Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa
File:                     217537E8B64B11F0ACEA6E59C4F9AE02.roa (raw, json)
Hash identifier:          326MYxW4+LYBGmSgv8UoVc+MhHHszOXNHycQbGr705M=
Subject key identifier:   9E:DC:1C:DD:40:04:90:E3:97:80:9F:42:30:F4:0F:05:AE:52:DF:D3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3128
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:20:08 +0000
ROA not before:           Mon 06 Jul 2026 16:20:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149589
IP address blocks:        157.66.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12584 (0x3128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:20:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5b8-bac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:da:fb:bc:99:a0:d2:c6:f0:12:fd:64:8e:fb:
                    7c:79:62:75:aa:f0:f6:07:5d:0b:27:55:5a:40:f2:
                    59:3b:3c:f4:a8:51:3f:bf:f1:81:af:47:31:f5:a2:
                    9d:10:4b:c7:4e:e0:eb:80:dc:ad:84:a7:13:90:4b:
                    ca:94:8c:87:da:2e:83:80:89:3d:9c:1d:7e:29:9b:
                    ee:f4:0b:0c:ae:2c:31:29:5a:b0:34:9c:41:91:e7:
                    63:d9:f9:ef:7d:b0:e7:0a:f7:0c:68:1a:8c:ba:32:
                    06:2a:c3:e3:ff:dd:bd:21:5c:bf:0f:1e:b6:34:39:
                    6d:63:b6:74:95:df:37:45:fa:41:b0:df:48:25:0f:
                    b4:7f:46:e5:d8:28:e6:74:8a:99:d9:43:ff:8a:27:
                    43:ef:21:a5:66:64:32:1e:76:a2:85:85:c5:1f:9b:
                    10:30:47:01:04:c3:e7:44:07:93:2c:5d:16:cb:8e:
                    95:03:af:cd:63:6d:b4:df:e4:38:7e:91:06:9a:4a:
                    d7:43:1f:5c:8b:fa:0d:61:b7:02:46:e2:ac:f0:65:
                    c3:44:6b:ad:f7:55:84:3c:8a:ae:ac:9a:96:8b:d5:
                    76:5e:6a:00:f0:fa:c0:60:9e:1d:79:e7:43:b2:ed:
                    d7:2a:9e:c9:8f:f1:01:10:09:b4:de:72:b8:ee:94:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:1C:DD:40:04:90:E3:97:80:9F:42:30:F4:0F:05:AE:52:DF:D3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:12:98:6a:73:2a:03:2e:9a:51:9b:e7:86:6b:00:00:60:
         aa:3f:77:90:ac:f0:6c:96:f1:7f:db:96:2a:6c:d0:67:ec:e3:
         91:72:1c:7f:ab:fe:ac:3d:7d:6f:63:f8:e7:03:d6:bd:66:6c:
         66:52:22:b3:11:b2:45:70:72:18:7e:8d:1d:07:49:1b:05:b4:
         2a:58:3e:80:77:5d:08:e1:5c:de:98:1a:38:fe:73:50:11:db:
         80:24:24:49:35:a1:0d:ac:27:ce:86:f3:9c:79:52:06:30:18:
         a0:95:fb:25:1b:ca:de:c8:76:3c:98:48:73:98:2e:a7:ce:84:
         c2:2a:37:41:ae:6a:a3:3c:74:74:6e:95:a1:b1:46:7e:47:48:
         b7:27:d9:93:ed:3c:9b:d9:59:44:87:6c:70:4f:81:c9:40:5d:
         b1:0a:be:11:c6:29:e0:76:43:86:33:f4:e2:01:28:90:a8:32:
         7d:d9:a2:8f:a0:bb:b9:f7:df:4c:bf:47:20:18:c7:77:7c:45:
         3f:bd:67:be:0d:e3:a2:b3:23:39:1b:75:b8:fc:d9:e3:c4:8d:
         14:1c:dd:84:76:01:90:71:8f:95:56:41:f1:fd:de:45:ce:8c:
         3c:60:8f:25:5e:7d:00:02:cf:9b:a7:0b:b5:5e:ad:23:d8:36:
         72:02:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:47 2026 by rpki-client