Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/7A696120859F11F1A3889AC758A30FBC.roa
File:                     7A696120859F11F1A3889AC758A30FBC.roa (raw, json)
Hash identifier:          KZV7RL/SmmvJe7/WlokymWjG4PkMAKi0QPN1OTzQtos=
Subject key identifier:   5F:7A:6C:6A:EF:2A:2B:6C:79:86:60:46:FF:C7:66:A5:3A:7D:11:D4
Certificate issuer:       /CN=A914559B/serialNumber=972FD07FD1347A029D601704477BF3A64783A738
Certificate serial:       04
Authority key identifier: 97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/7A696120859F11F1A3889AC758A30FBC.roa
Signing time:             Wed 22 Jul 2026 07:34:54 +0000
ROA not before:           Wed 22 Jul 2026 07:34:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154749
IP address blocks:        160.236.66.0/23 maxlen: 23
                          160.236.66.0/24 maxlen: 24
                          160.236.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl
                          rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914559B, serialNumber=972FD07FD1347A029D601704477BF3A64783A738
        Validity
            Not Before: Jul 22 07:34:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a60729e-6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:04:fc:96:22:ee:70:d7:b6:ef:32:ac:01:
                    3c:de:04:61:7b:d2:29:22:c1:ae:e0:f5:3e:0f:5f:
                    c9:de:b3:e4:6e:de:1b:38:55:d3:78:01:b6:87:c3:
                    18:3f:f1:b9:c3:6e:6e:ac:65:38:a7:a3:6a:98:5f:
                    ee:be:18:fc:5b:32:99:10:54:d7:e4:80:29:a7:08:
                    20:cc:d5:89:ee:4b:b7:f3:d8:1f:1d:c3:3d:7a:2d:
                    e6:9f:9c:08:e7:41:7d:3c:c4:48:0d:20:ca:f4:16:
                    58:7b:cd:07:fe:07:29:8d:7d:1f:df:a4:0b:bb:67:
                    b0:1b:70:5a:57:2d:fc:c7:54:0b:48:cc:b4:05:5a:
                    5a:e7:01:47:f3:5b:3c:d2:71:37:a8:2c:e8:37:3d:
                    64:40:56:b9:17:e8:47:26:0a:a0:ff:e2:ce:e3:6a:
                    ca:78:e8:d9:55:84:f6:06:3a:c7:2a:38:9c:ae:ef:
                    4d:74:9b:2f:ad:cc:28:5d:c0:f7:1b:8d:ba:24:8d:
                    ae:be:4b:4e:00:58:91:5f:3d:c4:27:6d:24:02:5e:
                    3b:03:7e:1c:9f:74:08:76:0c:be:0c:fb:a3:89:3b:
                    b3:be:c3:92:91:72:5d:9c:60:13:48:9d:4b:ce:1a:
                    0b:05:ed:bd:a5:b3:16:58:3b:ae:7d:36:8c:09:75:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:6C:6A:EF:2A:2B:6C:79:86:60:46:FF:C7:66:A5:3A:7D:11:D4
            X509v3 Authority Key Identifier:
                keyid:97:2F:D0:7F:D1:34:7A:02:9D:60:17:04:47:7B:F3:A6:47:83:A7:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/ly_Qf9E0egKdYBcER3vzpkeDpzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ly_Qf9E0egKdYBcER3vzpkeDpzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914559B/0EE2B7EE859F11F1A9CFA89058A30FBC/7A696120859F11F1A3889AC758A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:49:4b:8d:99:9f:24:b9:ca:98:b9:c5:d7:21:0e:73:e3:6f:
         70:d6:8e:9f:a9:b8:35:f0:8e:1f:5a:f4:6f:54:2a:66:00:13:
         42:4a:db:cb:60:33:cf:42:66:ee:e3:d8:3a:49:a9:11:2c:50:
         a5:d1:1f:22:17:96:dd:45:c0:30:f3:45:8a:46:f7:cc:16:d5:
         03:01:b6:21:70:35:d6:f7:77:af:e7:70:df:fe:a9:74:af:f1:
         5a:37:88:9f:fa:fb:71:28:ef:34:40:79:0b:b0:03:e1:69:63:
         5f:01:67:59:26:07:8f:d0:8b:94:f2:2a:ec:1f:09:f8:fd:80:
         99:e9:da:aa:4a:23:6c:de:fe:95:34:7a:6a:0f:c8:94:18:e4:
         df:e9:42:98:10:b3:46:ea:0d:af:85:10:b6:d4:40:0f:2e:4b:
         73:28:e3:d4:c1:01:2b:93:a5:93:92:1d:2d:7c:25:b2:48:e9:
         54:05:08:13:ce:b2:28:ab:0a:21:7e:5f:30:39:f2:6d:1b:93:
         a9:49:bb:2e:fb:ee:cb:d4:3d:4d:80:87:8e:57:62:27:20:d2:
         9a:4a:56:a4:14:54:96:99:e2:ef:73:44:e7:e0:ab:c0:5f:d4:
         26:79:9e:05:3e:94:50:6b:75:90:75:fb:21:b1:1c:48:f0:26:
         8c:71:82:06
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NTU5QjExMC8GA1UEBRMoOTcyRkQwN0ZEMTM0N0EwMjlENjAxNzA0NDc3QkYzQTY0
NzgzQTczODAeFw0yNjA3MjIwNzM0NTRaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjA3MjllLTYxNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvrwT8liLucNe27zKsATzeBGF70ikiwa7g9T4PX8nes+Ru3hs4VdN4AbaHwxg/
8bnDbm6sZTino2qYX+6+GPxbMpkQVNfkgCmnCCDM1YnuS7fz2B8dwz16LeafnAjn
QX08xEgNIMr0Flh7zQf+BymNfR/fpAu7Z7AbcFpXLfzHVAtIzLQFWlrnAUfzWzzS
cTeoLOg3PWRAVrkX6EcmCqD/4s7jasp46NlVhPYGOscqOJyu7010my+tzChdwPcb
jbokja6+S04AWJFfPcQnbSQCXjsDfhyfdAh2DL4M+6OJO7O+w5KRcl2cYBNInUvO
GgsF7b2lsxZYO659NowJdUJTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUX3psau8q
K2x5hmBG/8dmpTp9EdQwHwYDVR0jBBgwFoAUly/Qf9E0egKdYBcER3vzpkeDpzgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NTlCLzBFRTJCN0VFODU5
RjExRjFBOUNGQTg5MDU4QTMwRkJDL2x5X1FmOUUwZWdLZFlCY0VSM3Z6cGtlRHB6
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbHlfUWY5RTBlZ0tkWUJjRVIzdnpwa2VEcHpnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTU5Qi8wRUUyQjdFRTg1OUYxMUYxQTlDRkE4OTA1OEEzMEZCQy83QTY5NjEyMDg1
OUYxMUYxQTM4ODlBQzc1OEEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGg7EIwDQYJKoZIhvcNAQELBQADggEBAJBJS42ZnyS5ypi5xdchDnPj
b3DWjp+puDXwjh9a9G9UKmYAE0JK28tgM89CZu7j2DpJqREsUKXRHyIXlt1FwDDz
RYpG98wW1QMBtiFwNdb3d6/ncN/+qXSv8Vo3iJ/6+3Eo7zRAeQuwA+FpY18BZ1km
B4/Qi5TyKuwfCfj9gJnp2qpKI2ze/pU0emoPyJQY5N/pQpgQs0bqDa+FELbUQA8u
S3Mo49TBASuTpZOSHS18JbJI6VQFCBPOsiirCiF+XzA58m0bk6lJuy777svUPU2A
h45XYicg0ppKVqQUVJaZ4u9zROfgq8Bf1CZ5ngU+lFBrdZB1+yGxHEjwJoxxggY=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:09:29 2026 by rpki-client