Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/2AC55BAED83511F193B3C8893066CEF9.roa
File:                     2AC55BAED83511F193B3C8893066CEF9.roa (raw, json)
Hash identifier:          X/pCRyo6uUE8fE8fMZAAb2F5dNLoQOAiVVIpiufiQ9w=
Subject key identifier:   BB:A6:7B:74:59:45:3D:4C:92:F6:19:1C:12:DD:F0:C2:A2:1F:F2:BA
Certificate issuer:       /CN=A9154F63/serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6
Certificate serial:       02
Authority key identifier: 41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/2AC55BAED83511F193B3C8893066CEF9.roa
Signing time:             Wed 04 Nov 2026 09:50:29 +0000
ROA not before:           Wed 04 Nov 2026 09:50:29 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     136896
IP address blocks:        147.185.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl
                          rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 10:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154F63, serialNumber=4132A4BF2E82B64DDFA389F34951D5584CAB4DA6
        Validity
            Not Before: Nov  4 09:50:29 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aeaffe5-d129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:19:fd:07:4b:ea:9f:d3:4d:8a:cc:2f:55:
                    df:22:c0:a1:c8:c7:22:42:d7:d9:4c:78:a7:be:48:
                    ad:67:d8:9a:cf:ef:5f:58:95:b2:7a:8b:00:39:df:
                    30:13:dd:b1:b5:cc:12:c7:c0:d2:26:ac:67:5a:4d:
                    b0:3a:e9:f4:25:c0:a5:19:f9:72:0f:65:49:ba:f1:
                    d3:1e:5b:07:1a:db:a7:49:ea:95:45:ba:32:0d:b4:
                    20:46:fc:2a:b3:08:b3:24:71:39:93:e8:11:c7:ca:
                    7f:2a:ce:cd:d0:a0:4d:f4:b6:0e:a9:10:93:c4:02:
                    ed:c1:8b:29:a4:be:b1:44:69:3e:f7:03:99:50:0e:
                    de:78:5c:a1:34:0e:30:49:e7:a7:80:86:1b:dd:9a:
                    4b:a1:24:1d:ff:83:91:27:b1:3d:fa:bf:a6:7a:75:
                    6a:a1:61:a6:2b:0d:98:e0:33:8d:20:fd:39:df:31:
                    86:a0:ed:0a:5f:62:e1:6c:db:90:e8:5b:fc:1d:09:
                    34:42:fe:92:b2:8b:f4:16:e1:6f:95:89:cb:3a:5f:
                    4f:17:14:9c:e3:1a:e0:8c:ac:e3:99:df:17:ec:5c:
                    aa:24:79:ca:1a:09:d9:93:7c:a5:15:20:09:f1:5d:
                    f5:5e:17:18:b1:4c:23:11:9d:38:1b:0c:bc:31:21:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A6:7B:74:59:45:3D:4C:92:F6:19:1C:12:DD:F0:C2:A2:1F:F2:BA
            X509v3 Authority Key Identifier:
                keyid:41:32:A4:BF:2E:82:B6:4D:DF:A3:89:F3:49:51:D5:58:4C:AB:4D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QTKkvy6Ctk3fo4nzSVHVWEyrTaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154F63/9DA95560D83211F1BCD0001C2F66CEF9/2AC55BAED83511F193B3C8893066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:3a:46:70:3d:f6:f1:a9:65:95:33:77:f3:8c:55:0f:b6:
         d1:30:88:9b:ce:b7:11:47:7c:ed:e0:7a:2c:0e:dd:0a:80:b9:
         e1:4e:b6:a8:f7:17:17:86:2f:06:9d:ec:d9:af:c4:19:ff:b8:
         fd:36:3a:f3:59:0d:91:19:fb:65:cf:87:b5:42:13:82:14:6d:
         93:09:f7:d3:f3:92:bc:b5:f1:df:b9:07:13:d5:ea:4c:55:77:
         e3:e4:ce:d0:b7:12:87:45:cf:8a:86:71:bc:c3:9e:44:68:c6:
         c9:25:7a:a5:83:aa:0e:86:24:26:a8:65:6c:d0:d8:11:2e:01:
         af:14:ea:58:b4:37:50:66:ab:4e:64:c7:ad:76:d8:eb:bb:87:
         26:6a:b2:7d:22:cd:4a:6d:70:60:f8:23:f2:cb:44:87:22:8d:
         18:38:37:4c:9d:54:90:5a:6e:4c:96:92:ca:44:d9:50:c3:4f:
         c4:e9:45:23:97:f6:0e:cb:c6:45:e5:34:7d:87:9b:6a:6e:3e:
         e6:a6:8f:fb:56:6a:a2:0a:e4:b3:c2:d5:32:d5:ca:b9:9c:b1:
         ec:a8:7f:5a:90:e1:7f:b8:a0:b1:e1:d8:a0:47:b5:6e:a9:6f:
         c5:9e:b9:6b:4e:92:66:4d:c8:f8:3a:1d:67:c7:0e:9a:23:c0:
         2d:85:1c:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:53:17 2026 by rpki-client