Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/42BB5BC2CB8A11F089E0C00EC4F9AE02.roa
File:                     42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (raw, json)
Hash identifier:          EBayu0sLpBe8B0MjHeDB2/9eOysyyjh5iF6SU6X/sqA=
Subject key identifier:   46:63:B4:37:24:6E:EF:EC:AF:EB:81:FD:5F:96:93:D6:5A:4C:3E:3A
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       0868
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/42BB5BC2CB8A11F089E0C00EC4F9AE02.roa
Signing time:             Mon 16 Feb 2026 20:17:37 +0000
ROA not before:           Mon 16 Feb 2026 20:17:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24323
IP address blocks:        150.107.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 20:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: Feb 16 20:17:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69937b61-69a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:71:a7:38:fd:89:2a:e7:a1:ae:16:44:61:
                    54:9b:bb:d6:48:68:15:22:a1:ab:70:c0:b0:bd:29:
                    1d:a0:29:a7:0c:42:54:13:75:60:62:17:65:25:1c:
                    35:a7:0a:dc:0b:65:79:5f:a5:0a:b4:92:9a:bb:e1:
                    0a:cc:98:79:f5:8c:37:e1:0e:fb:9c:82:07:62:54:
                    73:ca:43:24:d4:22:4d:0d:b4:4d:c7:26:30:df:65:
                    ef:09:f4:49:6e:2c:27:e6:95:4c:8d:f7:52:2f:aa:
                    e1:9c:b5:c5:8d:41:6a:e9:a2:5e:79:b5:52:d0:72:
                    dc:3d:79:3d:6e:d1:83:7f:45:71:c7:7c:9c:27:e5:
                    ba:7d:e5:0b:6d:19:cd:a0:7a:48:c9:1a:fa:f8:2d:
                    07:f3:bb:e8:6f:32:ba:db:43:79:b4:91:bc:e0:1e:
                    05:28:55:22:3c:f2:d3:2a:a5:64:a9:8b:49:69:27:
                    ba:c8:13:ae:51:be:9b:d2:b8:55:1a:aa:13:93:21:
                    ab:e9:94:2d:02:9b:a4:aa:6c:a7:2f:4a:a1:35:d7:
                    6c:e7:df:7b:27:5c:f3:94:10:c6:75:24:14:1e:12:
                    a9:10:ef:08:97:b2:49:57:39:20:1f:e1:37:b8:29:
                    dd:e4:78:a7:a7:00:da:c5:2f:10:ca:6b:9c:42:55:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:63:B4:37:24:6E:EF:EC:AF:EB:81:FD:5F:96:93:D6:5A:4C:3E:3A
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/42BB5BC2CB8A11F089E0C00EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:98:7c:61:1f:e6:69:be:08:fa:a2:3e:d4:03:0b:b2:83:
         fc:5f:8e:f6:d0:d5:28:f0:14:b1:6c:cf:35:a3:8c:d7:56:a3:
         11:b0:27:e8:28:80:82:22:23:4f:b5:65:a6:4d:75:5f:c3:bd:
         cd:49:1d:e9:fb:df:f2:1a:0b:a4:20:2d:e6:5f:1d:29:b5:a5:
         ca:33:9c:56:b4:9b:2f:f7:ee:62:c7:8a:8b:21:63:e2:ad:ee:
         ae:a0:a1:59:6c:ac:f7:cf:1b:db:01:8b:93:37:0f:d5:89:22:
         25:1c:c8:c2:58:8c:38:7c:e5:cd:e8:9e:5a:f5:74:5f:ae:91:
         95:1c:f3:eb:db:4a:10:df:92:d3:ab:a7:c6:b5:3b:34:77:e3:
         32:dd:5f:42:e2:94:1b:e5:48:7e:55:1d:cd:78:a5:52:46:98:
         23:21:e0:08:cf:0e:9c:2b:11:93:c9:18:28:f7:d8:8a:34:fe:
         24:41:37:7a:42:0f:08:c6:ab:e2:5a:07:67:67:01:ea:24:22:
         0a:9b:74:dd:4f:a8:25:5f:7e:0b:88:ad:db:08:f4:aa:e4:a0:
         e0:96:51:32:83:f0:98:e1:ce:30:5a:6e:60:5e:27:09:22:05:
         e9:e5:5e:a2:f5:69:98:b3:69:b5:66:67:74:8b:64:a7:35:52:
         e9:fb:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:05 2026 by rpki-client