Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/6DEC60FC198811EBAD4C384FC4F9AE02.roa
File:                     6DEC60FC198811EBAD4C384FC4F9AE02.roa (raw, json)
Hash identifier:          RyCT9Kfh39JgpB62lsPr7X3rrbBLW034nB14BsTheqA=
Subject key identifier:   3F:3F:4B:2B:8F:21:75:AD:D2:CB:08:0F:C0:F2:F6:FA:86:E0:FA:2C
Certificate issuer:       /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial:       080F
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/6DEC60FC198811EBAD4C384FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:52:46 +0000
ROA not before:           Thu 18 Dec 2025 21:17:58 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        165.69.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 20:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
        Validity
            Not Before: Dec 18 21:17:58 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a452bd-d26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:bc:0e:02:35:b4:e1:dd:1d:6e:32:25:5c:
                    99:c9:98:6c:54:1e:ae:eb:96:4f:e7:76:1b:25:7c:
                    6f:42:81:24:7c:fc:21:f6:7d:60:85:03:d8:17:c9:
                    e6:85:96:ce:5a:45:a9:da:32:1d:6a:5e:84:8e:42:
                    88:59:40:f5:04:a0:1d:5e:ae:e5:9d:2a:da:87:b0:
                    bc:78:15:ea:13:6a:e8:bd:03:49:62:1a:78:1f:6d:
                    8f:90:84:88:e6:36:ab:a4:ba:1f:6e:31:16:85:93:
                    7d:4b:0e:2b:b5:8d:2e:0f:bf:b9:eb:3f:f0:65:85:
                    33:8d:f7:f0:e5:12:26:f9:e9:d5:6d:65:eb:d3:ca:
                    18:5e:89:27:15:be:42:02:b8:71:e4:34:b5:7f:67:
                    e8:d8:f5:2f:e8:bb:6e:1a:74:68:77:10:61:9e:82:
                    1a:00:31:2a:af:de:a1:e1:c0:54:2e:ad:4c:5b:48:
                    e7:2e:f6:25:8d:a7:4f:be:28:67:20:05:85:53:3a:
                    4f:8e:2e:40:f8:6c:db:78:9d:1b:a9:44:55:84:95:
                    c0:c4:83:96:bf:c7:0b:d0:83:92:70:73:6d:fe:19:
                    29:c3:f8:c5:04:88:51:72:bf:ba:45:fe:d3:79:cc:
                    16:dc:25:a6:e4:59:ca:8c:df:00:88:1e:b5:3e:df:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3F:4B:2B:8F:21:75:AD:D2:CB:08:0F:C0:F2:F6:FA:86:E0:FA:2C
            X509v3 Authority Key Identifier:
                keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/6DEC60FC198811EBAD4C384FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.69.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:8e:fd:e3:71:e1:95:20:e2:aa:ed:2f:36:0c:1a:87:c1:40:
         40:f5:b3:f4:ca:83:38:57:af:18:ac:20:8d:c9:7e:eb:aa:f6:
         e6:12:09:bd:28:42:3e:1e:d2:c7:00:58:99:88:4a:da:50:9b:
         26:5a:05:88:98:99:77:99:0f:b1:0f:fd:d3:ca:a3:bf:69:42:
         f8:04:8c:5a:dd:64:e9:39:e4:30:99:02:8a:db:27:fa:06:a7:
         af:cf:ce:1a:1b:23:c2:84:3c:83:83:5a:4c:b3:d5:bd:16:fd:
         08:8b:7c:55:b2:34:19:4e:94:30:e4:ff:03:9f:e9:50:8a:c3:
         ef:3a:15:d9:50:13:13:9f:98:9e:ab:54:49:aa:a1:7e:9e:56:
         5f:51:d2:1c:2f:8e:65:74:ee:c2:67:20:22:6d:52:9c:86:9f:
         46:a8:37:f6:41:70:27:33:3a:e3:39:98:3a:09:30:bb:d5:66:
         36:00:a7:f3:8c:21:d8:b8:33:d6:a8:05:db:44:9e:3e:4a:fa:
         5f:7c:06:69:20:fa:75:c5:18:f3:72:31:7d:62:b6:e8:45:a9:
         b9:d5:5f:8c:29:12:06:f8:f7:37:57:2d:98:c1:e6:d6:5c:78:
         27:28:9b:83:73:ed:04:c0:f8:4b:c5:d3:f3:5f:80:af:e8:01:
         ba:0b:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:20 2026 by rpki-client