Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa
File:                     ACCFE0643C9711F08159891EC4F9AE02.roa (raw, json)
Hash identifier:          vfxzvdcqgWLnSEq2dmhNufowDlzzdu4JUadQumkSpXc=
Subject key identifier:   55:73:65:74:24:D5:9D:51:A3:35:B2:51:DB:FB:B5:B3:1B:50:7F:3E
Certificate issuer:       /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
Certificate serial:       0106
Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa
Signing time:             Mon 05 Oct 2026 06:55:23 +0000
ROA not before:           Mon 05 Oct 2026 06:55:23 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141011
IP address blocks:        165.99.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC
        Validity
            Not Before: Oct  5 06:55:23 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac349db-9cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:a3:ff:c6:6f:de:31:70:03:0f:cd:88:d5:
                    24:85:b7:5b:5d:6d:a4:f4:cb:f7:0d:2d:cd:9e:b2:
                    e0:91:e7:7e:8c:63:0a:64:55:e5:e0:48:a2:2c:a0:
                    b0:ea:4d:fe:6b:70:61:ff:06:83:93:36:b4:fe:da:
                    d8:d8:6a:01:81:b0:01:d3:b0:4a:a3:6f:2a:32:66:
                    16:33:6c:92:f8:bf:b2:f4:54:1f:4c:b7:9a:af:21:
                    e3:16:84:1d:fe:93:87:93:c9:80:ab:50:b3:0d:5e:
                    49:f5:0b:5b:ca:00:b3:e7:08:1f:f0:96:78:05:03:
                    be:a3:c6:a9:e5:85:6e:83:48:ab:61:c7:01:05:dd:
                    2f:d3:a2:d6:6e:64:c9:ed:27:bf:7d:a0:1f:9a:a0:
                    29:f6:50:59:4e:a4:c6:e7:74:2a:7c:fe:48:9c:dd:
                    00:75:b2:40:49:eb:aa:6b:1f:db:7a:7f:20:c1:4f:
                    23:8c:a0:a3:c4:ac:c5:8c:27:06:b3:42:41:ea:f7:
                    56:e7:45:9d:72:80:13:ad:8f:bd:6b:31:90:db:70:
                    c6:f9:12:26:f7:ca:46:fd:6b:dc:3a:07:00:e0:ad:
                    16:3a:1e:ee:e3:c0:1b:ad:dd:ab:a9:b2:9f:ef:c6:
                    bb:f6:10:e9:29:a7:69:6f:9f:54:34:e4:b7:25:c6:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:73:65:74:24:D5:9D:51:A3:35:B2:51:DB:FB:B5:B3:1B:50:7F:3E
            X509v3 Authority Key Identifier:
                keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:39:66:77:53:c9:b3:e9:17:8b:fa:31:27:ba:85:a5:ea:
         66:39:7d:1e:36:0b:84:c2:08:41:60:a6:91:38:cf:a9:b1:55:
         b9:d3:8b:37:01:9b:cb:9a:9f:38:1e:d1:6b:d2:68:fa:4f:b6:
         38:2e:5a:b7:32:cd:31:eb:0d:8a:1d:ab:7d:0c:cf:b3:d0:81:
         35:1a:e3:3d:32:f1:50:ec:f0:ba:e8:55:20:ad:31:07:67:46:
         b0:c9:f6:09:5b:07:3a:25:b4:9b:a7:2a:95:d5:c6:ef:b2:86:
         ee:56:82:3b:e2:b9:ca:c3:bc:a9:4d:8d:23:fc:ea:6e:5f:96:
         fc:9e:e0:0f:fd:1e:55:67:d2:88:3b:f5:b7:ea:eb:e4:6c:92:
         60:88:89:d2:0b:cf:d6:e0:49:d5:32:10:88:64:74:7b:92:b8:
         a6:22:63:89:33:15:b9:25:df:c4:9a:7d:82:f2:dd:fb:d5:bd:
         37:16:b6:42:c0:4d:2d:ba:09:b9:e7:65:45:17:7e:14:25:bd:
         5a:eb:1f:a5:e8:fd:a9:3e:b7:a3:4f:fd:f5:78:14:f3:f2:eb:
         be:cc:b9:a6:9b:25:19:d7:39:20:0e:f2:09:53:1a:98:82:71:
         47:d1:b7:87:5d:dd:86:1e:0d:42:33:dc:31:b1:b6:f3:1a:d6:
         02:ce:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:23:38 2026 by rpki-client