Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/66E3763C8DBA11F09481A638C4F9AE02.roa
File:                     66E3763C8DBA11F09481A638C4F9AE02.roa (raw, json)
Hash identifier:          qSgMMRhUbVy2Pz7nixB9sIdpvvbfUsqlR9kSg6CQW8U=
Subject key identifier:   E7:9E:1F:C3:F9:90:84:5A:0D:9B:6E:0E:DC:03:35:94:5E:99:46:A5
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3AB4
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/66E3763C8DBA11F09481A638C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:25:34 +0000
ROA not before:           Tue 09 Sep 2025 20:20:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38616
IP address blocks:        115.186.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15028 (0x3ab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep  9 20:20:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a492ae-cec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:e1:74:8a:45:0e:57:6c:7e:c4:67:64:74:
                    b8:b9:86:08:74:eb:06:0f:71:28:ec:8e:6e:69:33:
                    bd:37:ab:8e:83:c7:55:11:ff:c0:cd:64:07:36:23:
                    51:a5:9c:d8:a6:53:8f:23:aa:a7:ec:35:ee:84:3e:
                    de:e6:02:3d:ca:b1:51:83:bd:fa:a7:3d:de:c4:4e:
                    37:48:a4:b6:8f:94:73:07:35:68:3a:2c:52:6d:8e:
                    7f:66:1d:42:5c:c4:ce:45:9d:16:20:d8:f4:d8:8e:
                    f7:34:4b:9d:0a:f9:dd:06:64:2d:34:9a:0b:28:d9:
                    e9:4a:c5:05:ac:b6:da:3d:30:d0:de:53:37:fc:4f:
                    17:6b:66:34:72:16:92:0d:5f:7f:3d:66:da:fb:de:
                    33:ba:37:ff:0e:97:ab:f7:8f:9d:41:49:8e:ca:a8:
                    d5:e5:b0:33:47:b1:8d:7a:32:96:29:ee:59:17:59:
                    02:e8:66:04:89:b6:c1:44:e3:26:f4:b2:11:d9:c2:
                    33:f6:ff:93:50:84:a8:73:62:75:b2:bb:c5:84:1a:
                    9f:ce:ff:5c:f3:06:77:4c:0b:2c:87:82:3e:b9:ba:
                    5f:1c:12:d9:bf:bf:c4:48:8a:47:08:8c:b5:97:a2:
                    bd:3d:f1:66:45:ec:56:88:f1:55:ce:be:c7:8a:42:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9E:1F:C3:F9:90:84:5A:0D:9B:6E:0E:DC:03:35:94:5E:99:46:A5
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/66E3763C8DBA11F09481A638C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:7f:e5:ef:7a:57:4c:ff:4a:a9:a6:a9:79:85:d1:87:21:
         2d:2e:46:9f:16:bc:02:82:bd:01:e2:0a:ce:e5:74:66:20:25:
         ca:2d:a2:a5:5c:e7:d5:dd:30:68:ef:ae:e4:03:57:38:7e:dd:
         2d:d4:bf:75:68:4c:19:bd:da:1e:bf:57:41:c3:24:35:07:1f:
         b4:b0:4b:ba:68:b3:a9:58:f1:ff:33:2d:fb:93:b3:fd:63:c2:
         86:65:3b:35:39:85:86:6a:d5:94:a4:1d:77:2f:64:aa:fa:18:
         2b:d6:72:75:5e:4f:5a:1a:c2:9a:38:93:52:54:17:0c:32:54:
         08:12:a6:7d:c7:57:62:e8:da:41:b5:e0:cf:92:6e:85:1a:ad:
         81:fd:d5:ee:5f:e2:b8:fe:f2:7a:6e:af:fa:9b:34:96:71:88:
         5f:5f:7a:bc:1f:b5:e9:07:0a:54:85:4f:89:65:1e:70:8f:4b:
         cc:6c:b7:54:b5:87:ba:19:0b:0c:7f:a1:93:31:a1:62:31:5c:
         59:37:4c:a2:6f:bc:83:8f:71:0c:cd:7d:d9:c4:ea:d0:2d:b1:
         a8:41:56:6d:b8:34:d6:77:69:d7:e5:b1:28:6d:d9:57:5f:22:
         ec:93:41:aa:94:7c:b0:00:29:ad:78:fe:af:fb:76:ec:b0:08:
         83:02:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:29 2026 by rpki-client