Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/66BD8F9EF73911EE8BEC0A76C4F9AE02.roa
File:                     66BD8F9EF73911EE8BEC0A76C4F9AE02.roa (raw, json)
Hash identifier:          Axwe5RXWhhcp4aVmqqDpAp8d/bvzQc2jwxQ74I2a/0g=
Subject key identifier:   73:25:C1:AA:51:5C:CA:29:E5:83:E1:C4:F3:E3:E7:32:14:DC:7D:9B
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       3525
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/66BD8F9EF73911EE8BEC0A76C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:34:19 +0000
ROA not before:           Wed 26 Mar 2025 14:50:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132850
IP address blocks:        202.78.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13605 (0x3525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Mar 26 14:50:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a4405b-7dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:f4:0f:16:1d:ac:bc:cd:08:3c:3c:e1:f4:
                    eb:32:7f:04:6c:3d:cb:14:5d:82:1e:87:41:cf:69:
                    8c:e5:5c:9b:3c:5e:6a:ce:c2:12:9f:e1:c3:17:27:
                    a8:0b:bd:15:c4:92:96:f2:44:a5:3d:da:6b:b1:ab:
                    aa:fa:20:53:b3:5b:fa:ee:d9:7a:db:3d:79:d4:1b:
                    34:0a:a8:e6:af:7e:7f:f6:b2:58:ce:dd:26:46:e2:
                    25:0c:27:95:04:a6:8d:b7:f4:60:3f:3b:22:18:e3:
                    5c:e4:54:af:89:d1:a6:a0:80:ba:c0:dd:cb:a6:12:
                    c0:b4:09:09:df:16:f6:91:5f:a4:08:3c:ad:12:f3:
                    73:47:13:cf:12:3d:c4:24:6a:64:d6:64:fc:c5:8c:
                    3b:da:bf:99:63:92:c0:0a:6f:63:35:04:9e:48:0e:
                    78:bd:25:2c:dc:8b:1b:b7:f4:36:a4:4f:63:00:5d:
                    f0:68:3f:bd:fc:bf:ab:3d:2b:03:e2:26:e3:88:b9:
                    bd:3c:a6:18:ac:bf:d1:36:1c:52:7b:37:4b:eb:8c:
                    ed:fc:ba:83:b5:eb:fc:3e:99:4e:88:b9:26:2e:a4:
                    b3:3e:42:48:a9:d1:c4:e5:9c:13:67:e9:12:82:bb:
                    d5:9e:a8:f4:f3:b4:4d:34:22:70:a7:bd:38:8a:58:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:25:C1:AA:51:5C:CA:29:E5:83:E1:C4:F3:E3:E7:32:14:DC:7D:9B
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/66BD8F9EF73911EE8BEC0A76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:af:1b:58:87:8c:5d:69:c9:e2:d1:41:f9:fc:ad:82:ed:50:
         97:f1:68:2a:54:8d:fe:8c:26:38:24:a8:b9:58:c1:16:45:e7:
         d1:65:a1:17:e8:87:ef:68:35:f7:53:dc:d0:34:39:a8:87:93:
         25:19:22:d2:07:fa:95:9b:d8:93:de:80:8b:fb:f2:a7:49:ec:
         2a:be:38:81:35:60:d2:9b:35:37:79:a7:87:15:0a:6d:3a:97:
         5e:9d:e1:d7:12:96:6e:e7:03:a2:0f:2c:6c:f8:95:5c:fe:56:
         88:f7:c2:e0:86:e0:9a:ed:9f:b8:fa:a1:b6:5f:c2:23:fb:7a:
         73:df:83:4b:47:02:7b:d0:8a:4c:81:77:f6:68:f0:66:fc:8e:
         ef:68:2b:45:0c:14:c6:fe:cd:d0:5e:a1:c7:33:e7:38:12:a1:
         97:30:fc:9d:51:7e:3b:2f:58:d2:4d:76:5b:1e:38:d2:bc:77:
         6a:4b:43:5a:51:89:83:80:2c:2f:ed:72:ef:ff:de:06:a0:4d:
         c4:d3:8f:32:3f:6d:a4:ad:21:91:15:f4:66:0e:a9:09:aa:0d:
         98:ce:65:b1:3c:2d:86:30:dc:ec:b1:3e:4f:38:36:a2:c7:a8:
         9e:4c:1e:93:e8:2b:2f:ab:ae:12:b2:98:59:8d:7e:ac:c7:c0:
         ec:28:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:32 2026 by rpki-client