Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/88D9D8BA2E0411EF87801679C4F9AE02.roa
File:                     88D9D8BA2E0411EF87801679C4F9AE02.roa (raw, json)
Hash identifier:          fBeFYXTE+r2rf87Eqptvw0OJ9zGitRcSog5rV7nlF/A=
Subject key identifier:   56:09:A8:A6:39:0B:E9:03:B4:56:A5:38:92:B4:C4:4F:09:B5:0D:68
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F72
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/88D9D8BA2E0411EF87801679C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:26:09 +0000
ROA not before:           Sun 31 May 2026 16:26:09 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152572
IP address blocks:        157.66.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12146 (0x2f72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:26:09 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6121-90bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:6a:70:16:d4:2c:a9:e2:c0:48:a1:4e:19:
                    45:34:96:fa:4b:05:b6:b4:03:20:1f:c1:9b:fe:ff:
                    22:28:3f:a6:2f:cb:a8:43:f5:d6:92:4c:c0:57:c4:
                    6c:dd:60:75:df:57:07:09:bf:8c:04:3d:b5:af:18:
                    b0:4b:f5:97:38:38:15:23:1c:72:9e:2c:a6:0b:2a:
                    6f:ad:e4:58:f8:ff:e5:7a:14:73:28:f4:a5:02:af:
                    ab:8e:36:84:8c:88:6a:b1:9e:e1:d6:ae:2f:57:31:
                    4e:f8:0e:50:8d:0f:59:00:c6:8a:13:bf:7e:c9:dc:
                    34:89:4e:2d:c9:b1:64:09:7b:49:b8:6e:a0:0b:4c:
                    85:84:e8:bc:93:21:e8:8b:e1:a6:36:90:cc:fb:4f:
                    6a:b2:0c:bf:c4:3c:f4:c8:17:a5:98:65:ff:9b:93:
                    65:3d:98:63:90:2a:33:71:81:4b:76:51:46:e1:db:
                    89:b7:28:78:02:c7:e9:95:44:cf:a6:42:67:cc:fb:
                    40:2f:60:20:d3:75:f9:2b:59:01:9b:12:e0:f5:11:
                    7e:98:d6:02:2c:61:8f:d5:50:81:1e:29:7f:d2:92:
                    88:2f:c9:3a:db:44:6d:68:8a:ca:01:c5:89:35:93:
                    46:30:51:d4:21:e3:aa:34:fe:20:22:3b:7a:e6:9e:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:A8:A6:39:0B:E9:03:B4:56:A5:38:92:B4:C4:4F:09:B5:0D:68
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/88D9D8BA2E0411EF87801679C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:09:71:53:74:a1:25:a7:c8:da:4b:9d:1d:e6:23:05:4d:91:
         cc:c2:97:68:68:62:98:2e:c0:aa:57:81:68:75:cd:52:9b:b6:
         ee:9a:b0:52:ea:63:2a:9a:98:b4:be:d6:8e:9c:86:74:a1:ec:
         22:8f:9e:cf:9a:60:9e:75:29:7c:be:7d:d7:61:ae:bb:e2:32:
         ee:cb:40:27:9d:0a:4e:8f:05:88:fd:ea:03:c0:5b:45:be:79:
         38:24:a2:e5:45:b6:ee:c8:3a:f5:16:a3:e2:52:6f:89:21:52:
         cf:74:e9:4c:9b:c9:41:30:5c:9c:9b:4c:02:ce:28:76:5d:c8:
         b3:38:72:6a:9b:69:dd:37:17:b8:f4:90:0c:15:92:80:e5:eb:
         7e:2a:36:67:bd:eb:2a:93:e1:74:29:cf:1f:f3:d9:e0:ff:13:
         c9:87:ec:6a:0c:24:9d:6f:9b:7d:41:0e:d3:62:73:ca:bb:04:
         6b:47:37:d9:80:ad:a7:82:af:a0:e5:10:56:f6:65:a2:87:23:
         08:f7:b5:b8:75:4a:d5:25:24:1a:88:12:6c:6a:e9:a5:1a:0e:
         fe:55:c5:56:b3:73:b4:00:d8:c3:31:6d:46:fb:ad:43:db:64:
         99:5e:4a:22:58:e3:cb:a1:b2:dc:cd:e8:ab:2d:71:89:30:bf:
         51:28:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:52 2026 by rpki-client