Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2ABC809E077F11EFB9D19238C4F9AE02.roa
File:                     2ABC809E077F11EFB9D19238C4F9AE02.roa (raw, json)
Hash identifier:          P2RM3gYeGzI38Ys6bJDrneCfUueyPimH5ZsHsm5q+p8=
Subject key identifier:   39:ED:10:53:63:16:E5:5D:81:B4:62:89:8B:DC:10:2C:40:70:D1:B7
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F42
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2ABC809E077F11EFB9D19238C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:24:38 +0000
ROA not before:           Sun 31 May 2026 16:24:38 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152502
IP address blocks:        157.66.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12098 (0x2f42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:24:38 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60c5-6609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:d7:cb:dd:60:fe:5a:6d:e2:e4:58:ed:dc:
                    4f:3c:84:92:00:f3:bc:0d:2d:11:13:53:9b:f1:6e:
                    1e:b9:d2:c1:b5:94:0a:a9:0b:03:36:95:df:e0:e2:
                    61:7d:5b:cf:50:d2:d0:d0:cb:5d:b0:99:5b:7d:46:
                    f8:e0:fb:85:82:7c:c6:db:2a:12:cf:1f:dd:06:2c:
                    63:67:6e:5b:23:8a:27:fc:db:a4:ba:47:ed:2d:83:
                    fb:fa:5c:0a:fa:a4:47:17:ed:f3:18:6f:cc:b7:32:
                    63:e4:9e:24:6b:7c:5b:9f:59:e1:e5:c8:88:1e:ff:
                    54:2e:7b:ae:37:ac:fa:60:ab:42:d4:db:d8:e4:1d:
                    89:c6:54:27:a8:59:f7:ed:f5:6d:36:08:63:fb:90:
                    36:ab:17:d3:89:49:cd:99:06:84:93:40:0d:75:5a:
                    94:1a:17:ee:fb:f3:5c:cd:97:7e:ad:9d:26:d2:2d:
                    1f:2b:7d:a9:d7:83:de:1e:ad:33:c9:d2:51:44:4e:
                    4a:83:15:e9:61:fa:49:3a:51:d7:93:6c:06:c2:91:
                    78:d7:a3:45:23:4c:ea:06:7f:49:bb:57:73:bb:94:
                    8d:f1:5b:06:78:e0:21:09:e3:7d:a7:99:1d:03:34:
                    73:42:cf:b4:f9:62:a7:b3:20:86:ae:36:55:b5:c8:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:10:53:63:16:E5:5D:81:B4:62:89:8B:DC:10:2C:40:70:D1:B7
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2ABC809E077F11EFB9D19238C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:57:c4:0b:84:cc:22:1e:bd:07:42:40:6d:fa:c1:df:57:
         ac:3a:12:6f:10:6e:d9:ef:42:e7:5d:c8:d4:95:81:3c:fc:35:
         c7:5a:d9:fb:ba:a1:58:48:5c:4e:01:42:57:b6:67:22:94:03:
         95:a7:3d:81:72:4a:9b:bc:30:57:1e:e4:06:aa:64:bc:c6:8f:
         ec:4b:56:a2:a4:e8:8e:00:d3:8f:e4:8d:25:09:26:cc:cb:51:
         57:f8:f4:02:60:7c:94:6a:eb:97:c7:b0:37:97:06:5f:e1:e4:
         97:db:b1:43:bb:04:e9:ef:a4:e4:38:de:ed:b7:c8:6c:f6:0a:
         f3:dd:d9:b9:08:e6:26:2a:f5:9c:7e:57:79:ae:a9:dd:74:d6:
         27:91:5d:06:d0:71:cf:15:8c:f9:b3:d8:05:78:95:71:c0:8f:
         87:27:8d:29:c7:84:2b:05:31:36:ac:c5:0f:32:1f:b1:5c:52:
         da:e0:61:5e:af:d9:9a:50:34:cc:ba:cc:10:e3:53:c7:b6:19:
         6e:b6:d9:56:fd:8c:bd:dd:34:d0:bb:ba:9e:ce:ce:56:81:21:
         ce:af:85:55:cf:92:0b:fb:58:69:95:53:61:5d:21:dd:98:16:
         26:7c:94:85:9b:2c:32:02:49:0f:f1:66:a0:c7:a2:1a:d4:56:
         44:c2:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:11 2026 by rpki-client