Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/4CC50DB2BB7811EE9416DD42C4F9AE02.roa
File:                     4CC50DB2BB7811EE9416DD42C4F9AE02.roa (raw, json)
Hash identifier:          8yE9MG5A2NPViP+U2CeIPknx4OCBEqmdHDVLDvoFhyg=
Subject key identifier:   AA:92:A7:4B:A2:17:FE:C2:CA:1B:67:EE:A3:E9:3D:53:8D:8E:93:4B
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       0185
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/4CC50DB2BB7811EE9416DD42C4F9AE02.roa
Signing time:             Tue 17 Feb 2026 03:23:57 +0000
ROA not before:           Tue 17 Feb 2026 03:23:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152446
IP address blocks:        2001:df3:66c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Feb 17 03:23:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6993df4d-2e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:4d:99:24:57:e8:b0:30:6e:f8:a4:43:d6:
                    a4:6f:28:5c:81:92:97:12:c9:d0:e6:59:05:78:c8:
                    f8:4c:df:af:dd:f5:88:a0:89:20:70:93:7c:1f:b3:
                    bf:08:55:4b:7a:71:b3:a0:d0:e8:5e:d5:08:6c:98:
                    e1:84:9c:da:63:83:27:19:48:74:14:14:d3:23:81:
                    9a:3f:f2:23:07:f8:75:99:c8:1b:b0:a3:66:09:50:
                    dd:21:66:89:dd:77:c6:45:05:f8:89:d1:42:3f:c9:
                    f5:e7:6b:63:5b:b7:4a:d9:e2:ff:e0:f0:10:3a:16:
                    42:0c:d1:9f:d0:9e:ef:4c:81:36:fa:e0:e8:ef:f1:
                    5b:3a:17:db:b7:69:14:02:e4:54:cb:a4:8d:23:75:
                    a8:dc:b1:cb:79:e9:1a:95:4d:fb:d3:6d:9d:35:b2:
                    e2:a0:b4:f1:37:67:31:06:a3:2b:69:59:78:c7:e8:
                    ee:82:26:1b:e0:73:63:44:e6:89:0c:f0:d3:58:92:
                    7c:33:18:0a:6f:9c:67:c7:cf:58:cd:91:df:54:73:
                    7d:70:76:69:93:b0:3a:b5:6a:18:fe:dc:e9:8c:b4:
                    3f:61:e4:7c:ab:c6:5a:9c:1d:d0:ff:4f:51:e6:e8:
                    cc:db:08:08:03:a7:e9:6c:8b:59:40:c6:51:22:36:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:92:A7:4B:A2:17:FE:C2:CA:1B:67:EE:A3:E9:3D:53:8D:8E:93:4B
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/4CC50DB2BB7811EE9416DD42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:66c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:9b:7e:a7:37:1c:ba:4c:5d:90:bd:65:97:08:f7:53:79:
         f9:78:0c:bd:81:4f:2e:5d:b6:f9:af:66:56:eb:09:80:01:95:
         c5:8b:05:3a:bb:7a:35:fa:5f:1e:55:9e:c9:b5:33:08:05:3f:
         ee:f9:8d:28:6b:de:b4:8f:9a:bb:87:b7:7b:a3:ef:df:93:af:
         5d:da:db:bd:14:db:bd:15:b5:75:d0:b7:79:cb:ae:81:6d:5a:
         ca:80:42:e9:e0:c2:a2:2c:ae:dc:55:7f:96:8f:65:99:7a:35:
         5e:0f:af:fd:30:a6:85:7e:f3:26:2a:64:3c:97:42:6f:f6:a6:
         7c:e2:4e:8f:91:43:e6:b4:91:dc:fb:fa:c4:21:a4:f3:e3:c2:
         06:09:9d:ab:7a:8f:2b:b8:31:2b:1f:c4:10:84:1c:08:d8:13:
         a9:1a:55:60:49:c5:56:8d:52:82:80:17:65:ad:fd:70:67:35:
         70:c3:32:ae:85:cd:89:93:22:2d:da:23:58:41:3a:6b:1e:87:
         d4:67:a8:75:b2:18:ce:68:8e:93:c2:cf:e0:27:0a:5e:ad:ce:
         ac:bc:d7:0d:4a:1d:f3:bb:20:d7:ad:94:c7:1a:f9:d8:66:87:
         57:9b:2b:e0:18:7b:fb:b5:a8:e7:94:f7:e2:7c:77:f9:53:17:
         91:4d:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:31 2026 by rpki-client