Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/783697D2107A11F1854A0E192E3D8C67.roa
File:                     783697D2107A11F1854A0E192E3D8C67.roa (raw, json)
Hash identifier:          +OAeGwPI3EPeO4SeSL4WG+KcFLm2kg/q6A7zTPgsK3U=
Subject key identifier:   40:B7:E4:71:F3:90:40:93:BF:A1:3B:C2:D4:65:F0:44:05:1A:E3:91
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3634
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/783697D2107A11F1854A0E192E3D8C67.roa
Signing time:             Thu 06 Aug 2026 15:10:52 +0000
ROA not before:           Thu 06 Aug 2026 15:10:52 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9318
IP address blocks:        157.66.64.0/24 maxlen: 24
                          157.66.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13876 (0x3634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Aug  6 15:10:52 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a3fb-bf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:7f:2d:4c:03:0b:6d:fd:52:c4:d8:b7:d1:
                    d2:3e:7c:80:5b:1c:88:b2:0c:27:a1:63:c1:a5:3b:
                    5d:4d:20:a5:39:71:c1:08:4e:95:59:b3:83:a2:e6:
                    cc:c8:2c:92:af:9c:59:0e:9e:98:c8:9b:c0:22:45:
                    50:c1:04:ff:74:00:7e:41:3e:64:bf:0b:94:50:75:
                    92:79:b7:16:c7:42:29:5b:a3:61:f7:c4:2e:a3:09:
                    f7:ea:9e:4a:56:7f:1c:f0:20:b8:c1:5b:48:10:99:
                    5b:8b:ea:e1:07:2a:67:f3:e9:6d:29:3b:d9:f5:84:
                    4a:b0:95:35:42:d8:c5:b1:c9:d2:9b:95:1e:c5:39:
                    58:74:3c:b8:65:27:9f:eb:b4:b7:c0:15:d0:99:e9:
                    84:cd:f1:35:39:eb:0f:15:39:2a:49:c7:1c:36:87:
                    15:be:bc:1a:62:d9:08:06:13:7b:cf:d0:30:28:dd:
                    5e:0a:fe:19:62:4c:bc:1b:39:fb:63:3b:f0:b0:87:
                    b3:e1:0c:f2:41:dd:9b:97:74:4b:e3:b0:d1:da:65:
                    59:d0:99:5d:51:78:fc:07:0e:4a:38:30:13:3f:9d:
                    37:5f:3f:46:1f:35:28:66:3f:ee:c3:4d:2e:3f:ed:
                    6a:64:ef:87:2a:d4:b0:6d:cb:28:a6:cc:b1:3a:94:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:E4:71:F3:90:40:93:BF:A1:3B:C2:D4:65:F0:44:05:1A:E3:91
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/783697D2107A11F1854A0E192E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:83:4a:7f:24:23:4d:44:f3:64:6c:8e:f1:91:04:d9:94:5b:
         ad:72:f6:b7:63:d6:ef:b9:8a:cc:bf:a0:dd:41:c0:ca:ce:c8:
         15:19:d1:d8:5a:e8:28:70:12:07:8b:1d:17:37:f1:3f:62:6f:
         83:d5:de:ec:60:8e:0c:69:ab:6a:8a:22:d1:4f:2b:9b:8d:7a:
         f8:ca:ba:5b:29:f3:5c:c6:7c:47:91:2b:94:02:dd:06:4b:6f:
         fb:9c:3b:24:64:1f:ce:47:8d:00:3c:65:dc:35:5d:ea:3b:8e:
         0d:79:fc:e3:24:05:1c:1f:79:9c:f4:a2:c9:96:a9:98:fc:0a:
         1b:cd:5e:70:fa:e3:33:30:d5:6d:e0:c1:93:7e:21:46:47:e9:
         25:9e:e1:50:d6:12:60:07:0b:08:a7:f2:1f:fa:49:1c:aa:22:
         96:80:83:a4:d8:b9:02:81:27:83:30:43:90:e9:1d:0d:ed:b9:
         5d:0a:e6:71:0d:6d:d4:41:92:70:5d:c5:f7:e4:b8:3b:56:9f:
         a4:28:5a:89:a7:ec:93:22:92:e8:ed:5b:38:02:2e:e5:fe:b1:
         7f:54:5d:2e:da:58:a9:bc:9a:19:64:9e:cc:7f:72:cd:52:e6:
         16:25:82:51:85:0b:ec:53:87:40:09:69:68:62:0c:33:77:77:
         e1:04:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:09:25 2026 by rpki-client