Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/DC23F5180E1611EF91DF311EC4F9AE02.roa
File:                     DC23F5180E1611EF91DF311EC4F9AE02.roa (raw, json)
Hash identifier:          LRJxPRAmR3JlEgcNd7QBxJ2k/VEc8kHvg4RkNVnDwmc=
Subject key identifier:   D1:C4:F8:AC:57:D1:F0:DD:05:8D:FE:A1:41:BD:47:FE:C2:B2:A5:FB
Certificate issuer:       /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial:       016D
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/DC23F5180E1611EF91DF311EC4F9AE02.roa
Signing time:             Tue 03 Feb 2026 04:23:11 +0000
ROA not before:           Tue 03 Feb 2026 04:23:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138195
IP address blocks:        2400:b8c0::/32 maxlen: 32
                          2404:2040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
        Validity
            Not Before: Feb  3 04:23:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6981782f-0596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:4f:eb:13:71:3a:e7:d7:eb:5e:4e:33:2a:
                    65:40:3c:88:a5:3c:22:94:42:d5:2e:5f:cf:81:1a:
                    5a:8a:4a:6e:e7:84:e4:81:5c:1e:b3:6b:0c:4d:1b:
                    59:7c:ed:d1:55:76:5d:7e:02:7a:f1:bb:fa:6b:1e:
                    a8:1e:18:db:d5:b0:da:6a:c6:61:c2:d8:25:ea:20:
                    21:c4:fb:15:83:8a:ad:49:b0:ed:a9:2e:06:3b:52:
                    f7:ac:e7:05:c7:1d:72:60:7c:bd:3a:ad:be:c4:32:
                    9a:7f:33:f7:a5:0e:dd:84:a6:f6:d9:31:53:d3:aa:
                    9f:00:f5:1f:59:13:47:90:e8:6c:00:7c:da:a0:b7:
                    70:3b:da:57:d7:bb:96:9b:4b:9d:a1:67:85:9d:22:
                    79:72:d3:4a:fb:4a:26:1f:a4:cb:a8:b7:b7:e9:53:
                    2e:f0:74:40:a5:25:75:93:23:65:f2:a7:4c:bf:b7:
                    5a:34:ec:96:6a:18:6e:71:8b:96:5e:25:d4:5f:9f:
                    75:e3:c1:86:bb:9a:8a:bc:34:88:0c:e1:a7:c1:99:
                    cb:3d:b3:1c:6b:58:69:f9:13:64:25:68:be:d8:ad:
                    b6:56:27:67:53:86:3d:1b:09:a4:bb:f5:82:96:89:
                    20:d8:97:5b:4f:b4:f6:35:96:36:59:eb:5d:6f:67:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C4:F8:AC:57:D1:F0:DD:05:8D:FE:A1:41:BD:47:FE:C2:B2:A5:FB
            X509v3 Authority Key Identifier:
                keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/DC23F5180E1611EF91DF311EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b8c0::/32
                  2404:2040::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:af:f5:aa:63:ef:6e:af:de:60:4b:15:58:ce:69:a5:72:4a:
         9e:b7:22:0d:dc:12:dc:71:0a:da:ec:3c:20:e2:ce:57:5e:f1:
         22:7c:4b:fb:2b:79:a6:8f:2e:3f:63:99:13:f7:2f:f7:94:6d:
         24:c1:5e:5f:08:e2:12:96:21:fd:6c:1e:03:a9:17:83:7a:f5:
         49:53:fb:82:47:d3:f0:21:19:45:13:25:80:f6:16:ee:21:be:
         72:0b:ac:07:c4:56:cd:b6:2c:e9:dc:33:9f:ac:a1:fb:13:84:
         97:8d:62:5f:da:7c:d4:7a:3d:82:d6:17:e4:1f:d9:17:a2:8a:
         f5:b3:59:f1:06:31:95:49:d4:74:da:60:27:a9:e1:d9:bf:9d:
         8e:37:03:3c:63:ec:0c:31:70:98:0e:0f:ad:b2:89:ec:7f:2e:
         ad:4b:4d:24:72:c1:ca:b8:48:3e:b9:a5:9b:5b:93:de:5b:75:
         74:96:b5:65:c2:a4:26:ed:cd:c9:2b:f6:ec:dc:78:42:cd:33:
         73:cf:f1:07:e0:0d:ba:c3:83:50:ef:c4:b6:28:5c:e5:e5:99:
         e0:d8:a5:93:03:e8:da:09:c4:9e:e4:58:96:b1:3e:49:3f:ae:
         78:31:74:cd:a5:be:a1:64:96:ac:af:4c:17:72:a2:f7:c5:9e:
         c5:7e:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:56:13 2026 by rpki-client