Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/339F0FFA9D9D11F0981B7A12C4F9AE02.roa
File:                     339F0FFA9D9D11F0981B7A12C4F9AE02.roa (raw, json)
Hash identifier:          mlPj9h27GHJcAlUcHuCHIYsZ7D35GZNul1E1Ft+ryUE=
Subject key identifier:   6D:96:F3:C2:31:8D:88:1B:2C:86:9D:B1:27:AF:4D:32:B5:B3:1B:6C
Certificate issuer:       /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial:       EB
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/339F0FFA9D9D11F0981B7A12C4F9AE02.roa
Signing time:             Thu 19 Feb 2026 04:30:57 +0000
ROA not before:           Thu 19 Feb 2026 04:30:57 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55573
IP address blocks:        121.200.215.0/24 maxlen: 24
                          2405:7d80::/48 maxlen: 48
                          2405:7d80:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
        Validity
            Not Before: Feb 19 04:30:57 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69969201-3647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:95:c2:f8:f7:14:02:9a:bd:75:29:d0:42:
                    47:d5:94:30:77:fa:d9:03:06:f4:4f:4b:6a:9c:e6:
                    c3:21:e5:03:28:2d:3e:84:ee:4a:66:d0:24:0c:cf:
                    56:93:aa:f5:10:0e:8b:90:8f:16:32:c6:b9:03:d7:
                    fd:c3:f6:1f:6f:83:a8:47:e0:32:33:fb:57:7d:7e:
                    ba:07:27:eb:8b:0b:b9:11:9c:c2:ff:85:e0:d5:a4:
                    44:72:6e:2f:60:c5:36:07:f3:bc:52:35:40:da:39:
                    cf:07:b0:8e:0e:4e:f7:31:b6:6c:25:45:32:4c:96:
                    e3:41:7c:88:4d:1e:5b:97:31:93:86:15:ac:23:02:
                    ad:09:5e:37:1a:f6:c6:fc:38:49:f8:68:5f:fa:bc:
                    85:b3:bd:e8:a6:04:6c:56:dc:75:b9:99:17:13:23:
                    45:61:52:31:56:49:6a:ba:23:60:86:7b:0e:23:86:
                    ca:49:29:eb:49:86:62:46:18:00:2f:19:bd:88:3d:
                    45:c6:bd:f8:73:ff:97:42:be:23:be:71:7f:f9:cb:
                    9e:3d:78:48:42:5e:0b:d1:6e:74:87:70:84:b4:fa:
                    e3:7f:c1:33:ab:24:9c:f7:c3:1b:9d:00:de:ed:67:
                    a2:a4:dd:83:80:df:55:f4:d9:48:1c:db:c0:e4:09:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:96:F3:C2:31:8D:88:1B:2C:86:9D:B1:27:AF:4D:32:B5:B3:1B:6C
            X509v3 Authority Key Identifier:
                keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/339F0FFA9D9D11F0981B7A12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.200.215.0/24
                IPv6:
                  2405:7d80::/48
                  2405:7d80:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:d2:72:ed:d0:6c:c6:27:c3:14:24:6f:cf:66:1c:97:53:72:
         3d:13:fe:3e:96:76:24:53:5d:7d:86:72:40:a2:6e:b1:c1:80:
         7f:fe:54:89:cd:a2:74:7d:69:2b:20:27:45:48:87:93:5c:89:
         09:98:52:b7:fc:90:04:23:d3:94:1e:ea:89:cb:2a:95:cd:40:
         ec:ed:a6:b1:26:77:f1:4b:38:21:f9:ca:19:b3:a3:c4:a0:0b:
         a7:33:4a:78:43:2b:f9:ec:5c:ce:65:4a:52:78:9c:df:95:27:
         81:32:85:02:4a:17:71:45:81:58:1c:f8:68:4f:6e:bc:12:5f:
         1e:b9:75:5c:73:01:02:20:d8:66:ca:77:1f:67:e9:89:ee:dc:
         dd:51:f9:9e:a9:64:86:b8:17:9c:94:5c:a3:e3:a5:52:51:d5:
         d9:cc:28:ec:76:be:f8:f6:95:a9:04:26:a4:9a:ec:3d:0b:ef:
         c0:b2:28:99:2f:a2:74:e6:90:ad:4e:85:19:e3:ef:ef:87:7f:
         ec:a6:c5:fe:9e:e7:ae:63:fd:66:0a:14:90:9c:df:89:9e:b1:
         85:e2:e1:56:d3:cd:a8:4a:cd:6d:9e:19:ee:b0:55:8f:51:dd:
         74:65:63:18:dd:29:fd:ea:85:36:2b:87:87:0b:f2:91:20:68:
         15:cd:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:15 2026 by rpki-client