Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/22A5298E53C811EFA7F6D30AC4F9AE02.roa
File:                     22A5298E53C811EFA7F6D30AC4F9AE02.roa (raw, json)
Hash identifier:          +0Wwhj7G0ciywnVZqLImSm0cFiH9ayg/xMr7sWT4uas=
Subject key identifier:   C7:3F:88:C3:58:08:F3:A6:62:C6:A1:05:EA:44:29:EA:96:EC:22:97
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3180
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/22A5298E53C811EFA7F6D30AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:23:04 +0000
ROA not before:           Mon 06 Jul 2026 16:23:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152530
IP address blocks:        157.66.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12672 (0x3180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:23:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd668-de7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:49:1f:fe:d3:af:9a:b5:6a:1f:53:98:64:c9:
                    2e:f9:61:f9:4f:9a:e3:eb:b8:fe:48:7f:ad:1d:2c:
                    f5:13:d8:79:68:4a:f2:08:68:c9:55:f0:9b:96:0d:
                    42:cb:be:0b:1c:b2:95:f4:ae:5f:1d:66:cf:a5:aa:
                    d4:7b:b6:01:d4:92:8f:4a:9e:4d:f0:bc:6f:bb:a4:
                    77:8f:03:cb:2a:6d:f4:5b:41:9b:48:e7:7a:0f:ed:
                    87:db:67:21:bd:2d:40:cd:a4:24:da:43:17:be:71:
                    22:df:f9:1f:2f:d8:5d:fe:f5:91:d3:cc:01:ba:80:
                    66:35:11:7c:a8:5c:79:0b:cc:fe:f1:d5:91:e0:f6:
                    9b:b4:98:fb:aa:41:a0:24:03:d2:98:d2:4c:92:50:
                    5e:4e:06:31:88:dd:f9:24:c1:6e:f4:f0:94:32:71:
                    45:8d:66:5d:03:02:70:1b:3d:a8:1b:09:e0:d8:47:
                    65:5c:c5:d2:99:b8:98:09:ea:34:36:f5:71:e1:7d:
                    64:dd:61:db:60:03:d9:c7:59:d2:44:3e:e7:b4:95:
                    6c:df:ff:2b:e5:4a:14:9a:03:b3:08:8e:81:6a:47:
                    63:92:fe:7e:60:58:4d:34:6f:f1:81:fb:63:74:d6:
                    cb:59:89:67:29:4a:0e:01:db:7e:34:f2:83:f8:65:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3F:88:C3:58:08:F3:A6:62:C6:A1:05:EA:44:29:EA:96:EC:22:97
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/22A5298E53C811EFA7F6D30AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:bd:fd:a9:21:55:6f:52:65:c0:88:c8:2e:fb:73:e4:64:e9:
         1c:83:98:aa:51:d8:95:30:3c:44:e5:ef:1b:99:f8:32:fd:dd:
         cc:a8:14:27:17:6c:57:93:07:e8:5a:6a:6b:ec:c9:d1:20:9d:
         96:6a:5d:a7:a0:5a:e3:35:e3:64:50:3b:c1:61:24:ee:5b:cd:
         8a:3c:c4:ab:80:15:2e:a6:03:cd:66:6b:d2:54:86:cd:9f:ea:
         c9:b1:8a:19:6d:3e:79:b8:27:ce:89:9d:9a:89:87:e7:c4:5c:
         4f:2c:9b:ed:fe:87:e2:e1:0a:22:aa:fa:0f:9a:7f:2d:1a:75:
         1d:99:58:47:85:25:cd:93:e7:3b:53:45:74:6c:4f:76:79:bf:
         66:b4:47:4b:f7:cd:53:eb:d0:1f:88:04:55:be:c6:9a:d1:dc:
         78:f6:56:29:ad:d8:2b:bd:82:56:d2:a8:eb:01:51:dc:a3:61:
         de:66:36:72:d3:e6:7e:a9:39:9c:85:cc:d9:23:b9:19:84:6e:
         23:93:cc:97:42:6e:79:42:4e:b9:09:5b:8b:f4:e5:39:8e:43:
         bc:ee:f0:c5:d2:0d:cf:1b:9f:17:29:3a:5a:50:b2:46:93:3a:
         f2:38:a1:1d:7f:63:10:79:1d:1a:f9:07:93:9f:eb:2b:69:10:
         1c:89:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:11 2026 by rpki-client