Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/7A092C88E9E211EFAD188675C4F9AE02.roa
File:                     7A092C88E9E211EFAD188675C4F9AE02.roa (raw, json)
Hash identifier:          b1k1YMX7/nVw2TElNJr1Bkgy8CPYBHwzCqEuF/OXF94=
Subject key identifier:   C0:85:D3:DB:12:BD:66:D7:74:C1:C5:73:35:4A:13:8B:3B:5E:3A:25
Certificate issuer:       /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Certificate serial:       C8
Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/7A092C88E9E211EFAD188675C4F9AE02.roa
Signing time:             Thu 29 Jan 2026 05:29:18 +0000
ROA not before:           Thu 29 Jan 2026 05:29:18 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153493
IP address blocks:        2401:e720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
                          rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
        Validity
            Not Before: Jan 29 05:29:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697af02e-d61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:54:5e:02:e6:a7:7e:c3:31:a4:b7:05:d1:
                    55:72:27:fd:b0:74:5e:39:d8:e9:85:2c:31:09:65:
                    15:38:da:f6:23:e3:7a:24:12:15:b7:4b:0f:65:24:
                    3e:00:1d:fe:2f:b3:8c:25:91:9a:0d:f2:33:88:45:
                    18:c0:2e:c3:33:17:ca:f7:e9:fe:64:7e:c4:33:76:
                    b2:35:26:fa:24:38:5d:6c:d9:d9:69:3e:0a:46:58:
                    47:a8:4f:32:f1:7e:42:95:8c:e5:e0:f0:3c:f6:cd:
                    87:0d:45:2d:04:12:fa:ff:5a:99:e5:5b:c3:ff:5b:
                    e3:84:74:35:be:ba:07:5f:0f:5d:f6:df:d2:9f:c5:
                    45:79:7e:ff:08:75:c0:5c:0e:54:25:c1:82:8c:89:
                    8b:14:95:da:e8:99:82:12:80:01:e3:d9:89:5c:38:
                    c5:c2:12:d9:f7:57:3b:5e:a0:56:4e:8c:e7:b5:06:
                    e5:2d:e6:fb:61:f8:c1:f0:de:ea:cb:8a:70:c1:08:
                    cd:d8:02:7a:5d:f4:0e:34:20:8e:89:70:20:40:3d:
                    22:74:e2:df:41:a5:bc:a7:fe:b3:0b:2c:12:ba:26:
                    3e:21:ad:2f:e8:5a:99:8b:d0:6a:78:b5:e3:04:a8:
                    9c:d3:e5:82:2b:34:a4:60:53:20:7f:60:68:48:00:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:D3:DB:12:BD:66:D7:74:C1:C5:73:35:4A:13:8B:3B:5E:3A:25
            X509v3 Authority Key Identifier:
                keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/7A092C88E9E211EFAD188675C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e720::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:f5:98:55:fd:e4:a2:45:ed:94:fd:86:3c:1d:aa:0a:f3:5e:
         1e:37:e4:88:a8:bf:41:67:c9:06:9b:e6:47:98:d0:c1:73:f7:
         dd:d4:54:26:f8:6f:ee:25:93:a7:f0:c9:31:a6:98:99:9d:e5:
         8f:8a:95:3a:04:c7:e4:36:3f:2a:6e:2b:c7:dc:3c:3d:03:c7:
         23:a6:b1:c5:27:75:64:2b:d5:69:91:39:09:3d:6b:c1:8a:5f:
         71:28:30:80:68:3d:85:40:ab:63:53:71:1a:06:c6:14:69:5b:
         ae:5d:8e:60:83:ce:0a:b7:b6:c8:9c:cb:05:b4:25:41:b2:e7:
         6e:22:1c:62:55:cd:61:15:18:1e:09:25:0b:c0:66:34:a0:8f:
         04:bd:35:8e:08:67:2c:6a:0c:6f:6a:2a:bc:53:34:0e:22:32:
         28:c6:0b:f6:61:4b:e2:0c:3b:1e:17:1b:e5:58:ca:38:f2:7e:
         7c:b8:41:28:ae:90:be:10:aa:75:3f:77:9f:d6:05:78:7f:27:
         b4:ca:e0:5e:bd:87:42:1b:ec:16:64:bc:22:a8:7d:89:f0:e2:
         6a:e3:c2:f8:e8:20:cd:a6:a9:82:e6:1c:0c:54:a2:8e:e5:d5:
         c5:2f:3b:23:cd:6c:b5:20:a2:ef:2f:3a:48:c0:74:27:0c:ec:
         42:db:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:22 2026 by rpki-client