Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD64208E2FC211EFBBE41251C4F9AE02.roa
File:                     CD64208E2FC211EFBBE41251C4F9AE02.roa (raw, json)
Hash identifier:          r/HxMUlJ4Ic8NWAq+ST36v1uJB6Tbtr6Y8CWU80phIA=
Subject key identifier:   35:08:8D:26:55:B7:48:AF:72:A3:62:F8:A9:80:10:95:AA:CE:F0:C6
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3165
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD64208E2FC211EFBBE41251C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:22:12 +0000
ROA not before:           Mon 06 Jul 2026 16:22:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152496
IP address blocks:        157.66.105.0/24 maxlen: 24
                          160.19.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12645 (0x3165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:22:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd634-416c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:56:74:7f:a8:0d:05:63:3a:47:fa:7c:02:
                    4b:41:2f:d0:fa:e8:31:b9:34:d2:6a:c7:3c:13:d3:
                    d1:ff:00:2c:00:3e:51:ad:2a:bc:87:ca:c6:91:8c:
                    fd:97:50:d0:ce:f8:64:36:dc:3a:22:12:fe:a4:2e:
                    0f:55:9a:82:03:40:38:33:1a:b5:ae:6c:51:04:bf:
                    22:04:bd:df:ec:9f:c5:52:af:08:80:e2:8f:cb:e6:
                    b8:cc:6f:e2:9b:7f:fe:75:99:ad:dc:78:75:9c:a6:
                    d2:23:9f:72:dd:56:2e:48:be:64:95:2c:ba:2c:c1:
                    9e:43:52:9b:e7:f5:bd:84:d2:99:ef:01:c8:1f:29:
                    28:95:8d:0f:a2:e5:11:02:cd:00:8d:de:9a:74:70:
                    4b:d5:11:45:e0:31:5b:9f:1e:1f:8e:7c:c4:f4:46:
                    89:e1:b6:b2:e8:37:b5:b4:15:1d:7d:0f:59:55:9c:
                    ed:ab:b7:37:d3:73:fb:e1:25:3e:9b:44:ef:a4:98:
                    3c:01:b2:f3:c5:bf:3c:a0:dc:cc:73:01:bc:24:fd:
                    44:b9:ce:ad:a0:3b:11:9a:40:8e:70:59:75:7f:b1:
                    c0:03:22:0d:25:00:44:26:71:7c:30:33:c3:dc:48:
                    69:4a:50:54:bc:12:3a:0e:8e:9e:e8:99:16:32:8a:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:8D:26:55:B7:48:AF:72:A3:62:F8:A9:80:10:95:AA:CE:F0:C6
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CD64208E2FC211EFBBE41251C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.105.0/24
                  160.19.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:7d:7b:b3:0a:a3:14:97:6b:83:01:bc:1c:44:2f:2b:f2:
         a1:c2:a0:9d:64:29:6a:cd:89:bf:43:b6:83:b7:66:1e:4b:5c:
         12:e3:95:94:c7:76:93:5f:16:79:78:03:c4:df:54:ba:b2:64:
         59:1d:d2:8b:5a:15:53:4e:74:a9:84:22:b5:32:08:23:a3:8c:
         d9:a8:56:c1:c3:61:28:dd:97:4e:81:06:1b:33:6c:79:30:76:
         6c:f0:08:94:5f:77:f6:e4:4f:86:d2:95:5c:70:21:ad:bf:f2:
         c0:ba:ce:46:f8:57:71:6a:c0:fa:02:62:f9:2b:cc:05:cc:52:
         a8:db:b1:95:ad:50:52:51:0b:10:96:e6:25:44:14:0d:4b:c3:
         f4:0e:44:28:de:52:ea:db:c0:df:c8:eb:22:72:0b:03:87:66:
         8a:17:61:91:6d:59:ce:67:55:10:52:d6:34:c8:2b:2a:e7:1c:
         73:63:d2:94:a8:ed:6e:ec:e8:23:1b:d0:3b:7a:11:16:9a:b0:
         9b:a6:1e:bb:0d:0e:a3:60:2b:b0:a4:58:c4:1b:a9:63:78:eb:
         0a:5f:da:a9:62:b9:3f:41:a5:b3:06:bd:b3:6d:bd:81:d9:e2:
         9d:37:23:f7:95:4f:70:bc:8f:80:00:3a:ac:cb:e3:d3:28:14:
         db:f8:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:46 2026 by rpki-client