Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1CF9666BB2111F18F3B90FA6711F970.roa
File:                     D1CF9666BB2111F18F3B90FA6711F970.roa (raw, json)
Hash identifier:          2HWa2I5CcBXXkfPsOT1wBQtoo++RRyzrbPPsc2ptk68=
Subject key identifier:   C4:52:2C:FA:89:A4:2C:43:EF:57:39:E1:C7:D6:0E:28:C7:A9:99:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       32FF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1CF9666BB2111F18F3B90FA6711F970.roa
Signing time:             Mon 28 Sep 2026 09:48:55 +0000
ROA not before:           Mon 28 Sep 2026 09:48:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154238
IP address blocks:        157.66.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13055 (0x32ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 28 09:48:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aba3807-8263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a6:ae:49:0d:54:de:af:20:66:8f:21:f5:60:
                    94:6d:be:7d:0a:a9:3f:75:b6:bc:6f:ee:54:be:54:
                    26:18:73:f3:69:d9:ce:a6:f1:f1:ae:7f:b9:af:01:
                    98:74:f7:52:bc:82:cc:5e:5e:e0:09:9f:46:ed:56:
                    22:6f:7a:54:3b:42:8b:69:07:37:ad:25:b5:51:2d:
                    7a:9c:4d:dd:ab:56:68:9b:42:95:27:fb:90:1f:2c:
                    5f:85:35:ff:3b:6e:65:7f:ef:83:7b:4c:41:ee:96:
                    c5:a0:eb:a1:e3:d5:ee:34:74:01:7e:4b:2a:fd:e4:
                    ab:b8:29:7d:55:38:01:38:4e:ec:a9:c2:ef:85:f9:
                    ca:a2:a8:6b:14:04:ed:08:98:4d:55:ec:b9:ae:f7:
                    a7:9e:b5:f5:d5:55:76:d0:1d:fa:a0:bd:87:22:c5:
                    1a:57:9c:da:3f:d9:52:bc:02:ff:0a:c0:2e:11:ca:
                    2d:1e:7d:08:77:43:b5:32:1a:db:2d:eb:55:fd:82:
                    fc:7d:68:23:bb:ca:a6:6d:7a:f5:89:21:01:d1:28:
                    c0:3c:a8:97:b1:18:15:c7:13:2f:3e:2a:29:ce:05:
                    1b:eb:77:5d:52:7c:f8:68:9c:80:6a:09:d1:4f:61:
                    97:8d:d3:f4:54:5b:84:dd:41:cb:fb:ad:3d:8c:a5:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:52:2C:FA:89:A4:2C:43:EF:57:39:E1:C7:D6:0E:28:C7:A9:99:CE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1CF9666BB2111F18F3B90FA6711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:0f:f0:ce:98:06:6d:61:d0:f8:11:83:24:5e:a2:43:f9:12:
         cb:bd:0e:9d:f1:5f:5d:56:2c:bc:6d:92:2d:bf:34:5b:e7:d1:
         68:41:e6:ca:28:88:8d:47:6a:c2:6b:13:77:a8:ab:cf:26:84:
         d6:dd:e5:fd:2a:2c:e2:b0:8c:1e:93:10:41:20:a8:ce:dc:4f:
         05:8e:2a:65:14:6e:f9:04:51:cd:a0:b9:b7:67:f9:a2:22:f2:
         05:fd:7c:69:1a:40:8a:f9:91:9b:8c:87:04:db:ca:0e:54:37:
         69:42:fc:25:3a:4d:18:52:1e:e8:fa:72:4b:4f:69:88:4b:ab:
         16:ea:80:cd:57:6f:6a:da:bb:6a:66:76:3d:56:d1:19:81:a4:
         4c:db:f1:39:58:ca:90:fc:86:b6:5f:40:dd:ed:56:5c:62:52:
         f3:b0:11:b4:7a:41:33:2b:f3:47:7c:9d:85:30:a9:24:c4:01:
         d1:06:3d:1f:8e:e5:fe:ee:5e:f8:9f:1c:37:c0:ce:3d:b0:5b:
         e3:0e:aa:70:3e:0e:3c:20:6b:d8:d9:4c:d1:6b:6d:e3:5c:3f:
         3a:6c:7b:0e:d3:d3:3b:7e:23:78:d6:d2:13:e4:dc:db:06:0e:
         56:63:6f:58:af:b1:bc:29:53:6c:5b:e2:b5:34:41:1b:f6:ea:
         8e:d5:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:36:30 2026 by rpki-client