Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
File:                     604F4E3C0D6611F1AAA528DE1B3D8C67.roa (raw, json)
Hash identifier:          cH/TkLam12oYAB6TtZ0/yt4UNekf8y+bb6pnJp9KeZM=
Subject key identifier:   A9:51:BB:2B:3F:F9:5F:D2:C2:53:42:74:FC:0E:63:01:92:D1:87:28
Certificate issuer:       /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial:       07
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
Signing time:             Thu 19 Feb 2026 07:41:18 +0000
ROA not before:           Thu 19 Feb 2026 07:41:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     151151
IP address blocks:        151.158.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
                          rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
        Validity
            Not Before: Feb 19 07:41:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6996be9e-a805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:76:a7:2d:04:72:ba:62:32:cc:f7:49:d6:
                    18:ab:95:fc:70:27:1a:c0:42:18:17:60:ac:f7:f8:
                    17:c5:2c:37:b8:13:70:8c:a1:dd:a0:3c:98:ea:77:
                    22:29:22:6a:6c:45:bd:03:04:57:e0:4c:6e:e0:3d:
                    29:ec:98:ff:44:68:97:71:16:dd:0a:54:c0:d8:cf:
                    29:0b:bb:85:57:1f:92:26:46:71:79:92:b9:d9:00:
                    f2:53:c3:ed:f8:9b:2a:63:fc:dc:0e:b6:df:d1:0a:
                    40:68:3e:6a:3f:b0:b8:f2:84:82:e0:0d:97:ac:57:
                    67:af:b5:93:f6:f2:ad:ed:9c:d6:f1:bc:3d:67:cb:
                    77:ac:78:7c:6f:53:ab:46:ad:0e:46:f0:ec:b2:b2:
                    1a:4b:5e:cb:f4:7b:06:4a:3c:0e:ef:ac:d9:6b:30:
                    08:f6:15:a8:c2:57:af:9c:7e:2c:78:fd:17:03:fe:
                    4b:d8:ee:71:f4:8e:65:93:03:f8:52:26:05:e8:28:
                    ec:0b:2b:5f:c5:45:b5:0f:93:e6:89:cf:ef:26:fd:
                    65:85:b5:8f:f6:19:39:b4:d8:8c:46:01:79:c1:95:
                    b8:4e:46:5c:a0:d7:a9:11:34:a3:02:88:5b:a6:7c:
                    d7:fb:6e:c0:78:30:8f:3c:5a:bb:b5:d5:7e:0b:04:
                    44:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:BB:2B:3F:F9:5F:D2:C2:53:42:74:FC:0E:63:01:92:D1:87:28
            X509v3 Authority Key Identifier:
                keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:64:2b:a4:31:0d:1a:cd:05:63:bc:dc:e7:6c:6b:11:c6:
         ad:7c:b3:5b:97:3d:d7:ac:55:b3:70:25:2e:b6:03:d8:10:aa:
         cf:1a:ec:22:cc:3b:24:ec:7a:50:db:0a:16:3e:51:a4:08:1d:
         a0:da:4f:c0:fe:c6:66:7e:e5:d8:4f:0f:64:28:5b:44:f6:7d:
         99:1c:95:ec:38:5e:1c:13:6c:25:8e:24:ff:87:74:6a:d9:76:
         46:83:53:4e:18:ad:f6:10:12:72:b5:c6:d3:f9:7e:2a:e6:fe:
         aa:6d:bb:31:25:37:e2:94:26:cb:0b:a1:aa:7c:2a:5f:02:73:
         26:4f:60:5b:8c:fd:70:b8:1a:3b:32:1d:84:a3:c3:ff:84:bb:
         c8:76:0a:22:3d:38:6a:91:d8:01:4f:ff:70:26:4c:0f:d4:41:
         44:de:f5:d7:07:40:34:86:ef:a1:9f:7d:0f:43:5d:9c:c2:c4:
         fa:09:93:59:03:7d:ef:ac:42:bc:1e:64:61:37:69:33:62:ed:
         2d:7c:67:8d:ac:c1:f4:5e:cd:8b:dd:4a:79:0a:ba:40:67:86:
         6c:46:63:96:8e:6d:06:67:89:38:db:9a:c6:29:4e:af:d9:e5:
         16:0a:9a:71:6d:e6:20:17:5e:f9:35:60:92:9a:e2:13:ef:ba:
         eb:1a:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:03 2026 by rpki-client