Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa
File:                     DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (raw, json)
Hash identifier:          PEGA4OC8mv05BIyz+nUXG4RC+NNc/DMmZ+NwYP8Ecm0=
Subject key identifier:   17:25:36:25:D8:0B:3C:18:08:31:1F:4B:EE:F8:06:A2:0F:B2:37:D0
Certificate issuer:       /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
Certificate serial:       0A7E
Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa
Signing time:             Wed 04 Feb 2026 19:16:48 +0000
ROA not before:           Wed 04 Feb 2026 19:16:48 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136170
IP address blocks:        123.100.226.0/24 maxlen: 24
                          202.157.176.0/23 maxlen: 24
                          202.157.184.0/23 maxlen: 24
                          202.157.186.0/23 maxlen: 23
                          202.157.186.0/24 maxlen: 24
                          202.157.187.0/24 maxlen: 24
                          202.157.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 19:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686 (0xa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802
        Validity
            Not Before: Feb  4 19:16:48 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69839b20-d2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:50:ea:44:22:13:ac:59:75:c6:76:09:d4:
                    59:f3:e3:c8:d1:b6:96:f7:5e:fe:18:37:05:c9:70:
                    8c:d9:65:5b:b9:29:ed:5c:ab:a2:c7:4c:61:3a:f1:
                    69:70:ec:12:b3:ba:c1:84:24:5b:e2:b9:83:2b:fd:
                    5f:1f:8f:ec:07:99:78:0c:f7:c9:b0:eb:0c:68:a8:
                    3b:04:fe:4c:6f:2b:43:7a:c8:e1:f0:0a:6c:3c:47:
                    06:77:19:05:a1:75:ea:ae:94:4d:0a:e0:b9:d1:77:
                    66:fa:de:e1:9f:f9:a4:77:b3:2c:09:99:09:4d:76:
                    77:26:86:db:0a:82:ac:f6:49:46:dd:70:d0:90:b7:
                    38:da:11:85:d2:1c:07:a2:14:34:75:8d:7e:76:e6:
                    9c:0c:b6:d6:49:79:70:ef:54:94:5a:04:6c:a4:b3:
                    b7:c5:80:24:26:24:1c:27:23:af:36:7d:01:d7:e3:
                    76:f4:a1:bd:6a:75:38:01:2e:b3:73:56:6c:9b:14:
                    ec:3f:75:e3:db:e7:a1:47:91:46:91:bf:33:d0:f9:
                    f5:f3:52:e6:6e:96:69:2a:86:f8:a2:af:2b:ae:a7:
                    c6:37:d6:d2:ad:ff:f7:4a:ee:9a:35:17:cf:cc:db:
                    6b:c3:33:4c:5e:74:76:37:9a:c0:dc:5b:0c:aa:a8:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:25:36:25:D8:0B:3C:18:08:31:1F:4B:EE:F8:06:A2:0F:B2:37:D0
            X509v3 Authority Key Identifier:
                keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.100.226.0/24
                  202.157.176.0/23
                  202.157.184.0-202.157.189.255

    Signature Algorithm: sha256WithRSAEncryption
         52:12:3e:4f:1b:b4:3d:c7:4b:ed:61:a3:76:c0:cb:af:ee:03:
         ab:be:46:04:cd:4c:6c:d4:09:7d:a2:69:c1:a7:7d:9d:f3:c4:
         52:5d:5e:9f:15:85:3a:eb:84:b4:ff:99:ba:cc:c3:8f:c2:db:
         c6:8b:6e:08:82:c5:5f:44:85:c2:78:d1:c5:f7:07:72:dc:d4:
         e0:22:01:ee:ab:13:98:a6:24:64:f3:93:0d:02:0b:b7:3e:2d:
         b9:e4:7e:7e:ef:29:5d:ff:64:33:1b:41:83:d1:d1:5f:99:79:
         c0:83:51:01:2c:05:e9:47:45:be:72:21:bd:ac:70:5f:ef:bc:
         b6:09:09:2e:83:de:9d:36:68:09:1b:b7:53:45:87:1b:2a:2e:
         60:bd:65:19:f9:1a:d6:d0:eb:b7:33:d5:8f:c9:c9:c3:64:ae:
         6e:75:3e:32:ee:71:23:1f:d8:d5:bb:87:d2:5e:6e:83:6f:d1:
         e6:8f:e7:c5:37:eb:4f:5f:c7:31:a4:5e:0b:2d:ab:31:68:02:
         9d:65:28:94:52:e0:18:51:6b:22:f9:7a:08:29:a5:3b:f7:34:
         66:b1:cb:ed:f6:40:bc:f1:cd:4d:ff:8f:c9:37:e7:cd:25:96:
         eb:03:02:41:1b:d4:10:8e:aa:2b:a8:74:bb:14:ff:d6:ab:ea:
         8c:f5:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:30:37 2026 by rpki-client