Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/C5589FB4BF9C11EEAAE7743EC4F9AE02.roa
File:                     C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (raw, json)
Hash identifier:          r8JLXlvLzPq2gpjpqsdsAA62aZEeGZP7MGuYA2653WY=
Subject key identifier:   9B:89:C0:C8:D7:D0:A4:12:46:94:5D:98:24:0C:08:69:2F:0A:4A:8B
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       018A
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/C5589FB4BF9C11EEAAE7743EC4F9AE02.roa
Signing time:             Tue 17 Feb 2026 03:23:56 +0000
ROA not before:           Tue 17 Feb 2026 03:23:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152446
IP address blocks:        157.15.36.0/24 maxlen: 24
                          157.15.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: Feb 17 03:23:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6993df4c-5897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:78:27:71:d4:fa:ac:e1:ae:05:63:16:fe:
                    65:50:0b:71:85:ab:a6:df:b2:5f:fc:55:39:b5:2c:
                    81:42:42:a1:18:80:19:54:04:30:ec:5a:b3:b1:b5:
                    26:60:a7:e8:28:9e:ee:3d:a2:86:f4:f5:f2:9a:8f:
                    71:b7:00:06:28:dc:f5:ca:b2:e0:9b:7c:8f:59:83:
                    ab:42:16:d3:e7:40:71:0c:8d:4f:10:e7:87:c4:5c:
                    55:93:1b:03:6a:f8:e8:40:de:1f:c5:84:e8:51:06:
                    6d:6b:9f:37:9e:bb:0c:1b:3d:25:5c:6a:0b:cd:a8:
                    c1:d1:32:f0:78:56:e7:6a:df:f7:4e:3f:d0:bf:08:
                    79:68:a7:f3:35:9b:a8:ba:ae:67:96:4e:89:1a:a6:
                    54:db:f6:52:25:94:c5:40:2b:a5:6b:5e:e3:3d:20:
                    fe:b3:42:2c:85:75:81:5c:e5:5d:18:22:66:0d:56:
                    62:18:28:7d:1a:9a:53:c9:64:d5:5d:99:40:67:02:
                    3a:95:f0:2f:91:95:66:6a:d1:b7:1d:67:6a:af:f9:
                    df:81:40:87:d4:cf:e9:6f:f9:69:1f:8b:7a:83:d1:
                    bb:ec:c4:81:98:45:a0:df:80:df:62:05:41:8b:c5:
                    8b:16:a2:cc:25:dc:f4:91:27:1a:99:d0:a8:f5:5f:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:C0:C8:D7:D0:A4:12:46:94:5D:98:24:0C:08:69:2F:0A:4A:8B
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/C5589FB4BF9C11EEAAE7743EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:83:fe:a1:df:3d:78:cc:f9:f0:fd:16:df:78:cd:fd:07:e4:
         66:88:a4:ca:65:26:44:75:9f:5f:a4:1e:70:94:00:92:67:d0:
         ae:a7:f9:f4:92:c7:23:bd:ab:0d:dd:f9:0c:33:ba:4c:ee:c3:
         d7:d3:bd:fb:2b:4e:a1:c8:a8:3f:88:24:9b:a7:14:f1:02:43:
         2c:b2:af:f6:b0:22:50:39:23:13:0c:33:0e:46:81:10:25:9a:
         f9:8d:ee:63:8d:51:d1:0b:d1:b3:20:42:8e:9d:6a:e3:4c:ce:
         7b:55:7d:1c:ac:b9:c9:68:27:2b:ff:9c:31:3e:4e:8a:44:5c:
         21:8d:c5:36:92:f3:b4:a8:3e:0a:98:20:43:85:aa:1f:b8:24:
         cc:34:d7:db:a5:5b:9e:d9:13:18:ae:8e:5b:fe:29:a6:1b:5d:
         0f:bb:ce:c6:b8:b2:6a:6e:8e:ca:d9:ee:b9:8e:a4:e6:35:7f:
         e6:63:7b:8d:49:58:b8:24:f0:38:6e:4c:f2:b4:dd:2b:e3:cd:
         de:ed:ba:3d:1d:f9:3d:4b:fc:2e:4d:4d:08:c6:6e:e0:e1:d3:
         a7:60:a3:ef:51:0a:3a:6e:46:65:e9:75:bc:f0:67:e0:ba:84:
         ff:a9:b1:5d:16:b3:66:63:4f:64:12:ed:0b:f8:16:e0:9f:03:
         98:d0:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:40 2026 by rpki-client