Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/CC76EFBE0CF011F1BD28D26D3B3D8C67.roa
File:                     CC76EFBE0CF011F1BD28D26D3B3D8C67.roa (raw, json)
Hash identifier:          egshhZxNHrvt098kFIrOlWDmN/uXsV3IUsVmMBqHavs=
Subject key identifier:   06:26:CB:3E:C1:87:42:C5:68:78:9B:1B:D6:FB:A6:52:5D:ED:B6:A6
Certificate issuer:       /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial:       A0
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/CC76EFBE0CF011F1BD28D26D3B3D8C67.roa
Signing time:             Wed 18 Feb 2026 17:39:39 +0000
ROA not before:           Wed 18 Feb 2026 17:39:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153523
IP address blocks:        165.99.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
        Validity
            Not Before: Feb 18 17:39:39 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6995f95b-898c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:c5:7c:1c:63:cc:a8:f8:2e:fe:0a:69:64:
                    ea:ba:21:3a:cd:05:11:a3:91:b4:a6:54:d1:48:c4:
                    09:9e:ad:01:41:d9:0d:ae:43:6f:04:f4:36:db:f9:
                    51:f2:6f:e9:80:68:fa:b5:3d:0b:20:be:01:6a:03:
                    58:e7:a5:dc:61:b9:b5:45:9a:9d:a7:fc:95:1e:64:
                    fd:db:77:1e:58:81:6d:d0:37:f0:c7:e0:40:62:a3:
                    f5:fd:cd:50:80:e6:7f:90:70:2d:5a:f8:64:99:4e:
                    59:8e:4b:06:4d:47:1f:f2:ba:02:7f:fd:75:c6:e6:
                    31:5a:68:83:61:0b:fc:23:13:61:3d:68:56:d1:9b:
                    cd:3b:6e:b3:3b:8f:c8:e9:e3:3b:cb:7c:da:61:23:
                    d8:8f:a9:b7:d2:93:7c:64:98:4d:30:9b:d7:11:a1:
                    86:40:a2:fa:a5:b4:e9:82:10:74:fd:e3:26:6f:cd:
                    4c:95:56:92:cf:18:55:97:6b:8c:1b:28:00:15:78:
                    47:f1:91:ae:84:dc:22:9a:6c:16:16:1c:18:92:91:
                    f9:f0:b5:56:04:dd:bb:a8:96:dd:e3:8d:99:ba:49:
                    6d:80:65:16:c8:b3:96:0e:49:3f:cc:6f:aa:6c:03:
                    0f:97:95:0b:c8:43:60:a9:cb:e0:d1:94:50:a1:40:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:CB:3E:C1:87:42:C5:68:78:9B:1B:D6:FB:A6:52:5D:ED:B6:A6
            X509v3 Authority Key Identifier:
                keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/CC76EFBE0CF011F1BD28D26D3B3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:38:95:e4:b3:6b:a4:a3:85:f2:52:59:97:10:c8:17:ab:d7:
         b0:fe:ca:c4:f7:ec:9f:e7:fb:58:3c:01:23:bf:eb:1e:d0:97:
         f1:8d:b3:28:09:a5:07:59:d4:53:59:a0:54:1c:44:d6:7f:cb:
         c8:e7:1a:9f:5a:6a:a2:24:b6:b7:de:db:b2:c9:16:02:27:75:
         12:fc:2a:cd:06:32:a8:8d:94:85:45:a5:13:fb:3e:18:5a:c9:
         75:8e:67:0c:8b:18:93:7c:da:a0:17:a9:ed:54:a3:d0:49:50:
         cb:88:14:94:44:41:47:d9:44:6b:87:e2:10:b9:5f:ff:c3:34:
         07:14:cb:31:03:08:7e:26:ec:23:3a:45:f5:46:ba:e4:a5:61:
         c7:f5:8e:ae:87:43:19:b2:fb:b8:b7:5e:8f:dd:d0:c3:da:b5:
         30:91:46:48:22:7c:05:cb:52:f6:61:33:c6:16:51:07:c2:d4:
         43:1a:8b:9d:13:5d:5d:5e:b3:3c:c7:4e:c9:5c:99:61:3a:8e:
         59:82:e0:21:61:60:bb:08:ad:04:a1:b9:2f:6d:7c:33:ce:32:
         31:ee:5a:54:85:01:f1:ed:93:35:63:e3:8b:50:69:64:c5:2f:
         d4:4e:81:25:f6:fa:8e:35:8c:64:f6:66:4f:6d:15:2b:0d:d4:
         a2:52:8d:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA3NUUxMTAvBgNVBAUTKDZFQUM0MTY1RUM4Mjk5OEE4OThBQURGREQ1MTFDQzJB
MDQ2RkVFQTcwHhcNMjYwMjE4MTczOTM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk1Zjk1Yi04OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkkDFfBxjzKj4Lv4KaWTquiE6zQURo5G0plTRSMQJnq0BQdkNrkNvBPQ22/lR
8m/pgGj6tT0LIL4BagNY56XcYbm1RZqdp/yVHmT923ceWIFt0Dfwx+BAYqP1/c1Q
gOZ/kHAtWvhkmU5ZjksGTUcf8roCf/11xuYxWmiDYQv8IxNhPWhW0ZvNO26zO4/I
6eM7y3zaYSPYj6m30pN8ZJhNMJvXEaGGQKL6pbTpghB0/eMmb81MlVaSzxhVl2uM
GygAFXhH8ZGuhNwimmwWFhwYkpH58LVWBN27qJbd442ZukltgGUWyLOWDkk/zG+q
bAMPl5ULyENgqcvg0ZRQoUC9iwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAYmyz7B
h0LFaHibG9b7plJd7bamMB8GA1UdIwQYMBaAFG6sQWXsgpmKiYqt/dURzCoEb+6n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDc1RS9ENzA4QUIxQTMx
NkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9icXhCWmV5Q21ZcUppcTM5MVJITUtnUnY3
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA3NUUvRDcwOEFCMUEzMTZFMTFGMEJCMzI3RTMwQzRGOUFFMDIvQ0M3NkVGQkUw
Q0YwMTFGMUJEMjhEMjZEM0IzRDhDNjcucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAClYz4wDQYJKoZIhvcNAQELBQADggEBALM4leSza6SjhfJS
WZcQyBer17D+ysT37J/n+1g8ASO/6x7Ql/GNsygJpQdZ1FNZoFQcRNZ/y8jnGp9a
aqIktrfe27LJFgIndRL8Ks0GMqiNlIVFpRP7PhhayXWOZwyLGJN82qAXqe1Uo9BJ
UMuIFJREQUfZRGuH4hC5X//DNAcUyzEDCH4m7CM6RfVGuuSlYcf1jq6HQxmy+7i3
Xo/d0MPatTCRRkgifAXLUvZhM8YWUQfC1EMai50TXV1eszzHTslcmWE6jlmC4CFh
YLsIrQShuS9tfDPOMjHuWlSFAfHtkzVj44tQaWTFL9ROgSX2+o41jGT2Zk9tFSsN
1KJSjX4=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:09 2026 by rpki-client