Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/994EDA7E477011F19156235992833773.roa
File:                     994EDA7E477011F19156235992833773.roa (raw, json)
Hash identifier:          cW3AAUhFV3UrR438cEqC9lCUETRlljc4Il2HXpHaPiI=
Subject key identifier:   4B:3A:FF:2E:75:C2:B5:EC:F5:0D:CC:A5:9F:9F:F7:B6:E2:37:B8:5A
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2BF7
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/994EDA7E477011F19156235992833773.roa
Signing time:             Mon 04 May 2026 04:20:36 +0000
ROA not before:           Mon 04 May 2026 04:20:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149675
IP address blocks:        157.66.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11255 (0x2bf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: May  4 04:20:36 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f81e94-1c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:99:36:a1:d2:c5:7b:fd:c3:87:fb:85:7e:
                    8e:ad:93:32:cc:32:08:3c:64:da:af:9c:f7:2d:63:
                    d1:a7:f1:97:29:e1:b8:e9:a1:3a:1c:7b:8a:81:c6:
                    1f:18:34:74:bd:7f:94:d0:6c:db:a5:a4:01:f7:19:
                    0e:b4:b4:7d:ce:39:85:90:49:9f:71:81:35:34:4a:
                    fd:22:b5:c1:35:fe:aa:c1:9d:24:6f:6f:9d:4a:07:
                    cf:db:e9:46:c8:e4:bc:f7:cb:44:41:84:f5:76:3a:
                    b9:b4:17:1c:77:8a:70:bd:22:a0:ca:13:e5:d9:b4:
                    9f:11:13:84:0a:23:99:1d:e4:86:5c:c7:20:24:d8:
                    fd:e6:a9:fd:18:48:44:fa:be:6d:1a:2c:29:5c:44:
                    e3:22:33:ef:0e:0d:2a:27:ea:c8:84:cf:76:31:ab:
                    8a:6e:cf:ff:0f:30:49:ca:a7:b6:0e:86:6d:38:ef:
                    ad:06:3a:39:c7:ff:bf:3e:cd:74:7a:3d:ea:aa:3f:
                    bd:02:e1:bc:91:aa:f0:89:c9:15:8f:1b:a9:2a:91:
                    8a:83:2d:a5:92:06:df:1e:84:71:77:ef:42:84:fe:
                    f6:f1:99:0f:44:af:0d:db:1c:f8:ef:f7:5c:b5:87:
                    52:ad:ab:d2:ba:41:af:a0:4b:d5:f0:1e:86:9f:97:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:FF:2E:75:C2:B5:EC:F5:0D:CC:A5:9F:9F:F7:B6:E2:37:B8:5A
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/994EDA7E477011F19156235992833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:fb:61:f6:85:21:b8:f0:e3:29:eb:d8:38:6a:3b:39:d5:0b:
         44:c1:d6:ea:3a:42:9f:e1:79:f6:21:73:30:46:53:26:9c:9e:
         11:f8:7b:72:47:c2:6d:eb:f6:82:8c:3c:5f:af:59:89:68:6a:
         db:d6:48:24:32:3b:20:cb:4d:fc:c6:be:28:4f:36:3f:4b:08:
         39:1c:36:88:1a:f8:b3:43:35:4b:6e:15:ee:c2:16:9d:5c:d9:
         93:56:60:58:9e:28:79:8f:df:5d:90:13:02:ca:0f:32:43:72:
         63:e0:29:24:82:7c:38:ec:7d:bc:92:75:fe:05:88:50:33:1a:
         26:0f:2f:9d:8b:ad:ee:87:65:40:98:38:27:b7:db:c0:1d:47:
         ce:85:4d:ca:52:fc:d7:39:3b:5c:e1:e7:a5:d1:d4:dc:1e:f7:
         76:7f:e2:84:4b:43:eb:eb:6e:30:5e:6f:37:61:e9:48:09:b7:
         42:b0:14:f3:3a:06:15:e8:b7:82:6e:39:92:4d:f9:99:66:d1:
         f4:2c:0a:07:af:85:56:c1:e6:c7:11:9c:21:67:89:5a:de:54:
         37:a1:d7:91:e0:16:13:b5:6d:71:8c:cf:02:55:52:fc:28:8e:
         be:51:b7:87:81:64:99:8e:47:54:07:63:f0:95:01:db:ff:d8:
         5c:6c:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:18:08 2026 by rpki-client