Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/760623AE646111EF9977D95FC4F9AE02.roa
File:                     760623AE646111EF9977D95FC4F9AE02.roa (raw, json)
Hash identifier:          nFAQf8PGCSnW0sqwgZaaXI/mBAD2m97vDo2Vo2j9uOk=
Subject key identifier:   A7:9F:10:1F:3F:80:E4:D4:E6:5D:75:19:69:E0:B9:64:0D:FD:33:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EC7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/760623AE646111EF9977D95FC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:20:41 +0000
ROA not before:           Sun 31 May 2026 16:20:41 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139490
IP address blocks:        157.66.152.0/23 maxlen: 24
                          160.30.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11975 (0x2ec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:20:41 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5fd9-5589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:95:11:95:0e:48:56:1a:86:a6:d0:c0:e4:
                    6d:1f:18:4b:69:77:3d:60:da:f9:e2:c8:5a:48:8f:
                    60:17:4b:c9:67:cc:59:f2:1a:99:d7:52:8f:b4:85:
                    47:5d:f9:18:1f:e1:18:0d:07:d8:d6:db:80:3e:e9:
                    a8:b6:96:bd:54:c7:5a:31:24:7d:75:7e:14:7a:96:
                    26:eb:e6:6b:44:8e:7b:53:3c:79:a4:ab:e5:c1:05:
                    85:fb:8c:f1:46:e7:ce:1e:20:0a:72:f2:e6:60:4f:
                    2d:d6:ba:61:e2:de:a3:fa:8e:a2:61:ad:59:06:79:
                    59:32:f4:05:40:6d:d4:3e:9e:1a:74:47:f3:f0:4d:
                    7e:c2:c3:86:3e:d1:12:b0:4f:e1:a6:aa:72:9e:df:
                    15:2d:ba:d4:69:f1:95:20:e1:28:07:15:a1:50:c8:
                    b1:f3:f1:ce:77:6e:dc:7b:29:73:52:99:a5:45:d2:
                    48:e8:0c:ea:9b:21:e4:3b:ab:ed:b4:df:71:8c:98:
                    81:23:06:f8:f2:d1:3c:3d:dc:fe:d7:31:66:1b:44:
                    cd:19:c0:c2:55:48:da:8d:84:84:49:e5:32:59:5a:
                    68:2a:00:9f:46:43:66:3e:69:e2:ac:2c:05:52:14:
                    02:38:4a:21:76:02:5f:75:7c:91:33:de:23:99:81:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9F:10:1F:3F:80:E4:D4:E6:5D:75:19:69:E0:B9:64:0D:FD:33:CB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/760623AE646111EF9977D95FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.152.0/23
                  160.30.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:64:d0:a1:da:5b:86:0e:63:a8:c9:e0:77:19:a8:58:fa:22:
         26:78:27:1f:18:f2:49:ec:f3:75:41:36:de:34:2f:60:59:ac:
         cc:49:19:cc:6c:80:6e:ca:04:50:77:52:7e:15:26:f6:b3:c0:
         3c:a3:4d:a6:da:5e:dd:00:05:17:f3:da:42:8b:db:69:b1:27:
         82:ef:a8:5f:47:ca:de:64:4b:d8:49:c7:62:9e:2b:3c:92:f9:
         a7:6a:85:b1:f2:44:f3:f2:a1:39:00:cc:bd:ec:0c:83:1a:07:
         bb:e3:9f:6b:5d:34:37:3e:e7:97:58:90:47:a5:05:61:b8:db:
         71:b5:b2:56:bb:d4:c5:6e:85:e3:fc:79:11:65:28:2f:6d:7f:
         51:43:05:ac:3c:9b:28:01:c2:f5:22:04:a8:f5:f7:94:85:41:
         c6:68:7b:6c:ef:07:0c:0e:a0:b8:9b:2c:5e:96:77:93:f9:99:
         ba:1d:2d:81:59:6c:3a:37:62:4f:2b:60:67:4b:14:21:45:ec:
         f2:7d:7d:67:a7:fc:df:cf:54:0e:e9:bb:b4:58:17:2e:39:f4:
         f3:af:91:2d:d1:6d:d1:57:da:0c:dc:28:b8:1a:95:56:e2:ad:
         0f:c9:cb:f5:cf:27:47:d4:67:2a:90:3a:10:a8:87:a7:ef:7c:
         9d:8e:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:13 2026 by rpki-client