Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/AF01BDAE331211F1A2C10B79B1833773.roa
File:                     AF01BDAE331211F1A2C10B79B1833773.roa (raw, json)
Hash identifier:          +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=
Subject key identifier:   A4:8C:4B:E8:9C:42:A8:FF:F2:75:FF:9D:54:21:A4:7F:AD:DC:2F:A8
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       355C
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/AF01BDAE331211F1A2C10B79B1833773.roa
Signing time:             Wed 08 Apr 2026 06:17:56 +0000
ROA not before:           Wed 08 Apr 2026 06:17:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55819
IP address blocks:        216.99.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13660 (0x355c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Apr  8 06:17:56 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69d5f314-3ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:93:99:5b:d4:f3:ef:81:a8:95:32:a2:61:
                    15:93:5b:eb:60:95:2a:7d:b8:16:b1:e5:7f:10:85:
                    6a:be:60:20:f4:a5:08:ad:67:a8:15:17:2b:33:e0:
                    f8:29:94:8b:a7:e6:5b:dd:37:1a:67:0a:dc:c8:c8:
                    19:b7:2f:e2:63:3c:a6:23:2e:d0:3c:91:cf:07:d3:
                    f2:fd:2a:d2:2c:6d:28:da:21:14:2f:7f:43:cb:c4:
                    d5:a4:8e:5d:ea:5e:db:e5:c2:c9:a4:3c:e5:cb:40:
                    7c:83:c2:fd:35:73:0e:a5:94:e6:b7:2a:99:33:9f:
                    5b:5c:16:63:ca:21:77:ef:b5:ad:7c:e3:b0:57:f4:
                    86:fd:cd:5d:7f:30:86:f3:31:5b:7a:68:73:60:95:
                    54:09:4c:d6:47:78:92:05:47:d2:38:60:39:20:22:
                    94:8a:dd:4d:93:0f:75:dd:a9:9c:68:21:18:74:59:
                    47:fe:7f:31:d8:6a:f5:96:0d:b4:c6:d7:71:d4:b8:
                    5e:7a:64:59:8d:10:9b:1a:1b:b5:d8:f3:a6:2a:7d:
                    27:10:53:dc:b4:cf:43:33:62:8a:9d:91:e3:dd:73:
                    73:d3:9b:26:e5:ef:40:00:03:4b:73:a6:8e:67:1a:
                    2a:ba:d9:78:62:5c:45:f4:e2:02:49:77:aa:ea:5b:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:4B:E8:9C:42:A8:FF:F2:75:FF:9D:54:21:A4:7F:AD:DC:2F:A8
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/AF01BDAE331211F1A2C10B79B1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:a3:09:84:f2:e1:e3:07:3b:f8:ce:d4:ed:6d:c0:ad:3a:
         fd:1b:ba:b4:a5:b6:95:6c:1b:81:f8:10:83:7e:17:6b:d6:66:
         9f:40:eb:cf:d5:6d:e0:55:50:65:62:76:94:28:e4:78:1a:5c:
         f6:1a:a2:57:26:7e:e8:59:0e:e3:e5:35:90:d7:03:2e:f0:cc:
         3c:28:9f:60:e5:2b:04:50:d5:48:a8:a5:3d:3f:9b:83:e5:ab:
         0a:12:22:fb:3d:d7:6e:81:9e:3b:95:53:cb:fc:ee:95:2c:9a:
         f1:2d:71:da:55:e0:f7:6f:a1:bb:de:b1:53:2e:bf:54:51:d8:
         68:eb:ce:12:22:f5:b9:82:8e:75:a0:b7:59:2f:08:7e:bd:8f:
         c2:27:d1:42:e8:fb:17:ea:7f:bb:c9:cd:d0:7a:8d:4c:55:ea:
         b4:98:ed:9f:e9:9b:bd:30:76:b1:b4:4a:2e:10:9e:a7:c8:71:
         53:be:b3:86:bc:e4:cd:2b:df:55:d4:b3:72:7b:6c:28:b4:03:
         1d:72:93:8c:08:d3:32:7d:08:69:ab:5e:e1:46:d9:4a:b6:91:
         c9:23:5d:74:65:70:3e:0b:6b:d4:d4:cd:77:ac:fc:5e:74:db:
         75:bf:0d:33:d3:3a:e2:61:2d:d9:52:50:27:e8:34:a0:47:6a:
         a5:86:b5:1e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2
MjUzMDE3ODMwHhcNMjYwNDA4MDYxNzU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ1ZjMxNC0zZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp42TmVvU8++BqJUyomEVk1vrYJUqfbgWseV/EIVqvmAg9KUIrWeoFRcrM+D4
KZSLp+Zb3TcaZwrcyMgZty/iYzymIy7QPJHPB9Py/SrSLG0o2iEUL39Dy8TVpI5d
6l7b5cLJpDzly0B8g8L9NXMOpZTmtyqZM59bXBZjyiF377WtfOOwV/SG/c1dfzCG
8zFbemhzYJVUCUzWR3iSBUfSOGA5ICKUit1Nkw913amcaCEYdFlH/n8x2Gr1lg20
xtdx1LheemRZjRCbGhu12POmKn0nEFPctM9DM2KKnZHj3XNz05sm5e9AAANLc6aO
Zxoqutl4YlxF9OICSXeq6luZWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKSMS+ic
Qqj/8nX/nVQhpH+t3C+oMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE
QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEyNTgvQkIyRERDRTIxREE2MTFFMjg2RDkxRDlFMDhCMDJDRDIvQUYwMUJEQUUz
MzEyMTFGMUEyQzEwQjc5QjE4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA2GPMMA0GCSqGSIb3DQEBCwUAA4IBAQCcJaMJhPLh4wc7+M7U7W3A
rTr9G7q0pbaVbBuB+BCDfhdr1mafQOvP1W3gVVBlYnaUKOR4Glz2GqJXJn7oWQ7j
5TWQ1wMu8Mw8KJ9g5SsEUNVIqKU9P5uD5asKEiL7PddugZ47lVPL/O6VLJrxLXHa
VeD3b6G73rFTLr9UUdho684SIvW5go51oLdZLwh+vY/CJ9FC6PsX6n+7yc3Qeo1M
Veq0mO2f6Zu9MHaxtEouEJ6nyHFTvrOGvOTNK99V1LNye2wotAMdcpOMCNMyfQhp
q17hRtlKtpHJI110ZXA+C2vU1M13rPxedNt1vw0z0zriYS3ZUlAn6DSgR2qlhrUe
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:34 2026 by rpki-client