Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/13310E94FCD011EF8F21DE62C4F9AE02.roa
File:                     13310E94FCD011EF8F21DE62C4F9AE02.roa (raw, json)
Hash identifier:          ApdFyW904bBRZsKVN26BsvBd/hhNGyywYh2XEtsIo00=
Subject key identifier:   44:DA:E6:35:BF:79:F7:D9:F1:24:8F:D5:E8:E0:41:BD:56:45:76:90
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       01A9
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/13310E94FCD011EF8F21DE62C4F9AE02.roa
Signing time:             Tue 17 Feb 2026 03:23:35 +0000
ROA not before:           Tue 17 Feb 2026 03:23:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152163
IP address blocks:        36.50.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 02:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Feb 17 03:23:35 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6993df37-fcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:5a:e7:fe:d7:86:39:ae:14:5a:1a:3f:53:
                    18:be:a7:c3:6e:6f:21:d8:22:22:9e:be:6d:71:d3:
                    0a:d6:25:6b:81:23:15:63:83:a2:a4:d9:f2:5b:87:
                    5b:1d:18:e2:10:67:25:be:cb:a8:9b:5c:e7:ba:a9:
                    08:6d:92:c9:54:f8:e9:c1:cc:91:a2:bb:91:db:8a:
                    55:33:11:17:16:19:c8:e9:df:e4:1a:90:d8:0f:51:
                    23:00:52:56:a0:53:c4:a2:66:de:92:6b:f8:70:8b:
                    35:0f:e5:23:82:20:af:db:8e:4c:86:f9:7b:5b:b2:
                    10:f7:11:71:f8:3c:7e:eb:bb:33:d4:1b:21:ea:c8:
                    bc:24:49:5b:0a:08:2b:a7:21:e9:f2:43:76:3f:5a:
                    9f:10:72:64:30:34:3d:76:4a:1a:19:58:ad:cb:77:
                    29:2b:dc:e3:74:a2:f2:d6:78:9b:20:c8:fc:1a:9a:
                    7a:e0:01:31:70:57:b1:63:0e:4f:15:4e:e6:eb:af:
                    28:bd:8d:6e:44:d8:35:10:e2:32:a2:79:1a:fb:ed:
                    ff:b8:ac:de:5e:5e:b8:dc:5b:de:81:f9:20:36:9c:
                    a9:3e:08:74:6c:bb:82:77:f8:a2:c6:00:0a:3f:5a:
                    12:cb:40:34:13:e9:3b:c1:e6:45:70:b7:d1:c4:ee:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DA:E6:35:BF:79:F7:D9:F1:24:8F:D5:E8:E0:41:BD:56:45:76:90
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/13310E94FCD011EF8F21DE62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:67:5b:01:d6:03:a4:2a:cc:2d:e5:76:de:ac:9b:6b:85:47:
         f2:ea:3b:91:88:34:9f:b6:77:35:f7:c3:dd:d2:57:fb:8a:e7:
         0a:02:3e:6f:a3:be:49:7f:08:f3:79:fb:c1:ce:e9:12:d0:78:
         66:99:7d:6e:28:f9:54:9b:93:be:b1:4f:aa:1e:26:48:e7:af:
         dd:27:55:be:7e:5c:58:a0:bb:b8:3d:b6:85:a8:36:08:06:83:
         d4:13:61:4e:e4:7c:9b:38:3e:9e:47:6a:7e:9e:10:a6:b4:8b:
         f3:e3:be:c1:a4:db:64:50:68:c6:77:66:13:9b:f9:9e:6e:ab:
         58:fd:88:2c:a3:9a:d4:02:f6:37:84:93:0b:c8:2c:68:d4:71:
         b1:ce:9c:e8:84:5a:f6:43:a4:d3:d6:76:38:79:a6:6a:43:3e:
         a6:c1:25:6c:5b:52:e8:a8:b3:72:5e:79:45:43:86:74:6f:98:
         83:1d:33:21:3e:c5:6b:dd:c5:0e:01:75:31:c1:05:60:43:f3:
         bc:d2:1b:5a:e5:b1:31:aa:23:4e:26:4d:92:12:10:9f:95:22:
         06:aa:71:ca:47:77:8a:2f:fd:69:2c:fb:86:cc:70:56:75:f1:
         dd:64:4a:91:60:13:7f:f7:74:12:f0:b5:a6:fd:46:8c:5c:5f:
         5b:3c:e4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:42:15 2026 by rpki-client