Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/50B86BE40BE411F1BD6D7437333D8C67.roa
File:                     50B86BE40BE411F1BD6D7437333D8C67.roa (raw, json)
Hash identifier:          rK9WKxXKgBrVDI2y2co7PsgoS+x3A5F0+M7uXMf8R2Q=
Subject key identifier:   37:AA:BE:15:D6:EB:54:80:3C:AE:D0:47:F9:5C:D5:BA:9B:17:87:28
Certificate issuer:       /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Certificate serial:       02
Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/50B86BE40BE411F1BD6D7437333D8C67.roa
Signing time:             Tue 17 Feb 2026 09:37:46 +0000
ROA not before:           Tue 17 Feb 2026 09:37:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9790
IP address blocks:        202.0.84.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl
                          rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
        Validity
            Not Before: Feb 17 09:37:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=699436ea-f7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:f3:00:23:c5:99:58:95:b1:c2:c6:95:58:
                    9a:23:87:ef:9d:e1:ef:89:2a:9d:2a:03:ef:2a:02:
                    5d:2f:7a:b7:21:7a:c7:df:be:d1:8a:32:95:f5:40:
                    2e:a7:6a:fe:11:ec:70:17:fc:18:54:f1:0c:cc:59:
                    33:a1:1d:94:6a:ed:b1:1b:14:72:d4:b6:4a:2c:03:
                    b1:cd:95:69:f7:06:fa:c4:e8:7a:55:d7:ea:92:0e:
                    1b:bf:55:9e:a6:07:0e:4b:75:96:56:b0:0d:14:00:
                    04:aa:6d:51:66:1b:cc:f5:89:d0:63:8d:70:e1:38:
                    fa:5f:77:ef:79:68:00:3e:27:59:d4:23:ab:fb:b0:
                    c6:d8:ff:21:2f:81:3a:6d:df:ef:f2:7f:c5:86:f9:
                    06:0f:9b:1d:7a:ab:1d:e3:84:de:84:4c:ea:e2:be:
                    35:97:a1:3a:28:aa:72:c5:9f:28:57:bb:91:57:c5:
                    af:ee:a9:c8:1c:e8:66:e1:f8:11:ab:54:28:3f:1c:
                    3b:aa:a0:dc:bf:50:c2:7e:fd:a9:6c:5f:d5:1d:d9:
                    64:e2:36:49:0f:d5:9d:bd:fc:b4:f5:3a:88:d3:a3:
                    24:8c:a8:73:09:47:d2:a0:7b:04:37:4b:78:fd:de:
                    81:4e:82:eb:26:68:14:72:37:3d:44:ae:c2:c6:49:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:BE:15:D6:EB:54:80:3C:AE:D0:47:F9:5C:D5:BA:9B:17:87:28
            X509v3 Authority Key Identifier:
                keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/50B86BE40BE411F1BD6D7437333D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:43:7a:be:a6:3c:55:c1:cf:f5:1f:79:b5:3c:ec:69:b2:
         56:07:a3:11:13:44:18:be:ac:a7:25:d7:d3:06:1a:75:bb:38:
         c3:fd:5c:06:57:e6:9e:17:a8:dc:c2:d1:cb:c7:2b:7d:57:77:
         21:11:4f:16:01:95:cf:9c:8e:60:94:4a:5f:37:77:16:67:5f:
         c9:5f:86:1d:84:6a:2c:b5:f4:b0:31:3c:5f:95:97:0a:de:a5:
         e6:24:6d:90:a3:90:1d:62:96:02:4e:cb:27:e1:5c:80:a0:8d:
         f2:3e:d2:a6:23:0e:cc:b9:63:00:c4:81:51:25:3f:93:12:4e:
         bc:4f:0d:ba:06:41:57:89:18:ec:7c:9b:91:6d:76:24:cb:d4:
         52:70:e5:1f:66:a2:ef:33:8a:f7:83:f3:24:29:2c:e1:36:7b:
         58:9b:97:db:9f:2a:dd:b1:a6:94:f8:a3:e3:95:20:c8:e0:98:
         86:73:8b:e9:38:fb:dd:c6:f4:3f:45:a6:7c:77:7a:ff:aa:f3:
         e4:db:37:56:bc:ec:2d:af:5a:b6:ea:37:11:38:2c:4d:ed:3d:
         c3:3c:fe:37:64:71:dd:5c:c8:78:e0:6c:17:fc:86:09:8d:8d:
         e4:48:f7:56:77:fc:bb:d5:49:ba:a1:e5:4b:69:ca:0c:1f:b3:
         8f:cf:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 16:37:19 2026 by rpki-client