Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/66E3763C8DBA11F09481A638C4F9AE02.roa
File:                     66E3763C8DBA11F09481A638C4F9AE02.roa (raw, json)
Hash identifier:          ClJ2xognp9dQQivIYTvbX4VBdte0BdI3w9fBbU51BA4=
Subject key identifier:   C0:34:C9:A4:60:EE:78:06:36:3F:71:26:6B:8C:E3:80:F0:50:DB:9C
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3990
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/66E3763C8DBA11F09481A638C4F9AE02.roa
Signing time:             Tue 09 Sep 2025 20:20:18 +0000
ROA not before:           Tue 09 Sep 2025 20:20:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38616
IP address blocks:        115.186.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14736 (0x3990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep  9 20:20:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68c08c02-84aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:56:82:4b:6d:d8:7b:7d:c0:4c:0c:5f:e1:
                    cc:bb:63:9a:c1:fa:07:11:5e:58:51:3a:9e:b1:ac:
                    16:1b:8b:2f:f1:6a:0c:70:bd:99:eb:aa:0c:4d:6a:
                    b9:bd:30:a9:d3:23:61:ef:80:d2:84:22:b5:48:7e:
                    78:17:b5:6b:2c:7e:e6:92:8c:84:ce:fc:e6:82:43:
                    d8:f7:c7:28:d4:87:95:3a:26:ce:ec:69:24:6c:8e:
                    14:80:55:b0:f4:25:c4:80:c8:20:5d:3d:c2:43:58:
                    34:cb:61:de:59:c5:fc:8c:31:7f:9e:c0:d4:d4:ed:
                    60:32:57:66:78:13:fe:ff:92:a4:88:f5:83:e3:27:
                    0d:08:0b:d8:b4:05:bc:d6:98:93:09:cc:c3:bf:9f:
                    5a:81:33:ec:0c:dc:0d:bf:b8:7c:26:c4:42:92:e0:
                    88:d2:29:55:c1:f5:4f:a4:df:cc:bf:cc:4a:8f:55:
                    4d:45:1f:86:3d:af:ff:bd:07:d3:c2:5a:5a:ee:3f:
                    f8:64:c3:01:2e:ea:45:e3:98:d2:ab:d3:99:79:ea:
                    8e:19:98:85:99:a3:6e:61:ef:5c:ad:b1:8c:14:2c:
                    22:8f:59:19:50:40:05:f8:d2:f7:fa:31:04:e8:7d:
                    6f:10:05:93:08:64:77:9e:ca:95:e0:ce:59:38:ec:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:34:C9:A4:60:EE:78:06:36:3F:71:26:6B:8C:E3:80:F0:50:DB:9C
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/66E3763C8DBA11F09481A638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:65:c7:aa:f4:66:59:7e:6c:4a:ad:76:cb:b1:23:da:8b:50:
         9f:f8:43:f8:ec:3d:3c:f7:67:21:0d:f3:de:49:41:38:63:e6:
         66:65:01:34:e9:e2:ba:48:08:f1:2c:26:fb:16:d0:b4:62:69:
         9d:6d:5b:37:30:4e:3e:54:11:ab:8f:e3:7d:a1:63:aa:43:65:
         e3:b2:da:39:6d:2a:db:a9:19:e6:b5:40:da:68:51:89:66:97:
         43:27:3d:86:62:b5:77:64:ad:25:0c:53:05:5c:63:db:ad:ce:
         5a:e8:23:40:bd:00:4a:46:ca:32:07:df:c2:ab:cb:cc:2f:ad:
         62:61:3d:ea:7d:96:a1:57:85:4c:9b:51:73:c1:15:47:3e:73:
         d9:35:b8:bc:fd:fb:dd:20:42:24:f8:30:74:50:10:9a:3c:c4:
         8a:f7:f1:39:0e:20:ac:80:0f:bd:f2:ec:5d:1c:97:61:e3:28:
         51:74:eb:be:1e:8f:3d:a0:a3:7b:a9:93:02:fd:bd:11:4d:53:
         0b:af:1b:0d:84:11:28:76:43:97:f9:ad:df:a3:78:f0:d9:be:
         73:fc:61:79:1f:ad:97:f0:5a:07:44:82:63:11:7b:02:d8:f9:
         12:79:bf:e6:e9:a1:71:a0:5a:66:da:5a:cf:41:0d:02:56:d9:
         ca:9c:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:47 2025 by rpki-client