Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa
File:                     ACCFE0643C9711F08159891EC4F9AE02.roa (raw, json)
Hash identifier:          lVHhBj6K1C48l+j8zLFa7FZ7WGKYKz6QlN3fyLSlK7w=
Subject key identifier:   1F:06:6E:F4:CF:90:5B:6D:59:7A:16:24:8D:FD:CD:52:0F:0C:61:45
Certificate issuer:       /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial:       03
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa
Signing time:             Thu 29 May 2025 14:17:39 +0000
ROA not before:           Thu 29 May 2025 14:17:39 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     141011
IP address blocks:        165.99.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 07:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
        Validity
            Not Before: May 29 14:17:39 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68386c82-dbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:be:75:34:1a:7a:69:89:ff:4e:97:80:19:
                    cd:ce:22:21:59:0b:87:ce:4e:a3:17:63:50:c2:cc:
                    7b:9e:12:55:c5:d3:e3:e6:d1:b5:5d:04:91:37:e0:
                    cd:68:e4:37:80:ce:99:54:b5:23:2c:5a:2d:09:ac:
                    78:df:e7:15:c4:45:4d:1b:fa:98:49:b9:b7:19:98:
                    fd:c8:3b:69:31:a1:4d:09:d5:27:cf:97:1c:8d:9d:
                    9d:0d:e5:87:64:55:4e:a2:0b:1c:a1:d6:1e:11:ed:
                    7a:f6:e2:f1:fe:28:59:b0:90:b1:9b:77:e0:ba:dd:
                    cf:c5:33:7c:7e:02:45:aa:05:21:54:fa:43:14:c4:
                    96:35:f1:42:3d:dc:cd:92:16:5a:1d:57:80:86:a3:
                    b3:f1:03:ee:e8:a2:87:c4:95:fd:19:0b:01:be:60:
                    ce:9d:8c:fc:87:46:64:41:b3:c7:8b:ab:cc:d4:57:
                    6d:b4:ea:dc:10:26:5d:3c:ed:0d:fa:f1:c6:d0:d1:
                    7a:86:10:86:57:d9:5f:52:94:73:72:cd:d8:17:fd:
                    2b:95:a1:1e:1c:19:14:8b:53:a6:d5:52:d2:0e:7e:
                    7c:03:7d:ae:05:e6:99:45:c7:aa:8a:f9:ca:88:80:
                    30:f8:29:96:82:c0:9c:da:69:ab:1a:78:0e:af:c2:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:6E:F4:CF:90:5B:6D:59:7A:16:24:8D:FD:CD:52:0F:0C:61:45
            X509v3 Authority Key Identifier:
                keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:63:83:53:15:d1:f5:33:8d:0c:7b:bb:a3:98:bf:f0:3f:
         3b:22:e5:4d:f4:f0:51:8b:a6:bb:03:7f:77:58:37:c9:31:98:
         9a:c6:50:3f:49:4d:40:81:73:57:71:ee:2d:98:f0:0f:37:e5:
         1f:04:58:f4:27:53:2d:83:e8:27:61:41:37:c8:38:c7:8c:8b:
         38:50:52:74:bc:96:76:f2:d1:6e:7f:af:de:66:fd:f8:2e:81:
         0f:37:85:84:f8:e2:44:ac:e2:3f:ea:5f:38:28:49:1c:67:7d:
         48:08:59:6d:03:a7:c0:09:6f:8d:70:9a:ab:56:8f:ee:51:79:
         14:a4:10:28:93:71:d7:97:56:00:7e:2b:ed:77:8b:02:e8:ad:
         43:cf:6a:e7:40:6b:b7:27:55:42:3d:b1:ca:4b:3f:78:d4:7b:
         6e:e4:e6:f0:a0:b0:27:80:97:4c:d0:db:7a:f0:64:5e:b3:ed:
         6b:d0:51:0a:22:6b:14:91:1b:5b:95:d1:9b:ad:56:78:98:33:
         12:6c:d6:67:49:3b:58:8b:90:97:8b:1e:3d:3e:7c:eb:cb:e5:
         ed:34:7a:cb:32:24:c8:96:4e:fe:05:06:dd:83:e2:aa:17:51:
         8f:b2:de:e9:3d:b3:1c:36:19:ce:c8:a5:2f:b0:f2:d4:a6:11:
         27:81:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:25:29 2025 by rpki-client