Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/0D0AE5040AE711E89D0C5071C4F9AE02.roa
File:                     0D0AE5040AE711E89D0C5071C4F9AE02.roa (raw, json)
Hash identifier:          IpRoMbrsFCuVHBj8xFF5+yeJ63osIqtl+3UrsHmb8ko=
Subject key identifier:   F0:CD:14:7F:A5:31:FA:E4:4B:A9:5E:1C:30:43:3E:26:30:77:A8:73
Certificate issuer:       /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial:       3572
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/0D0AE5040AE711E89D0C5071C4F9AE02.roa
Signing time:             Fri 30 Jan 2026 15:10:19 +0000
ROA not before:           Fri 30 Jan 2026 15:10:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131173
IP address blocks:        218.100.61.0/24 maxlen: 24
                          2001:de9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
                          rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
        Validity
            Not Before: Jan 30 15:10:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697cc9da-9418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:1d:c3:c9:71:f5:04:0b:b7:ce:c0:9f:10:
                    59:14:8a:5f:8a:3b:cd:7a:ba:88:dd:1d:92:ee:2e:
                    ea:e7:3e:73:e1:b4:1f:1f:c3:30:5a:a3:9e:23:be:
                    44:7a:80:f9:14:fc:d4:c1:2c:40:7d:de:3f:57:e8:
                    ee:e5:a6:6a:19:0e:b4:d6:39:0e:8d:ea:c8:29:78:
                    7d:96:b4:8b:56:c8:76:a1:3a:0f:e6:4a:73:bc:ce:
                    fe:de:c4:49:12:bd:15:5e:57:8a:91:ce:cf:73:de:
                    30:78:93:fc:02:ec:d9:d6:b2:90:c8:0b:58:56:27:
                    a5:2b:2f:d6:96:78:41:f6:fc:1f:de:89:59:6a:1e:
                    97:41:c8:05:45:66:fd:59:33:70:7e:ce:9d:32:91:
                    75:3b:9c:9f:0a:7c:f3:ce:72:53:65:51:b7:05:9e:
                    0c:ed:bd:71:45:31:86:dd:de:f2:4a:c8:2f:9b:75:
                    67:12:bb:6d:99:53:42:f3:2e:9b:7f:18:d8:73:9c:
                    79:cf:ce:fe:7e:8b:86:19:fb:74:5b:e8:60:6c:54:
                    b1:bd:eb:18:03:3b:b7:51:de:e9:3b:6e:a7:e0:00:
                    de:73:dd:21:99:55:25:04:ac:2b:e0:62:72:cf:3a:
                    ad:0f:46:82:ac:ac:48:29:10:2a:cc:27:ed:4f:d2:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CD:14:7F:A5:31:FA:E4:4B:A9:5E:1C:30:43:3E:26:30:77:A8:73
            X509v3 Authority Key Identifier:
                keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/0D0AE5040AE711E89D0C5071C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.61.0/24
                IPv6:
                  2001:de9::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:bd:9d:61:1e:87:86:89:d9:dc:ba:ba:64:6c:06:81:ff:
         53:5d:86:89:db:35:05:0f:d5:e0:df:cb:aa:2f:2e:ec:d4:f9:
         1b:6f:57:b3:50:30:f2:22:67:87:16:36:30:e6:40:20:fe:5f:
         58:7c:70:a4:b8:e5:46:bf:b2:45:c9:47:0d:fa:7c:b5:7d:e0:
         94:64:7b:db:84:86:25:9f:b0:16:35:4f:ad:1b:c7:b4:be:81:
         67:15:a9:fe:3e:ce:98:35:37:d1:2e:37:27:49:69:17:4a:95:
         9a:e4:65:b0:14:2a:9c:e4:67:79:32:05:a5:b7:9c:61:99:40:
         65:18:99:5f:e8:28:6d:ec:db:fd:19:32:00:74:62:ac:b6:34:
         5a:d9:3f:63:d5:a6:5c:53:c5:b9:a7:70:99:2f:83:98:53:93:
         8d:82:77:49:62:1e:9b:9b:ef:33:8e:bb:59:72:06:8f:0d:43:
         c9:24:3a:1f:49:18:ae:ca:67:f8:4e:2a:65:d8:e4:24:36:bb:
         bc:2a:82:42:40:76:93:ff:e2:27:12:3d:95:bd:06:0d:c1:f2:
         1c:e0:28:49:e1:6e:ae:f9:52:4d:31:d8:bb:fa:a6:3c:4a:cf:
         ec:5a:88:4a:9b:55:94:a0:0d:30:f8:1c:07:a9:c4:55:3b:50:
         b5:fc:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:58 2026 by rpki-client