Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa
File:                     F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (raw, json)
Hash identifier:          JtC3gq1Cj+LfVFXKXALClRmKWWvy8Rs6sHaXFDUGRHI=
Subject key identifier:   94:5E:C6:25:10:38:4C:DD:C7:3F:6B:CA:95:D9:EE:A7:DC:80:92:88
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       F0
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa
Signing time:             Tue 17 Feb 2026 05:25:57 +0000
ROA not before:           Tue 17 Feb 2026 05:25:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        146.116.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Feb 17 05:25:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6993fbe5-ff86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:56:da:a6:87:ec:78:32:65:86:87:a6:67:
                    c0:2a:68:72:2e:12:c7:d7:09:b9:b4:58:11:69:f0:
                    13:25:3e:10:75:aa:17:e3:90:00:db:da:f7:d3:57:
                    49:14:d1:1f:fd:cd:bf:07:8a:d9:30:00:14:f7:92:
                    1a:3c:c7:de:d3:24:8d:f5:45:ef:4a:ea:ca:06:1a:
                    29:91:dd:9a:bd:40:3b:9b:44:d5:f3:b4:dc:9b:85:
                    40:97:3d:0a:2a:04:18:c7:b7:84:9a:9b:29:5e:f4:
                    c3:83:15:33:d2:bc:3f:b9:93:39:ab:8e:63:9c:c0:
                    6e:c8:2f:d7:ef:e8:6f:8e:ec:4e:8d:24:d3:fe:48:
                    72:f2:84:7b:1a:46:42:32:56:5e:b7:4e:00:12:31:
                    aa:12:2f:d4:92:17:ea:d7:c1:cb:e4:9b:e5:c3:9c:
                    2d:ac:b8:01:25:fc:25:62:fe:70:c4:2e:c1:0b:4b:
                    e2:80:f9:c8:1a:d5:2e:b6:2d:7f:6b:b2:1b:2f:84:
                    3a:87:9b:fb:56:f4:36:81:05:76:e2:d5:96:c9:11:
                    ab:fd:78:ea:da:e1:30:19:be:80:58:4f:17:da:e0:
                    18:fa:c7:e4:cc:c2:57:cb:a0:7a:ba:02:bd:fc:a1:
                    24:46:f8:48:38:f1:bd:71:93:35:78:dc:d2:75:0c:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5E:C6:25:10:38:4C:DD:C7:3F:6B:CA:95:D9:EE:A7:DC:80:92:88
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.116.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:02:3d:66:4b:ee:c5:5d:e1:1c:87:f6:06:93:84:1c:78:70:
         eb:fd:00:e2:cf:94:05:6d:c8:3d:14:8b:93:3f:4c:22:fd:18:
         e7:14:7a:49:df:da:89:9d:9f:d2:ab:d2:b2:ee:20:9e:b0:cd:
         c0:68:c0:bf:3b:e1:d9:0d:b6:c3:4f:0b:4a:03:30:5b:85:44:
         aa:89:29:99:c2:6c:5e:24:a4:75:13:68:4d:b0:6e:d3:d6:a8:
         a7:14:9f:43:07:f2:25:2f:74:eb:b7:56:e3:31:1f:14:f6:dd:
         ed:22:dd:3f:91:8e:f9:31:86:bf:78:f5:ba:7a:a3:8f:ac:4d:
         f4:e9:98:e3:8e:9a:cc:d2:aa:81:f2:ed:fe:fc:ba:d3:33:f6:
         b1:79:e2:65:e9:00:fd:2a:ee:f1:02:2a:7d:9e:30:da:7c:be:
         5b:67:ae:5d:f7:67:c6:74:7b:4e:f6:e2:c7:80:aa:14:ea:22:
         2e:8d:3f:4d:21:58:f9:79:a5:37:49:1b:b9:7b:f9:66:d6:8e:
         4c:fc:86:14:87:aa:f9:5b:2f:4b:6f:0e:98:1a:7b:aa:8f:e5:
         5a:14:d8:99:d4:76:e5:e2:25:f8:61:ae:72:ec:42:36:d9:9f:
         6c:af:b0:1f:67:b5:54:5e:47:e3:a2:74:d3:09:7a:c5:ba:36:
         90:24:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:02 2026 by rpki-client