Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/E608220401A611F1B4D1E4C1696F56BC.roa
File:                     E608220401A611F1B4D1E4C1696F56BC.roa (raw, json)
Hash identifier:          lxxNGVx2V93BMBcbJBsNK5SagJ1rX18ykZwSj/NwNJA=
Subject key identifier:   1B:0C:53:FD:4C:95:FA:38:A4:CC:D1:D9:AF:BD:9E:53:40:16:A9:3C
Certificate issuer:       /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial:       0171
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/E608220401A611F1B4D1E4C1696F56BC.roa
Signing time:             Wed 04 Feb 2026 08:52:56 +0000
ROA not before:           Wed 04 Feb 2026 08:52:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     213734
IP address blocks:        2400:b8c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
        Validity
            Not Before: Feb  4 08:52:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698308e8-4d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c1:92:18:42:a4:de:b5:27:ad:1f:5d:62:48:
                    36:80:f9:69:f0:cc:dd:be:e0:f7:7b:2c:16:82:ed:
                    00:b5:40:bc:63:16:39:b0:e6:d9:f0:d2:1c:72:38:
                    fa:2c:fc:0b:f8:dc:2a:68:11:a7:2a:4e:be:0c:0c:
                    53:4e:da:a2:69:00:f5:29:26:37:1a:b5:b8:f1:2c:
                    0d:9b:7d:30:76:be:c9:eb:2d:6d:f9:9d:50:bd:11:
                    20:cb:06:e5:e1:04:8b:7a:34:56:68:e1:78:19:eb:
                    55:07:13:f4:bd:2c:46:8d:c7:b7:57:bd:0b:16:3c:
                    b7:06:42:c0:67:e5:57:4d:9c:33:5c:c6:9f:db:f2:
                    8e:df:1b:31:6a:92:08:2d:dc:e8:ce:85:42:d2:0b:
                    58:33:75:25:1d:31:04:cc:2d:78:11:4d:a4:6d:79:
                    0d:9a:fe:7d:9c:ef:99:05:54:dd:2f:50:c5:ef:cb:
                    37:75:dc:fe:30:13:ed:1d:95:c9:51:66:4d:88:1d:
                    3b:30:cc:38:d0:47:af:3c:66:b3:6c:a3:b4:ae:26:
                    a6:cf:5f:e6:1b:02:21:1e:31:f3:be:96:86:3e:67:
                    4b:35:47:20:4e:82:1d:bf:35:bd:ca:f0:21:ec:c8:
                    c5:0f:41:fd:77:3b:a6:b2:c2:83:26:e6:71:23:33:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0C:53:FD:4C:95:FA:38:A4:CC:D1:D9:AF:BD:9E:53:40:16:A9:3C
            X509v3 Authority Key Identifier:
                keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/E608220401A611F1B4D1E4C1696F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b8c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:11:a9:8a:c4:4c:4b:b0:19:a6:a9:63:9d:4b:44:79:64:a5:
         da:3f:b7:15:46:e6:bd:ad:15:00:07:64:72:e4:41:b5:b4:5b:
         d8:ea:0c:27:9c:c3:a7:f8:76:d4:e7:ea:cc:e4:e1:fd:4b:96:
         ba:54:43:06:b7:f8:99:03:39:5f:15:7d:51:00:f9:43:1a:df:
         67:a8:a7:12:46:9c:02:4b:81:d1:fe:c4:69:86:f4:a2:57:04:
         fd:7f:18:ec:b2:fb:30:05:96:f3:38:cd:9b:9f:4e:78:14:18:
         15:89:4d:b8:85:fa:d8:5d:05:cc:f7:e7:8a:0a:92:34:2b:f5:
         5b:50:07:cd:9d:33:52:5d:8e:6e:61:43:65:94:0b:53:f4:d7:
         bb:3a:be:11:ed:fe:d8:92:b4:87:fe:af:48:19:bf:46:7e:80:
         9b:e0:52:a6:a7:2e:3f:fe:b7:2b:8b:fe:7a:8b:25:45:0c:26:
         44:00:6d:d4:c1:63:bb:49:99:2f:f9:7f:e2:83:79:9e:61:5b:
         95:43:51:d5:41:6b:60:6d:ba:93:31:70:71:0e:e8:ab:61:1a:
         0a:63:9e:bb:59:17:e2:ca:c4:07:06:ac:df:ac:dc:c6:a9:a6:
         a5:4a:ee:4f:bf:1f:22:0b:92:9d:76:39:e4:ac:7c:7a:78:5a:
         1b:77:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:51 2026 by rpki-client