Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/666BB776450911F18B5E40D491833773.roa
File:                     666BB776450911F18B5E40D491833773.roa (raw, json)
Hash identifier:          Pl1OoWQQBb7vUOz3A6PiBqwJrWWLs0PnstFCE85OOgo=
Subject key identifier:   61:AB:C4:2D:7B:5B:76:7A:88:39:DD:B3:A9:E7:65:17:32:62:7C:24
Certificate issuer:       /CN=A91F1745/serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA
Certificate serial:       02
Authority key identifier: 2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/666BB776450911F18B5E40D491833773.roa
Signing time:             Fri 01 May 2026 02:56:50 +0000
ROA not before:           Fri 01 May 2026 02:56:50 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134482
IP address blocks:        162.4.66.0/23 maxlen: 23
                          162.4.66.0/24 maxlen: 24
                          162.4.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl
                          rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1745, serialNumber=2A37AC3AB25A37DFB5D4EA10039968DE31BE34CA
        Validity
            Not Before: May  1 02:56:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f41672-4ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:18:d5:d8:53:a8:26:fb:44:cd:5a:e9:a8:
                    be:26:28:08:5f:7d:4d:72:25:e7:e2:ad:39:09:19:
                    26:d9:de:d7:48:ed:14:d6:79:cd:96:b4:f1:62:f4:
                    e1:be:99:d3:f0:c0:72:02:46:ae:09:ed:9f:7b:d2:
                    ae:cb:e6:bc:c0:01:64:76:1a:5d:d8:66:ee:6e:b6:
                    13:ef:78:32:eb:c0:31:91:01:56:50:38:7c:bc:45:
                    3a:5e:62:75:7e:00:cf:c4:cd:0b:74:a6:df:28:a3:
                    06:c1:c5:6d:ca:29:18:8c:06:90:f8:37:e1:79:01:
                    5e:bb:38:5a:75:b0:9f:7d:87:f8:09:0d:81:4e:a0:
                    73:56:6c:3c:28:c8:39:31:ba:8b:fa:15:2e:fd:29:
                    f1:21:84:34:3c:af:c9:b4:0b:a8:be:eb:c4:fd:ea:
                    58:fe:63:60:ad:18:c9:5e:ff:09:c2:ff:f7:44:b8:
                    7b:55:c3:a8:d9:58:6c:a4:33:0d:8f:a6:62:58:65:
                    91:2c:e1:4f:d3:e9:dc:6a:1a:bb:50:a5:91:c2:77:
                    76:87:f2:21:3e:c3:5c:12:48:1d:4c:fe:e7:ac:ca:
                    db:16:f0:87:ae:09:b7:4e:40:ad:6e:e0:18:75:29:
                    05:bc:19:f3:6e:a2:49:81:24:50:cc:e3:ec:8f:6b:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:C4:2D:7B:5B:76:7A:88:39:DD:B3:A9:E7:65:17:32:62:7C:24
            X509v3 Authority Key Identifier:
                keyid:2A:37:AC:3A:B2:5A:37:DF:B5:D4:EA:10:03:99:68:DE:31:BE:34:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/KjesOrJaN9-11OoQA5lo3jG-NMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KjesOrJaN9-11OoQA5lo3jG-NMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1745/E8958EE4450811F18B2E22CC91833773/666BB776450911F18B5E40D491833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:25:bd:2e:d8:66:2f:36:4a:65:dd:37:0c:12:27:c7:2e:
         31:60:1d:57:68:af:55:fd:80:16:c4:3a:35:ad:10:33:87:0e:
         aa:2c:68:46:27:64:94:dc:ec:42:ff:32:4f:ea:6d:e5:3c:16:
         a2:82:10:ad:b0:95:9f:8a:ba:0f:75:23:8d:cd:f1:36:67:7b:
         be:dd:8c:78:f9:c4:ba:f2:cd:00:35:cf:01:61:69:39:a1:ff:
         b1:d1:03:4a:70:97:1f:17:24:91:22:ba:4e:82:20:e9:98:a1:
         ee:19:22:78:61:d4:9e:e3:59:10:b0:31:de:89:ac:ed:8c:e5:
         30:91:04:8b:63:b4:29:2d:5b:71:18:33:73:34:5c:aa:57:9b:
         24:e1:f0:12:df:aa:5c:d2:67:94:45:34:3c:94:44:21:83:99:
         be:0b:cb:fa:39:2e:ec:ec:64:93:81:16:f4:d4:96:cf:80:0b:
         90:3b:57:af:0e:46:40:47:66:38:7b:f3:3d:66:d7:5d:ee:04:
         e9:51:50:3f:fd:6f:70:0b:cf:11:ef:ea:2d:cc:d6:16:1f:2a:
         88:9f:35:cc:02:b2:7b:32:31:ed:fc:63:63:8d:27:0f:53:f6:
         7b:90:ea:43:35:dc:e2:f6:5a:9c:e3:8a:a9:9f:48:f9:1f:5b:
         de:db:85:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:42 2026 by rpki-client