Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa
File:                     8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (raw, json)
Hash identifier:          UcggPbJhgE8EGS4IdplCk/tp4RjY1CPQccDnakbA59Y=
Subject key identifier:   2A:E2:6D:7F:C2:6B:30:F6:7D:4A:F8:6B:3E:38:B6:73:89:93:DD:90
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       3545
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:22:34 +0000
ROA not before:           Thu 04 Dec 2025 15:11:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        216.99.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13637 (0x3545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Dec  4 15:11:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a467ca-996c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:10:7b:71:50:83:de:42:3c:f8:c9:fc:7f:
                    91:fa:3f:dc:a4:21:5e:d2:5e:60:df:97:75:c2:36:
                    97:69:36:71:6f:78:68:3c:67:d4:91:d8:3a:22:3b:
                    94:3c:51:8a:14:97:d7:9b:5e:95:8c:68:81:0f:cd:
                    03:5e:5c:8f:e5:b1:94:b9:98:99:4f:9e:4a:0d:ae:
                    76:4f:27:aa:d4:d0:72:9e:17:91:9a:fb:83:bb:a4:
                    fe:9e:be:4f:e9:e9:73:7d:0c:25:29:05:86:23:ed:
                    17:7c:ce:6a:b0:1d:7d:f5:19:a8:90:a0:5e:d1:ee:
                    d1:ea:1a:37:b4:c8:1c:c9:c6:0e:6f:27:a1:e1:e1:
                    8a:d6:75:b3:5b:52:64:cf:36:20:45:11:d2:a1:0c:
                    3b:ca:2a:c1:a9:c2:71:1b:f0:2c:46:c9:7d:e6:a3:
                    60:cd:74:45:12:1a:c7:d2:f8:3e:18:8f:dd:ad:82:
                    df:a1:06:da:f3:fc:91:ea:6d:f9:f7:8a:c0:c5:e2:
                    35:50:74:04:b9:74:cc:29:50:5f:a9:d8:f7:f9:11:
                    09:77:4d:4e:4f:d5:dc:37:fe:68:4c:41:d0:4b:35:
                    42:9d:5f:4d:ea:62:85:d1:07:7a:f3:fa:1e:f0:55:
                    42:70:2b:5d:a3:68:52:88:f4:d8:c7:b5:8b:7b:cd:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E2:6D:7F:C2:6B:30:F6:7D:4A:F8:6B:3E:38:B6:73:89:93:DD:90
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:17:7b:09:b0:50:e7:c0:d4:c4:43:66:ec:53:49:10:35:
         ac:27:a8:d4:a8:a3:b2:c9:42:54:bb:e9:5d:85:ff:74:7c:28:
         76:51:85:fe:21:f6:3e:28:d6:81:95:20:a7:1a:b3:a6:e1:31:
         ab:f6:4e:c7:c4:e8:0b:c3:28:9d:32:0c:3b:51:2d:d8:dc:e2:
         92:e2:b0:9d:f8:ac:84:e8:27:70:1d:7e:40:31:ff:5d:8b:7d:
         e8:b2:92:85:14:5d:16:51:75:ef:43:b0:06:79:1c:98:37:8c:
         5b:fb:31:22:bf:dd:c2:81:08:5e:27:8b:d6:70:92:76:51:ef:
         0d:f5:2c:18:d9:9f:20:50:73:4d:e4:b9:8b:10:2c:4d:cb:e7:
         ea:a7:41:4f:c5:30:cf:99:65:1c:2e:4e:a3:85:2d:3f:d0:99:
         9c:74:23:7b:40:2a:07:de:a3:b0:50:8f:00:92:7d:86:69:b8:
         f0:f1:3c:30:59:ac:5b:da:14:a8:e7:4e:5e:ed:b2:ee:2f:d5:
         fc:46:a8:17:92:75:9f:62:52:b3:58:72:9f:eb:73:96:15:8a:
         65:56:08:4c:19:ee:83:b7:90:4f:48:7e:79:d1:b8:5a:6e:f7:
         c0:b8:a8:2f:85:3b:6f:e4:ad:5b:1e:2d:c8:b8:65:f1:ca:04:
         53:01:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:50 2026 by rpki-client