Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa
File:                     B2DE2498C4FD11ED909F2770C4F9AE02.roa (raw, json)
Hash identifier:          p3BZrAbeWqMjZ2aI8pjyproPV6v0Pqri6zDsxpn6tJw=
Subject key identifier:   DB:15:D5:C7:23:A3:69:F4:55:C2:69:6A:BF:66:E7:F6:29:4A:EB:16
Certificate issuer:       /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial:       022B
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa
Signing time:             Wed 11 Feb 2026 02:22:21 +0000
ROA not before:           Wed 11 Feb 2026 02:22:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     38016
IP address blocks:        2406:c800::/32 maxlen: 32
                          2406:c800:a1ca::/48 maxlen: 48
                          2406:c800:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
                          rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 01:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
        Validity
            Not Before: Feb 11 02:22:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698be7dc-2bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:58:9c:bd:60:d3:3e:c6:b2:ba:05:81:5f:
                    9c:9a:62:1f:87:d2:db:cd:93:73:de:05:8d:48:55:
                    8b:a4:ff:81:79:1d:32:06:20:9b:a0:6f:26:60:38:
                    a9:c5:86:bc:ad:b4:cf:a9:13:26:06:7e:73:17:69:
                    99:3d:f2:fa:c4:3d:b6:f8:1d:aa:74:2b:e9:e1:40:
                    6c:28:7d:39:e6:a4:9f:db:2b:e7:ba:af:5c:5c:79:
                    1a:b0:28:ff:cd:ef:1d:8b:15:7c:91:c0:93:a4:dd:
                    25:65:6c:78:2c:48:3a:bd:8d:af:22:0e:84:c2:7d:
                    db:bc:2d:e4:8c:45:38:ea:ca:4d:29:56:01:69:1f:
                    7a:cb:1c:1a:27:92:94:cd:5b:2d:66:da:b3:d8:9c:
                    03:e8:ae:e6:af:d2:e0:c8:a8:ab:c2:5c:7c:01:b2:
                    58:b7:f2:45:d2:1d:fa:00:94:9e:4e:9d:eb:57:12:
                    cf:0c:d2:6e:f5:4a:c7:8f:38:40:2f:e2:32:98:49:
                    09:5c:f6:9a:13:8c:51:77:62:1b:8e:2b:6e:bf:ef:
                    8a:00:c3:08:10:91:dd:80:53:fc:bb:12:89:40:63:
                    94:65:11:44:f7:06:08:3f:f1:35:a4:30:9e:05:c3:
                    b0:5d:cb:8a:f6:d2:2b:5d:8d:be:e4:7c:48:f5:33:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:D5:C7:23:A3:69:F4:55:C2:69:6A:BF:66:E7:F6:29:4A:EB:16
            X509v3 Authority Key Identifier:
                keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/B2DE2498C4FD11ED909F2770C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:c800::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:d6:f7:ca:b2:9e:62:c2:3f:de:5f:a5:b7:dd:98:2d:36:
         10:4d:1a:60:49:0a:f0:95:71:2e:95:46:49:de:71:de:74:a4:
         68:1d:60:22:cc:ad:47:fd:84:e5:c2:21:9c:b8:86:d1:c8:d1:
         5b:b7:39:95:71:38:d2:a9:f3:a0:ac:43:59:53:38:c1:b2:a5:
         db:f9:22:a5:90:2a:87:e8:9c:b3:c7:1d:f6:0c:36:51:de:90:
         a8:2d:5f:bc:b9:19:db:62:ab:ed:97:26:c0:2d:73:a8:50:e5:
         4d:1e:3c:ff:f5:66:19:06:62:87:3b:a3:c8:8b:53:3f:7c:f7:
         58:61:e2:a9:4c:50:ce:b3:00:6d:58:f0:99:a4:80:05:8f:7e:
         9c:5b:0a:3d:66:55:5e:0e:ce:dd:ff:4c:98:cb:8c:c5:de:3b:
         a5:20:3d:9a:fb:bf:12:af:b2:98:91:a9:78:fd:f2:cd:e2:18:
         27:eb:7c:48:3d:cb:06:0d:01:fa:7a:fa:1b:3e:59:80:2c:48:
         20:00:4d:af:b9:3d:df:1e:15:95:d5:48:43:ba:3b:f9:18:2c:
         c0:07:00:2c:70:26:70:42:83:26:95:47:65:03:41:1f:e1:f8:
         92:f9:8d:71:5b:01:7c:5e:40:31:50:a4:e9:3c:3d:82:d1:ec:
         8d:3b:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:47 2026 by rpki-client