Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/6C8EEADA8FE011F0A1C6120DC4F9AE02.roa
File:                     6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (raw, json)
Hash identifier:          A5PJU/2MonNgPS/zrgxcCbEJrRPstF8HrjTYn0csfys=
Subject key identifier:   72:73:12:23:F2:77:84:42:64:93:BF:D7:9B:29:06:CE:0A:48:B9:EE
Certificate issuer:       /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial:       99
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/6C8EEADA8FE011F0A1C6120DC4F9AE02.roa
Signing time:             Wed 18 Feb 2026 13:37:53 +0000
ROA not before:           Wed 18 Feb 2026 13:37:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141342
IP address blocks:        202.63.200.0/24 maxlen: 24
                          202.63.202.0/24 maxlen: 24
                          202.63.205.0/24 maxlen: 24
                          202.63.207.0/24 maxlen: 24
                          202.63.209.0/24 maxlen: 24
                          202.63.210.0/24 maxlen: 24
                          202.63.213.0/24 maxlen: 24
                          202.63.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
                          rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
        Validity
            Not Before: Feb 18 13:37:53 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6995c0b1-7b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:a0:79:95:50:48:87:c8:97:97:47:51:13:
                    81:10:ec:83:54:63:af:e3:06:95:c5:a3:20:6b:bc:
                    e8:5c:3d:4e:7d:3f:53:83:61:93:a3:de:5d:3e:d4:
                    45:fc:06:6e:46:c5:81:cd:2a:23:cb:2a:af:e3:f8:
                    fc:d4:a0:bf:cb:21:4c:0f:97:b7:05:fc:c6:98:9c:
                    29:f4:83:01:37:ea:58:e8:76:54:58:29:ee:71:47:
                    d6:fa:82:2a:1d:ea:28:27:41:a9:15:ca:1e:31:32:
                    78:24:b7:3a:9c:75:e4:de:21:30:50:29:b2:ce:3d:
                    f2:ea:1d:5b:57:90:18:15:af:ca:56:fe:85:3a:a4:
                    36:d5:9d:49:7c:b6:9e:1c:8d:aa:e9:f5:66:89:0b:
                    c1:de:2e:18:fe:ef:30:9c:d6:ac:ec:47:ac:72:91:
                    df:83:a5:ed:b4:de:a4:66:17:79:51:fa:12:02:69:
                    c6:58:eb:3a:49:64:46:0b:21:71:33:2c:53:8e:32:
                    ce:47:bf:3e:43:84:e7:73:0f:0b:06:00:43:c1:28:
                    fb:75:20:ce:2a:06:f7:41:f0:08:15:da:50:6a:bf:
                    a2:20:c7:a2:81:6d:6e:63:12:85:a2:c3:0e:46:da:
                    ae:b3:52:b5:ed:c7:69:67:b8:7b:ee:ee:0c:d8:ce:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:12:23:F2:77:84:42:64:93:BF:D7:9B:29:06:CE:0A:48:B9:EE
            X509v3 Authority Key Identifier:
                keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/6C8EEADA8FE011F0A1C6120DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.63.200.0/24
                  202.63.202.0/24
                  202.63.205.0/24
                  202.63.207.0/24
                  202.63.209.0-202.63.210.255
                  202.63.213.0-202.63.214.255

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:de:2d:9e:ea:23:d4:9b:2a:e6:f9:23:44:e9:e7:5a:a4:
         e2:4c:fd:a8:58:b2:56:36:75:64:18:e0:d1:8b:b2:54:ab:6a:
         59:75:b9:c7:5b:36:9f:8a:78:ee:37:37:80:31:26:a0:00:45:
         3b:46:07:fe:9d:6d:78:c3:a8:0c:cc:e7:3e:d7:53:95:03:d3:
         fe:ea:98:59:aa:f0:b7:2a:15:8b:52:85:78:7a:2a:32:3e:bc:
         5e:a5:7e:d2:db:d4:3c:bc:e6:ac:27:fb:d8:96:76:50:b2:14:
         44:f2:65:62:fb:99:cd:74:ed:de:6c:b8:a5:ea:00:f2:79:fa:
         3b:3e:19:33:b2:ea:7c:48:3d:ad:e9:1c:17:49:bb:c8:33:50:
         65:ca:3c:39:6f:52:4d:d5:29:61:f1:30:51:b3:06:f1:69:b9:
         85:c2:4b:3f:7f:9d:79:4f:ad:3b:81:92:8b:0f:8c:ee:77:8f:
         0c:6d:87:c3:ae:e2:a1:9a:90:30:44:a0:6a:c1:d5:70:4b:53:
         34:15:b9:58:11:50:06:2f:9c:07:0a:d6:d5:6b:fc:93:af:14:
         b2:d0:11:6e:33:2e:47:8b:58:ac:20:40:ab:13:6b:15:3b:d2:
         8b:7e:e7:da:c2:fb:0c:4c:43:c4:bf:02:28:80:be:94:23:54:
         70:f3:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:32:31 2026 by rpki-client