Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/63BC93F4F8C311EE9B11851BC4F9AE02.roa
File:                     63BC93F4F8C311EE9B11851BC4F9AE02.roa (raw, json)
Hash identifier:          yTD204QcBGs3THlleiSk9p90t5wI2tnpsnVmhmnYv+w=
Subject key identifier:   FF:79:A9:9A:AA:60:76:A2:AB:08:74:A5:63:3B:8D:87:DA:F7:78:1F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3133
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/63BC93F4F8C311EE9B11851BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:20:30 +0000
ROA not before:           Mon 06 Jul 2026 16:20:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150581
IP address blocks:        157.66.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12595 (0x3133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:20:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5ce-fa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:8d:8a:40:00:86:93:fc:ce:b2:fd:d0:4d:
                    ba:5e:85:35:ca:13:af:e1:0a:9d:70:29:dd:22:db:
                    1e:28:59:f2:9a:95:a7:41:5d:ba:70:aa:55:2e:21:
                    3b:d1:f5:03:30:57:33:61:9b:7d:fc:c1:d6:c0:dd:
                    a3:8e:37:5b:df:e8:de:82:3f:cd:f7:1b:ec:bc:c0:
                    58:d3:02:ca:1f:94:3b:b0:98:fa:1b:d3:24:10:46:
                    4a:61:cd:a6:84:39:f0:8b:fe:eb:90:45:37:62:d2:
                    d3:73:be:b3:46:0b:d7:01:84:c8:c5:3c:28:24:34:
                    80:d0:cc:8f:8b:9a:44:95:03:8a:4d:95:9f:0d:dc:
                    4a:e1:5a:06:60:33:f8:28:9e:b9:1b:46:88:5c:91:
                    83:23:ac:40:10:b3:4f:c6:35:fc:ea:4f:0d:43:94:
                    a7:7a:e2:2d:41:92:3b:e0:85:af:b6:3a:c5:33:f3:
                    e3:f9:fe:1d:01:80:70:ad:25:d2:5e:1a:ee:9b:82:
                    19:fc:8c:ce:9b:e2:88:1a:0d:af:70:07:d9:2f:97:
                    82:c8:ed:c3:3f:9c:dc:4f:71:6c:29:e0:0f:1a:c8:
                    02:22:03:90:be:99:7c:60:b3:c2:5f:b0:ea:77:86:
                    49:ff:fd:ef:77:fb:e2:6f:b6:b8:d9:16:38:37:1a:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:A9:9A:AA:60:76:A2:AB:08:74:A5:63:3B:8D:87:DA:F7:78:1F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/63BC93F4F8C311EE9B11851BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:77:5a:eb:2d:5f:b8:c9:20:de:b3:db:31:0d:dc:5a:19:8e:
         d9:f1:25:59:92:3e:ee:e6:46:eb:d3:d8:4c:b3:14:c7:70:ee:
         fb:a9:e7:6d:2f:97:59:d2:56:70:5c:f2:16:08:bc:95:18:7a:
         dc:9a:4d:62:21:13:01:33:51:1e:a2:ad:8b:3f:a9:a7:66:91:
         48:19:9c:04:63:53:7f:39:db:53:e5:ae:c2:9d:3c:f6:41:bd:
         59:7f:eb:c9:0a:d3:4c:17:5e:f4:82:18:02:44:fe:1a:38:fa:
         00:ca:b0:ed:58:27:2c:bc:83:65:96:ce:62:19:4d:82:61:a5:
         43:b9:1d:5d:37:fc:6a:63:1a:26:83:2c:94:ab:b2:a1:b4:1b:
         db:cc:52:e2:45:a4:4d:df:76:11:c0:8c:e8:20:00:a6:c3:13:
         e4:63:f9:1c:bc:b9:09:8d:b1:29:cb:f0:53:14:af:92:5b:1d:
         0b:43:9c:ae:dc:f6:77:05:05:36:b1:7e:55:40:72:15:3b:48:
         dd:47:1a:2d:9e:a4:79:24:5a:c6:f4:41:c5:07:e7:4c:4c:73:
         fd:08:ef:c9:eb:78:2c:32:ae:a7:d3:c2:4f:db:6a:76:8d:17:
         88:8a:f7:c3:b8:78:73:19:8c:03:69:f6:0f:04:9f:da:45:6e:
         6d:3f:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:05 2026 by rpki-client