Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/99871E14B32A11F0A592C451C4F9AE02.roa
File:                     99871E14B32A11F0A592C451C4F9AE02.roa (raw, json)
Hash identifier:          4djUiZD4+b47adpWuiZ5Y1vcNwpsEs5KNq9l+B3FCG0=
Subject key identifier:   A8:88:EE:3B:13:1F:34:86:6A:88:C5:A1:F7:2B:36:91:67:85:60:BD
Certificate issuer:       /CN=A9150EAB/serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
Certificate serial:       076D
Authority key identifier: 16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/99871E14B32A11F0A592C451C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:01:43 +0000
ROA not before:           Mon 27 Oct 2025 11:46:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152648
IP address blocks:        2001:df6:9900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl
                          rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150EAB, serialNumber=16757020CFB49A8C1F7BE1F7C48D4547DFC966EF
        Validity
            Not Before: Oct 27 11:46:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48d17-9af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:85:1f:f8:b5:fd:aa:f5:cc:26:8c:78:09:
                    89:67:12:36:4c:c0:e6:6a:37:4f:40:31:38:d3:a2:
                    ab:d5:ae:d2:95:20:f5:a6:ce:66:a6:0c:f7:ae:45:
                    a3:9f:84:2b:d1:0a:c9:01:6f:d5:bb:64:d0:3c:20:
                    6a:34:64:1d:0f:dd:60:72:fc:71:7b:36:a3:eb:a6:
                    d4:21:ba:57:84:0e:7a:82:d4:5e:18:5a:08:bd:80:
                    6c:eb:bc:f3:0e:8a:01:0c:1e:b7:4f:2f:36:91:76:
                    14:5e:a1:de:ea:64:1e:59:27:16:55:57:5e:68:87:
                    f3:6f:11:d5:7f:f2:62:3b:f6:73:34:cf:ac:69:e6:
                    c0:2a:76:80:11:04:3c:f1:4d:b6:b6:d1:45:99:f7:
                    70:39:ed:09:7c:50:68:ac:27:af:fc:1c:27:94:46:
                    34:41:ec:a6:7c:98:85:3e:7d:07:09:42:f6:b8:f4:
                    50:86:7b:99:37:e1:3d:54:94:c6:6c:49:93:37:2a:
                    ad:95:bb:66:8e:b5:9c:30:d5:b7:34:09:d9:fe:9d:
                    c4:6f:b5:f8:7d:12:b7:73:4b:2a:36:ab:e0:47:10:
                    3b:1f:8e:c7:fd:99:12:16:4f:bd:85:6b:48:d3:b7:
                    67:68:7f:c6:7b:6a:a4:89:03:3a:cc:1d:3f:1b:3d:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:EE:3B:13:1F:34:86:6A:88:C5:A1:F7:2B:36:91:67:85:60:BD
            X509v3 Authority Key Identifier:
                keyid:16:75:70:20:CF:B4:9A:8C:1F:7B:E1:F7:C4:8D:45:47:DF:C9:66:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/FnVwIM-0mowfe-H3xI1FR9_JZu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnVwIM-0mowfe-H3xI1FR9_JZu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/99871E14B32A11F0A592C451C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:9900::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:71:d8:d2:6e:f2:4c:45:99:73:4b:58:e7:96:c0:f7:70:4e:
         62:4d:86:c0:30:cc:e0:40:14:ff:2f:a6:4d:ae:65:61:ae:87:
         5a:63:48:c9:53:27:23:9a:91:40:97:d1:01:ed:e4:8e:0a:c9:
         fc:a6:82:b4:d1:c2:6f:01:ce:fc:ae:15:4e:28:fe:54:bf:16:
         ca:a9:73:f4:0d:bb:30:5d:dd:c8:0c:1d:82:5f:d2:41:92:ab:
         19:39:ab:60:2b:62:63:6c:fd:be:4f:70:98:fe:9f:4c:9f:7a:
         3d:0a:3e:06:ed:56:ec:86:d0:a6:72:3e:8d:54:ee:c6:ca:c2:
         ad:d7:10:8b:ee:92:62:35:5e:e6:b5:40:be:9d:d8:dc:12:39:
         e5:f3:3e:3f:10:fe:d0:8a:50:51:54:b9:54:3d:d7:73:6f:6b:
         9b:40:9f:18:47:08:d0:0a:ab:80:dd:64:42:41:22:52:47:e6:
         65:b8:72:41:63:81:96:ee:5f:ac:fb:dd:c8:62:63:6e:44:ee:
         aa:b9:e0:8e:72:b3:66:51:68:15:7f:e8:ed:ea:14:1a:92:d4:
         3a:89:16:be:e7:13:e9:c2:f4:56:46:14:20:29:91:2f:35:64:
         6a:67:dc:03:34:69:c2:3e:91:8b:11:d9:39:ba:fe:ff:b5:d7:
         85:73:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:51 2026 by rpki-client