Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/66BD8F9EF73911EE8BEC0A76C4F9AE02.roa
File:                     66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (raw, json)
Hash identifier:          erlR5lb546Ce3e1b4JUl4IJfubaw/Telkh1q1ldMPnU=
Subject key identifier:   08:AA:F6:94:1F:A0:A9:0B:81:49:13:DA:E1:2E:46:6B:3A:EB:8F:B6
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       3538
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/66BD8F9EF73911EE8BEC0A76C4F9AE02.roa
Signing time:             Tue 24 Mar 2026 15:12:54 +0000
ROA not before:           Tue 24 Mar 2026 15:12:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     132850
IP address blocks:        202.78.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Mar 24 15:12:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c2a9f6-bdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:4d:55:4b:6a:f0:fc:a4:26:df:35:46:84:
                    d3:65:d4:ad:51:c2:32:c1:cb:1e:0c:a0:ab:fc:e6:
                    da:be:39:96:83:f8:8a:73:58:2d:a3:f9:64:3f:7e:
                    01:b3:b3:e2:a5:a9:98:5d:11:54:8a:ad:5d:6f:d1:
                    5c:5b:55:1c:fb:f2:03:67:fe:65:93:13:f3:07:7e:
                    c1:19:52:d0:33:bd:a6:f0:c8:d6:97:ed:c3:c9:94:
                    1d:0c:58:33:c7:f7:94:c5:91:09:1a:78:3e:18:5b:
                    36:bc:34:be:0b:24:56:e5:fc:9d:f2:05:4d:3c:61:
                    e1:03:31:3d:83:10:25:f5:4d:0b:a5:e7:3a:6d:b5:
                    03:43:a5:f6:df:2a:91:a3:08:d5:6d:87:03:ca:6e:
                    9e:27:df:10:76:6b:a7:e8:80:0a:2c:df:bf:79:24:
                    cb:0a:f9:0f:c4:01:63:f4:f7:87:3f:3d:ed:31:71:
                    4f:34:fd:44:eb:68:c3:25:c3:5a:90:45:24:cb:c7:
                    a2:ad:bb:1e:03:d2:08:d2:07:72:a1:11:af:5e:e6:
                    cf:03:10:bb:20:02:f1:4e:32:a0:dc:c3:ea:0a:9d:
                    f7:e6:1a:30:58:0d:f2:24:0d:4b:4f:c7:d0:9d:fc:
                    c2:29:f4:7c:62:50:3a:34:55:f4:eb:c2:af:4d:53:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AA:F6:94:1F:A0:A9:0B:81:49:13:DA:E1:2E:46:6B:3A:EB:8F:B6
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/66BD8F9EF73911EE8BEC0A76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:8a:2c:36:89:c4:0a:e3:63:86:62:16:84:0d:b6:3c:02:
         3e:32:9c:b7:3a:fc:dd:9c:f3:00:45:f5:66:e9:fd:c4:94:51:
         4a:21:11:ab:c8:a7:65:61:1f:52:6f:1a:6b:b1:a3:73:d2:67:
         72:c5:e8:1c:4e:f6:85:54:69:f4:dd:7a:15:96:9a:b8:72:63:
         54:91:4e:f2:cf:ee:64:fa:8f:29:36:98:37:ee:61:8e:8e:9e:
         76:b6:67:9d:88:fd:e0:7c:f1:35:d2:92:1a:0a:d9:e1:7e:52:
         a9:d9:d3:be:66:b7:30:5f:b5:8f:af:a2:a9:d7:cc:d4:50:eb:
         f2:ef:12:ad:00:69:1b:4b:70:6e:75:c6:2c:ef:7c:0f:48:c6:
         47:84:d3:34:78:e5:8b:4f:d4:6c:ad:bc:eb:d6:ef:ba:88:40:
         6c:af:d3:62:34:f5:eb:30:fd:86:34:3b:3c:98:5c:1f:48:b3:
         a2:58:b6:3c:10:e7:09:00:40:36:e7:fb:82:a4:02:53:cf:b2:
         a5:f3:3f:07:2e:aa:a7:f0:9e:f2:fc:9f:5e:21:f4:15:61:b5:
         d2:72:8e:71:82:6c:88:30:08:74:07:41:14:cd:de:7a:05:86:
         27:6b:9f:6e:ad:11:98:63:8e:df:97:e5:7a:c9:47:80:1e:f4:
         45:a3:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:50 2026 by rpki-client