Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/66751A7C729211F0B01C9076C4F9AE02.roa
File:                     66751A7C729211F0B01C9076C4F9AE02.roa (raw, json)
Hash identifier:          b3WhWpXERL39S1phlYRaCGfTMF0krkHJyRmBlBZGrP4=
Subject key identifier:   EE:B0:48:F9:BB:AE:4C:EF:AF:25:1C:B3:31:05:12:B5:ED:26:E0:99
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       02E2
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/66751A7C729211F0B01C9076C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:07:02 +0000
ROA not before:           Wed 03 Dec 2025 00:29:39 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139358
IP address blocks:        202.179.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Dec  3 00:29:39 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47236-f3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:36:69:8b:0e:8c:f5:cc:e0:f4:48:fe:76:
                    36:19:99:06:45:e9:ab:ab:eb:6f:30:a1:c0:9d:9f:
                    4d:e6:8b:2a:3f:be:a2:fb:fb:b1:d0:6f:95:d2:56:
                    41:fc:92:15:32:82:a5:30:90:5f:33:2f:57:7d:c9:
                    56:8e:0b:38:e8:62:c9:17:29:24:dc:82:11:90:2e:
                    56:25:0a:d3:8d:29:f0:f2:20:76:8e:d9:4a:11:ae:
                    28:43:40:f5:5b:f1:58:f8:ec:95:8c:5b:2c:8c:5c:
                    84:39:c1:9d:bc:5c:bf:5a:a7:d7:69:06:27:1e:fe:
                    65:b9:c9:70:8d:85:e2:13:29:44:cd:d7:08:d7:da:
                    74:58:98:68:ba:ac:e4:23:63:78:0b:c5:1f:93:f4:
                    6d:59:86:2a:5e:d5:ee:71:f9:7b:f5:b2:95:f3:a8:
                    32:99:9a:d6:5d:cf:fc:89:46:52:c6:77:dc:c2:fb:
                    17:81:95:5d:30:23:79:89:a5:30:e0:ac:2b:b6:d0:
                    51:e3:61:55:f5:cb:54:f6:da:4d:65:18:36:81:c4:
                    de:dd:d8:f3:9b:29:89:c1:98:36:aa:33:b7:f0:a2:
                    93:3e:7c:ff:7b:5c:03:a8:84:65:e1:28:c0:d4:c2:
                    38:51:30:b9:6f:e4:77:89:d8:7c:99:64:b9:e5:b3:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B0:48:F9:BB:AE:4C:EF:AF:25:1C:B3:31:05:12:B5:ED:26:E0:99
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/66751A7C729211F0B01C9076C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:49:44:fa:d2:26:57:30:b0:cf:a8:ff:ec:a2:2b:8d:7e:e5:
         65:27:83:af:2e:31:bf:ab:c0:e5:8d:2b:30:75:03:46:bc:21:
         3f:c2:f1:13:7c:b5:cb:92:f7:16:65:52:d0:ab:d9:52:f0:70:
         26:a7:ae:04:c2:b7:ae:5f:95:f9:b2:e7:49:a4:e4:d0:a6:3e:
         15:8f:4c:8f:7d:d1:c9:2f:a7:3d:c2:4e:a6:1a:02:a7:b5:01:
         4d:71:9b:9a:38:0f:96:e8:5e:16:58:7f:b0:6a:05:c1:c7:ba:
         6d:ed:e8:64:93:78:69:19:e9:79:9e:14:4f:06:9e:c9:ad:08:
         df:2c:a5:9b:e8:a2:01:13:14:f8:1f:b6:74:b7:6e:dc:03:65:
         ea:d5:42:df:39:4b:cb:b1:36:97:70:01:2c:5f:c4:c0:f7:6f:
         25:e8:f7:51:0a:16:d0:ea:bd:80:ae:6a:7a:7d:ea:83:dc:0e:
         86:01:a2:03:72:7e:2c:23:6a:4e:f5:85:dd:84:ec:ce:ad:1e:
         94:8b:4c:e0:8a:65:0b:a2:04:73:f0:b4:75:8c:1c:6c:8a:eb:
         d7:69:2b:8e:f9:60:0c:40:96:39:0d:44:db:e9:28:51:4c:59:
         25:63:f5:86:06:bf:05:f8:0d:0b:f2:bb:2c:37:18:0d:d6:1f:
         74:9a:8c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:41:34 2026 by rpki-client