Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1776024298011EF8FDCF737C4F9AE02.roa
File:                     E1776024298011EF8FDCF737C4F9AE02.roa (raw, json)
Hash identifier:          cPt33wnI6/8cE7BYvDxH9rPHkvpVh30eo5mjPad52mE=
Subject key identifier:   9E:21:21:A3:FC:4F:67:19:FB:A9:27:AC:17:D4:89:4D:2A:85:F4:92
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3162
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1776024298011EF8FDCF737C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:22:06 +0000
ROA not before:           Mon 06 Jul 2026 16:22:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152493
IP address blocks:        157.66.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12642 (0x3162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:22:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd62d-978b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:1a:24:f0:b9:4c:cd:ac:93:2c:ad:52:1c:
                    04:16:a1:29:a7:1f:da:49:8c:d5:96:35:d5:c2:78:
                    9a:59:d5:7f:fd:be:13:38:6b:e2:c3:25:e3:60:d2:
                    e7:d9:4f:a7:8d:5d:38:8d:67:0f:ce:f0:07:15:30:
                    75:8f:09:00:90:41:f6:d1:4f:b4:16:60:02:a9:42:
                    7c:34:1e:50:d3:ba:df:e8:0f:3c:fa:70:7d:8a:44:
                    89:22:24:3d:60:ad:c1:55:83:74:74:29:e1:53:ef:
                    3d:82:3e:fc:25:ff:96:fb:da:18:b6:26:fd:21:96:
                    09:81:55:a3:12:2c:99:f7:49:b4:73:52:30:2c:f1:
                    35:bc:ac:1d:eb:cd:5b:21:79:3a:fc:e2:a9:dc:7c:
                    62:39:9c:3f:1d:5f:dc:36:bf:fb:d1:e6:ab:8c:75:
                    11:bf:b9:0a:55:85:f6:9b:69:64:2c:81:7a:4c:31:
                    c9:83:3a:e0:ac:fb:72:15:53:0c:da:91:4b:4b:03:
                    36:67:47:05:42:84:95:80:89:3e:b1:c3:14:74:fb:
                    e2:1d:88:e4:83:7e:b9:f6:a9:96:62:b5:45:10:7b:
                    b4:69:fd:e5:bf:aa:1b:4e:1b:f7:d0:f9:76:4e:2c:
                    26:a7:e5:32:ef:5a:32:a8:31:1e:26:b2:c1:2e:d3:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:21:A3:FC:4F:67:19:FB:A9:27:AC:17:D4:89:4D:2A:85:F4:92
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E1776024298011EF8FDCF737C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:11:56:18:e8:91:f4:fe:45:17:46:74:34:5e:20:07:7e:
         c8:14:98:66:3a:68:e6:32:05:79:56:1c:0d:69:c2:e4:a0:d1:
         0f:00:4a:cb:92:c2:da:61:32:d1:aa:4f:b9:1d:1c:51:97:20:
         5d:36:67:5e:da:df:bc:45:6e:fa:5b:23:74:2f:f7:59:b8:68:
         00:d1:97:bf:53:7d:95:ba:07:b2:44:a0:65:3f:ea:db:32:58:
         85:5e:95:76:e5:5f:9a:b6:2c:ab:d7:62:9a:40:0e:f7:29:af:
         2d:ce:fc:4a:56:13:db:5e:93:5b:9a:24:e2:ad:6b:05:60:37:
         74:43:1d:8f:4c:26:fc:1c:63:9e:98:ad:4f:2a:31:7a:18:08:
         c1:38:9c:f7:37:37:6f:7f:00:45:50:d5:ef:8c:b6:46:43:96:
         dd:0a:2d:b3:ec:b6:30:d1:dd:04:cc:9a:65:77:6d:aa:87:e4:
         a1:8c:12:29:5e:79:14:d4:f3:cb:db:ae:58:5a:d3:dd:6b:51:
         17:52:4a:dd:36:30:da:db:89:c8:34:e5:eb:1a:fc:1a:c9:eb:
         a7:07:9c:1d:19:34:23:f3:20:1d:d7:2f:37:2c:18:e4:5d:39:
         96:5c:fd:05:b2:e2:67:b0:8b:17:36:31:38:9a:a5:45:f8:5f:
         61:ce:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:29 2026 by rpki-client