Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/42BF9F626C2111EF8AAEC852C4F9AE02.roa
File:                     42BF9F626C2111EF8AAEC852C4F9AE02.roa (raw, json)
Hash identifier:          06wI7/jHWsj4O7P8iig05JwR19Jn7caKQf/Dgj/MsYI=
Subject key identifier:   73:8F:B9:D7:37:07:86:A9:BE:CA:72:E5:E9:11:16:F9:83:9D:A2:BC
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F4B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/42BF9F626C2111EF8AAEC852C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:24:54 +0000
ROA not before:           Sun 31 May 2026 16:24:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152515
IP address blocks:        157.66.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12107 (0x2f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:24:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60d6-b3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:8f:cd:92:cf:db:f1:bb:a2:ab:fd:d6:93:
                    14:41:3d:78:43:df:c4:57:3d:a8:e9:53:d9:21:46:
                    75:e6:80:a9:bd:9c:f7:5f:a9:6c:42:d5:c1:da:d0:
                    96:9f:5f:cf:70:c1:00:00:f5:83:a7:76:a6:cc:22:
                    c1:78:2b:d6:ff:39:73:2d:84:62:6c:2f:76:d0:43:
                    ea:b6:ed:0e:4e:e6:6b:f6:f5:00:c7:37:93:17:19:
                    bb:61:d7:3f:c5:0a:3a:35:56:81:f2:6d:c8:3a:07:
                    f0:a5:de:22:91:75:46:89:a8:9c:b0:d9:c6:08:cd:
                    2d:5d:d7:50:b5:22:7d:4d:c8:a4:78:65:d4:bb:51:
                    06:6e:02:2d:37:f9:18:37:09:1b:6f:8d:bd:fb:9c:
                    cd:e3:9a:f7:8a:40:10:17:56:5a:1f:5a:71:c3:8b:
                    1e:fe:fd:e2:cc:fd:23:2c:6a:d3:bf:52:db:9a:cd:
                    f2:5b:1f:cb:31:5b:cd:2c:a8:c3:1a:58:42:ef:29:
                    f4:6c:ae:fc:ac:8c:aa:00:d7:56:f4:b9:b1:70:75:
                    64:37:7d:64:b4:e7:2d:ea:2e:48:5c:87:2a:d2:4c:
                    b0:56:f7:7b:e1:a2:c8:35:ac:88:54:1c:b7:59:77:
                    04:88:b4:c5:f2:1e:d2:2b:55:35:04:3b:da:ad:5a:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8F:B9:D7:37:07:86:A9:BE:CA:72:E5:E9:11:16:F9:83:9D:A2:BC
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/42BF9F626C2111EF8AAEC852C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:56:c6:55:af:1b:15:de:a3:c7:fc:62:88:c0:b4:b2:8b:8b:
         88:9b:ea:55:49:06:dc:2b:5e:8e:06:66:85:6a:dc:dd:32:38:
         49:36:1e:2b:e2:ca:c7:d2:7b:d5:a5:1e:7c:c2:0d:45:c3:fc:
         24:03:09:ff:b9:b7:17:69:ba:6e:59:ad:c8:da:e6:a0:20:63:
         69:1b:73:88:62:cf:ef:04:7e:8b:65:87:47:b0:83:37:1a:63:
         2d:3c:a0:ac:c0:02:25:cf:4d:d4:5b:cb:09:3f:34:2d:9f:82:
         07:2b:9f:f3:cf:be:29:96:b7:15:37:30:7c:02:84:8b:43:d5:
         9e:fc:e8:29:d2:59:5c:1b:c4:99:55:50:f8:66:a3:a6:e7:55:
         d7:cc:2e:9f:30:fb:34:94:c6:33:5b:a5:9f:22:55:26:d2:9a:
         d2:99:59:cd:47:ef:34:ab:69:41:4d:0b:82:fc:b7:ff:64:f5:
         e7:cc:d4:e7:ec:a1:a0:47:53:f7:77:e6:1d:b6:b7:b8:b3:6f:
         41:88:2c:ee:bf:c2:38:ea:9e:3a:2c:d4:94:ed:c9:b1:6d:d2:
         b2:c6:b7:87:0f:01:cc:46:c9:05:58:08:a9:6f:c1:46:16:9a:
         5a:eb:1b:e4:18:52:4c:be:df:19:c9:5e:cc:db:2a:b8:18:67:
         1f:af:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:01 2026 by rpki-client