Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/C4D99CDE097B11F1B8223907113D8C67.roa
File:                     C4D99CDE097B11F1B8223907113D8C67.roa (raw, json)
Hash identifier:          ThQ8ppUYfeb2Qw5EhNX4FvjUJZr8rE2NhELwx6O1w44=
Subject key identifier:   A1:86:75:95:7F:6E:3A:7D:D8:C8:FD:90:F5:E9:BA:D5:A6:8F:7B:66
Certificate issuer:       /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial:       02
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/C4D99CDE097B11F1B8223907113D8C67.roa
Signing time:             Sat 14 Feb 2026 08:04:21 +0000
ROA not before:           Sat 14 Feb 2026 08:04:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152702
IP address blocks:        151.158.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
                          rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
        Validity
            Not Before: Feb 14 08:04:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69902c85-2150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:98:ee:70:43:b2:d1:71:e0:78:14:ca:32:
                    b1:f3:47:60:01:5f:6b:11:b1:58:53:a5:d7:ea:62:
                    d7:32:70:e5:c2:e9:77:d9:37:24:ad:12:88:8e:3f:
                    d8:bf:0a:f2:1d:fd:1a:89:93:2b:bf:c8:65:cd:ee:
                    98:1c:cb:fc:6f:2e:73:98:6d:1c:f0:6f:15:93:18:
                    0e:13:79:83:bd:ec:70:9b:f6:45:1f:a8:c9:45:b9:
                    23:e1:c6:00:f4:cb:48:de:ca:c2:8e:ae:fa:30:32:
                    cf:2c:6d:05:94:fe:89:45:5a:31:86:1f:bc:93:2b:
                    81:72:ee:98:99:7c:85:08:0e:14:b0:c4:66:51:3d:
                    e5:b7:f1:2f:fc:4c:91:a7:77:d6:a7:ff:be:07:c5:
                    a4:a3:3c:2f:8c:52:a7:39:4b:37:a3:dd:2c:ab:10:
                    b0:e0:26:f6:af:fe:fc:3f:d6:0b:59:6f:60:21:a6:
                    e5:36:2f:18:91:7c:18:b8:82:ea:8b:64:fc:b2:f7:
                    00:53:a1:2f:81:a5:f3:73:4f:37:c3:41:ef:0b:67:
                    7f:82:57:1a:d4:08:50:6f:e4:89:50:1d:75:92:14:
                    eb:2a:06:97:fe:ef:84:19:50:c3:e5:7f:5b:54:c8:
                    4d:18:7c:f5:54:9e:b6:6f:44:01:b9:73:25:6a:0e:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:86:75:95:7F:6E:3A:7D:D8:C8:FD:90:F5:E9:BA:D5:A6:8F:7B:66
            X509v3 Authority Key Identifier:
                keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/C4D99CDE097B11F1B8223907113D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:59:bd:3a:91:bd:2c:74:b3:df:c6:ec:e1:63:ad:b0:aa:2d:
         44:4b:52:7f:7b:4c:5c:df:24:90:a8:b4:95:15:13:14:54:15:
         d8:0a:62:e8:55:73:fd:2c:53:08:03:5a:71:c1:b2:1a:b1:8d:
         00:2a:3d:47:97:79:73:69:ed:19:0e:14:c3:d3:71:f1:04:cd:
         fd:36:0a:7d:67:ac:a5:10:72:8c:7b:54:3c:d0:58:73:0f:53:
         cf:01:fc:e8:be:fb:6d:16:4f:0f:5f:ec:8d:9e:6b:c7:36:87:
         07:67:48:be:30:a3:25:67:ea:c1:8d:3b:21:ad:d7:c5:1a:a5:
         73:99:d2:29:22:2a:20:20:66:11:5e:8d:96:d0:3f:53:a0:7d:
         3c:88:ee:64:2a:38:e8:7a:0d:8b:db:87:5d:0a:b2:a6:8d:bb:
         09:f5:e9:51:a2:a4:97:5a:26:d8:09:da:35:06:71:fe:50:1d:
         6f:00:f6:8f:17:66:7a:a3:29:6b:5a:6e:2f:6f:f4:f7:48:37:
         42:9e:58:06:a9:fb:ef:df:82:87:f6:50:71:b4:0c:8e:39:1f:
         ad:36:b8:f1:2a:07:1c:64:db:c3:55:83:b0:c6:62:fb:0d:7d:
         91:07:6d:3c:88:d1:dd:0f:7e:6e:e6:41:8c:d9:b2:6a:95:03:
         23:cf:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:21:27 2026 by rpki-client