Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
File:                     8D769B548D3C11F0A8123F21C4F9AE02.roa (raw, json)
Hash identifier:          5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=
Subject key identifier:   FE:AB:CC:9C:42:65:35:60:A6:E7:05:BC:F6:E0:BB:E4:4D:11:B5:90
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       355E
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
Signing time:             Wed 08 Apr 2026 06:17:59 +0000
ROA not before:           Wed 08 Apr 2026 06:17:59 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        216.99.198.0/24 maxlen: 24
                          216.99.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13662 (0x355e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Apr  8 06:17:59 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69d5f317-8472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:4b:44:04:cb:40:71:0d:53:6c:e9:c8:a1:
                    a6:83:38:b6:d1:ef:31:53:6c:9c:8a:ee:2d:dd:6e:
                    82:62:e9:b1:b0:30:69:30:aa:c4:81:4a:68:3e:ce:
                    48:9a:f4:5a:1a:15:93:4f:de:03:75:04:00:1d:73:
                    e8:a8:c0:97:5f:b6:a8:b2:86:89:bc:62:51:08:f4:
                    f2:5b:fd:d6:f6:77:f2:dd:39:93:36:28:d0:bd:77:
                    da:ed:65:97:44:9f:09:10:07:41:52:7a:26:a5:5d:
                    c4:4d:30:91:5c:99:df:d8:c2:24:23:4c:9c:30:06:
                    ea:3c:df:4e:06:b7:74:f3:d4:96:ba:64:4b:eb:76:
                    4d:06:a4:a0:b8:12:92:10:7d:77:03:f4:1e:8a:75:
                    e0:b2:d0:c3:21:37:52:4b:44:08:04:66:6d:56:03:
                    e8:63:47:32:a5:6a:83:ed:e3:aa:66:8f:3e:aa:79:
                    2e:42:f3:1c:49:a3:64:6e:32:04:77:85:69:3e:00:
                    33:ba:0d:6d:04:f3:25:8f:e8:02:ea:ec:2a:04:d6:
                    68:1f:db:9a:15:9d:48:63:03:7b:a5:67:77:61:f6:
                    49:fe:ae:3e:be:ef:c7:9c:b1:48:aa:46:ab:be:d9:
                    1d:92:04:69:2a:03:18:b3:3d:11:20:09:b8:77:17:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AB:CC:9C:42:65:35:60:A6:E7:05:BC:F6:E0:BB:E4:4D:11:B5:90
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.198.0/24
                  216.99.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:8b:57:a4:e6:79:4e:db:10:cf:ae:b5:94:79:d5:30:bc:
         ee:41:18:5a:53:75:fe:5b:8e:d5:f9:ee:4b:b3:bf:82:e7:06:
         59:48:a4:5d:65:50:2b:97:27:da:43:b9:df:70:76:fc:c4:c7:
         82:31:4c:78:14:df:14:7b:88:19:2c:91:d4:98:23:43:e4:ce:
         82:f0:c7:29:fe:ee:35:5b:53:a4:b4:d6:23:6c:c8:cb:e2:db:
         42:c7:1d:25:db:20:c7:fe:d2:d5:db:0a:c1:a8:df:bc:6b:8c:
         6d:b2:a5:03:f1:5e:70:5f:13:5b:06:fd:87:9d:88:3a:07:0a:
         33:0e:98:9a:1b:ab:03:ab:8f:45:85:11:18:6a:21:06:3a:66:
         60:29:60:cc:ef:8a:f1:2b:77:88:35:e4:57:11:b4:c3:a4:cc:
         9b:13:a9:e3:7c:99:e5:5d:15:e1:cb:61:0d:a5:66:c3:75:29:
         ce:5f:ed:73:b6:21:9d:5e:01:da:a3:57:e1:13:77:93:fb:02:
         61:87:ce:aa:74:b5:53:43:ff:2b:32:88:67:9d:3f:73:d4:de:
         52:2e:09:ae:1e:94:e2:54:72:99:9c:05:46:83:eb:3e:ef:da:
         57:03:96:52:1d:c8:2f:76:ab:d1:ec:61:c1:2b:95:78:6f:01:
         0a:70:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:42 2026 by rpki-client