:46:9D:F4:91:E9:C8:67:BA:73:F6
            X509v3 Authority Key Identifier:
                keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/B66603C6025C11F0BDF41912C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:cac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:ea:cc:07:5b:08:6c:73:b3:50:8f:69:7d:8e:09:6d:bd:
         9f:bb:d2:a4:b1:f4:3e:16:b4:5b:34:5f:6b:d5:38:e7:fa:ff:
         5b:55:b0:3d:42:38:a3:40:73:48:93:cc:34:5f:b1:82:b3:f1:
         ab:eb:6b:12:47:98:79:05:54:25:4a:c7:d0:65:98:70:cc:f5:
         df:14:80:5b:ac:b3:cc:8a:99:43:6a:7d:b7:3d:4b:f9:df:21:
         c2:51:81:5a:95:b7:2c:7b:22:58:0f:34:32:bb:a0:a1:74:e1:
         6c:a4:f1:f6:f8:31:60:3e:cf:83:06:87:38:9a:d8:f0:67:f0:
         33:7e:b5:85:c5:59:98:4a:38:ca:6a:5e:29:1a:e0:6e:98:02:
         7d:cc:6d:d1:ac:03:60:31:76:2d:53:9a:02:55:c6:83:7d:95:
         29:4b:4d:ea:f0:d4:13:82:45:7e:a6:26:08:1d:a4:b1:88:32:
         b0:b7:97:8b:87:54:82:db:6a:cd:a6:df:83:82:bb:50:10:c3:
         2d:10:89:fa:6a:c4:fb:23:0f:71:fc:34:a9:67:43:83:86:ca:
         1b:e6:70:69:af:45:1b:df:df:57:9c:07:2d:c9:5a:2f:1b:4f:
         90:69:e0:26:c2:15:3b:c9:8f:2f:65:44:27:a7:44:13:ba:b6:
         b1:90:cf:f3
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjM4RjUxMTAvBgNVBAUTKDRGRjU0REVBQkFENDk0NTU5MjUxMDEyQUE1QUMyMjI5
NTBDQjI2MUUwHhcNMjYwMTE1MDYyNDUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTY4ODgzMy0wMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1DO9DfRnZmhJr4inFwiaJSNLlhgSqrrzxfkiheB3FeaqX4+6XwU7X1+lTn6
LaDWhdrbxy+cxKGAd4zawVCusE5/wDjvZ6stNum1ECxKKi3w+ujpv83q9z2A6PkJ
LyRvcK8R6OKPXDjIk+ixg8akfBCmj+DjsRJ5KHS3rOdc/ioLPFNSsG99w0sqROsW
yTTBpr2BM08jODn+/sAhjPn8RsKHVTdG4TdI64+N3aBN9dDKZDxS9kLhpl+/li4r
iVp72iLoFf1h3yYaxIkbeJqNGdbpmndwZF7Bmc5uR+5EyghT21ArYA/lVjzmOmHI
DlkqsH+ruMPDUmh5dvvvSsFPGwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFN1AsuOP
HnO0PaRGnfSR6chnunP2MB8GA1UdIwQYMBaAFE/1Teq61JRVklEBKqWsIilQyyYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzhGNS9GMDI2M0ZGMDAy
NUIxMUYwOUFDRkQ5MTBDNEY5QUUwMi9UX1ZONnJyVWxGV1NVUUVxcGF3aUtWRExK
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjM4RjUvRjAyNjNGRjAwMjVCMTFGMDlBQ0ZEOTEwQzRGOUFFMDIvQjY2NjAzQzYw
MjVDMTFGMEJERjQxOTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30ysAwDQYJKoZIhvcNAQELBQADggEBALyH6swHWwhs
c7NQj2l9jgltvZ+70qSx9D4WtFs0X2vVOOf6/1tVsD1COKNAc0iTzDRfsYKz8avr
axJHmHkFVCVKx9BlmHDM9d8UgFuss8yKmUNqfbc9S/nfIcJRgVqVtyx7IlgPNDK7
oKF04Wyk8fb4MWA+z4MGhzia2PBn8DN+tYXFWZhKOMpqXika4G6YAn3MbdGsA2Ax
di1TmgJVxoN9lSlLTerw1BOCRX6mJggdpLGIMrC3l4uHVILbas2m34OCu1AQwy0Q
ifpqxPsjD3H8NKlnQ4OGyhvmcGmvRRvf31ecBy3JWi8bT5Bp4CbCFTvJjy9lRCen
RBO6trGQz/M=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:29:30 2026 by rpki-client