Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/994EDA7E477011F19156235992833773.roa
File:                     994EDA7E477011F19156235992833773.roa (raw, json)
Hash identifier:          vNUdaJe39D6/NPIsLWpYA4vjhaK+nD0yILQ3abEx9jk=
Subject key identifier:   60:CC:A4:1C:E6:FB:76:4C:C1:74:73:DD:52:BB:8F:16:87:24:B2:AB
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2C52
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/994EDA7E477011F19156235992833773.roa
Signing time:             Fri 31 Jul 2026 16:22:44 +0000
ROA not before:           Fri 31 Jul 2026 16:22:44 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     149675
IP address blocks:        157.66.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11346 (0x2c52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: Jul 31 16:22:44 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6ccbd4-561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:03:aa:12:8c:d9:ae:c0:da:14:07:02:e5:
                    0e:d9:10:59:d7:20:57:28:8f:6a:de:cb:a9:d4:b0:
                    cc:fa:3f:1c:38:1d:b9:26:3d:23:db:5a:33:a1:35:
                    f9:8f:8b:af:21:da:3d:5b:e2:35:13:04:41:29:61:
                    d4:57:40:0a:1f:75:99:2e:41:76:1b:e7:ba:17:92:
                    36:53:58:ac:70:ac:0d:bc:3f:ad:d3:54:fe:91:53:
                    60:7d:77:26:6f:a1:7c:98:dc:89:b0:40:56:4f:3e:
                    7c:9d:4e:b6:3b:b3:be:c8:24:07:bd:36:0b:a7:c5:
                    18:ff:3d:9c:20:9d:7f:8a:da:99:e5:16:91:f9:1d:
                    4e:12:82:7d:ce:b7:f8:fa:19:ca:34:9d:e4:76:19:
                    af:dd:d0:cf:f6:ff:ec:9c:23:33:37:e1:bb:77:16:
                    5a:72:74:8d:e8:44:1f:23:1c:cb:75:df:7b:67:2d:
                    8f:30:40:b7:b7:9a:2f:7a:c7:9b:03:c4:16:47:31:
                    5a:f1:a5:fc:d9:9a:05:3c:83:6b:38:e0:60:2d:3c:
                    64:9c:80:a0:42:1b:0e:01:39:3d:19:c1:fb:b1:fc:
                    72:42:c2:e0:09:f3:dd:01:af:e6:06:13:4f:4d:f2:
                    df:0b:47:06:11:a2:b7:a0:1a:d9:bd:28:ca:ad:c7:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:A4:1C:E6:FB:76:4C:C1:74:73:DD:52:BB:8F:16:87:24:B2:AB
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/994EDA7E477011F19156235992833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:e5:1c:8b:d6:6c:34:36:ac:9c:f6:47:76:5b:dc:c7:f0:
         23:6d:ff:29:00:cb:f1:08:2c:04:55:8e:74:28:0f:9f:e3:4a:
         fe:54:1b:20:37:37:af:e8:68:c8:c8:3a:03:6f:c5:25:ab:a3:
         7f:bc:74:11:81:2d:ce:01:e6:e6:71:d6:56:1c:dd:1e:f4:15:
         6d:28:3c:16:da:e8:3d:a0:58:dc:66:27:bc:d9:ff:5d:b3:2e:
         39:d3:90:40:31:8d:10:d2:e7:53:60:c3:a4:3e:e9:4f:96:e3:
         0c:fa:d2:3a:d8:39:e0:fe:50:a8:aa:db:ac:b9:3c:44:cd:67:
         83:ee:d2:9f:8b:85:d6:e3:94:1d:da:8f:8a:3c:1a:85:8a:e7:
         e0:33:bb:47:ed:13:ab:9e:a8:92:e0:35:fd:a5:04:81:5c:1f:
         00:16:4d:0e:ea:15:70:7a:5e:93:e9:bd:e5:df:94:6e:29:f0:
         8b:de:06:c3:80:1b:75:c2:61:ed:49:94:bf:a0:00:ee:5b:3a:
         99:33:54:42:8d:75:51:b0:69:23:90:d0:db:d5:c0:ca:cd:0d:
         9f:b5:4c:99:0c:2a:03:03:33:71:fa:fa:d8:a1:ae:57:be:78:
         5e:20:93:6d:4a:41:dc:09:bc:d4:fe:6d:a4:bf:ee:3d:20:fe:
         03:2f:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 15:13:04 2026 by rpki-client