Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
File:                     BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (raw, json)
Hash identifier:          HiFjTLozZCcVNUflSCdlWmzWz8aOoc3HnrFxSFDUOAI=
Subject key identifier:   60:EB:A1:BF:4F:A5:71:D2:F5:02:EB:DD:6E:15:2F:C7:1D:73:42:47
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1BAE
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
Signing time:             Tue 10 Feb 2026 16:13:53 +0000
ROA not before:           Tue 10 Feb 2026 16:13:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137483
IP address blocks:        202.144.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7086 (0x1bae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Feb 10 16:13:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698b5941-e7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:81:af:d4:d3:66:72:9e:84:83:63:54:79:
                    80:f3:d5:19:72:ea:87:d6:ed:fa:4f:56:ac:11:d7:
                    33:4e:22:fa:2e:c9:92:cc:f2:ce:54:e5:99:9a:a6:
                    4a:7b:bf:c1:2e:bd:27:5a:0d:fc:c3:59:66:17:a2:
                    fb:0b:d7:79:82:93:64:c6:bb:8b:de:c2:b3:78:7c:
                    d9:fa:70:99:20:5b:49:2f:05:e8:f0:95:f6:41:e9:
                    ef:c2:51:66:f8:e8:33:e1:9a:6d:55:f2:c8:e6:55:
                    ee:f5:fb:6c:95:50:81:4b:19:cf:08:f5:3b:05:05:
                    d3:87:41:9a:c0:7f:05:44:fd:1a:e8:bd:f7:aa:03:
                    21:27:23:33:76:24:3d:eb:1c:ff:55:88:9b:21:98:
                    03:35:31:13:ae:01:a9:ad:42:83:70:c5:c6:fa:84:
                    e6:d8:68:58:69:e2:eb:63:d5:03:8d:67:5a:ea:3c:
                    2b:91:c5:d6:86:6c:1d:3a:a8:b6:36:70:bf:98:1f:
                    fd:f1:63:a5:4e:36:27:23:62:9a:af:4d:93:99:68:
                    6d:bf:32:b6:d9:12:e2:23:28:83:53:e5:5f:e8:bf:
                    96:3f:80:45:16:40:49:2b:33:e3:60:d6:6a:14:5e:
                    05:8e:b8:62:af:8c:d6:66:23:a2:6b:09:9d:9f:c8:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EB:A1:BF:4F:A5:71:D2:F5:02:EB:DD:6E:15:2F:C7:1D:73:42:47
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/BF6CF7EE1D1811E89AF8344EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.144.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b1:c9:f7:5f:55:40:ab:d7:04:23:c6:c0:cb:4a:12:0e:e9:
         03:c8:d6:1f:ad:ea:c5:72:d5:9c:9d:fd:e9:e2:cb:56:89:9a:
         a2:bf:8e:90:2b:e9:0b:b4:07:a1:00:ee:5c:c6:e6:35:e7:5a:
         15:2d:03:0c:7d:b3:b8:ba:42:b2:7f:df:74:26:d3:08:58:20:
         e3:65:39:fc:b3:e0:80:b3:fe:9d:72:61:aa:70:8f:51:02:16:
         69:b3:e7:3a:64:eb:bb:98:db:5d:4a:f5:3d:c5:61:14:5c:e6:
         54:b4:61:8e:0f:24:eb:83:19:51:92:85:dd:55:b9:11:f8:00:
         78:de:b7:df:75:0b:31:ef:1b:71:d3:fb:87:ba:52:08:b0:6f:
         6c:32:8e:fe:07:29:f6:b5:93:90:2f:98:7b:ed:a0:e7:0f:5e:
         af:f0:b8:de:63:91:99:bb:e7:27:90:a5:9b:5d:ff:8b:1d:8c:
         00:c3:88:dc:f8:3e:d0:ab:96:fe:35:4f:c5:0c:81:8a:61:4c:
         94:42:96:29:c5:e8:48:89:ba:24:19:9b:d4:be:a5:d5:b4:2e:
         ca:6f:6e:73:dc:ce:53:96:a6:fa:94:4e:fd:c0:71:68:61:ee:
         e7:b0:80:22:4f:71:e0:d6:b2:0e:46:8f:dc:c6:8b:18:3e:d1:
         de:7a:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:26 2026 by rpki-client