Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
File:                     98E195B8006911EF9D4A377FC4F9AE02.roa (raw, json)
Hash identifier:          2RkToZlU8vbkCBwS094Z9oNmCvsrAJboYrFQh/Dkof8=
Subject key identifier:   BE:78:FD:42:F9:D3:BF:05:2E:98:2B:AC:0F:0D:68:7A:9E:BA:D8:AD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C09
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:45:15 +0000
ROA not before:           Thu 08 May 2025 15:54:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152499
IP address blocks:        157.66.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11273 (0x2c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c17b-e330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:f0:d9:ed:50:a6:45:93:1c:dd:bd:3d:0f:
                    a5:06:95:37:14:f0:68:95:f5:5c:23:86:20:7c:01:
                    75:57:10:5d:ad:4a:ea:de:86:77:d5:fb:3c:fa:9c:
                    a9:d9:10:4c:63:0a:0a:c4:18:b7:78:76:44:e5:63:
                    f0:f7:f8:4a:e2:7f:3c:5b:43:06:60:06:e7:d5:ec:
                    b8:81:f5:46:12:c4:5c:90:1b:d9:a3:51:ef:23:ec:
                    d2:91:7e:aa:a4:1d:3c:96:d5:e2:2b:e3:11:b6:6b:
                    2e:4d:e5:c5:b8:3b:7c:dd:79:2f:7c:f9:6a:49:bd:
                    f1:9d:23:15:e2:20:27:c1:c3:04:4f:5e:85:dd:dc:
                    4e:66:78:69:05:16:03:21:47:f1:36:95:85:00:3e:
                    73:14:8c:7b:ad:cd:c1:29:06:bd:10:1f:09:6c:34:
                    08:68:b4:6d:04:de:2c:ca:e2:a0:5a:f5:31:e8:b7:
                    34:e4:54:03:71:f2:f0:24:67:a7:3a:24:eb:6b:e9:
                    8e:e9:40:b5:e2:8b:3e:52:41:b8:ef:d1:24:be:31:
                    fd:20:3a:e7:91:c2:71:c7:85:fa:c3:39:27:0f:fc:
                    55:53:3a:02:4b:d5:a8:47:6c:03:d9:be:76:ec:e0:
                    e3:f4:6a:6d:22:1e:d8:21:fd:dd:08:90:96:17:79:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:FD:42:F9:D3:BF:05:2E:98:2B:AC:0F:0D:68:7A:9E:BA:D8:AD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:fc:da:08:02:2a:93:99:7e:06:dd:95:99:1e:e6:bd:4c:
         a1:29:e0:f8:4e:a5:75:6d:dd:51:26:8f:51:1e:bf:ed:38:5a:
         0a:61:fd:c9:66:24:67:10:79:83:48:56:97:02:22:53:4b:64:
         13:fd:66:a0:e3:ca:79:01:b7:5a:68:ad:c9:9e:89:2f:5f:63:
         d0:4c:f6:dc:43:63:32:af:1e:95:b6:37:00:55:a1:e1:36:49:
         5c:6b:89:7d:a9:01:0e:39:b0:a9:c2:bd:10:a3:ac:c7:cd:43:
         d8:d0:72:c8:f3:7f:b0:4a:37:71:a8:6d:5a:9c:8c:cb:48:04:
         be:1a:cf:00:c9:08:45:df:4b:15:83:26:b1:25:da:83:c2:96:
         8d:6c:a0:3e:4c:25:e6:10:5d:94:f4:70:42:e1:10:c7:e3:ba:
         fa:76:d0:46:d8:a5:72:03:ac:67:70:3b:97:be:67:e7:4a:a9:
         54:22:67:c0:ea:ca:40:c9:ff:5c:05:28:71:f8:34:40:0c:91:
         9b:3c:ad:18:d7:c5:70:ce:bc:c3:c0:19:03:26:c1:33:47:a3:
         bb:23:52:37:6c:df:96:b9:76:84:e6:be:e8:f7:1a:29:00:a9:
         ca:93:8c:16:83:f0:c5:68:0a:83:68:74:3c:57:45:b7:73:4a:
         1c:cc:5b:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDAyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE3Yi1lMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1jw2e1QpkWTHN29PQ+lBpU3FPBolfVcI4YgfAF1VxBdrUrq3oZ31fs8+pyp
2RBMYwoKxBi3eHZE5WPw9/hK4n88W0MGYAbn1ey4gfVGEsRckBvZo1HvI+zSkX6q
pB08ltXiK+MRtmsuTeXFuDt83XkvfPlqSb3xnSMV4iAnwcMET16F3dxOZnhpBRYD
IUfxNpWFAD5zFIx7rc3BKQa9EB8JbDQIaLRtBN4syuKgWvUx6Lc05FQDcfLwJGen
OiTra+mO6UC14os+UkG479EkvjH9IDrnkcJxx4X6wzknD/xVUzoCS9WoR2wD2b52
7ODj9GptIh7YIf3dCJCWF3n5ZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL54/UL5
078FLpgrrA8NaHqeutitMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOThFMTk1Qjgw
MDY5MTFFRjlENEEzNzdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnUKSMA0GCSqGSIb3DQEBCwUAA4IBAQA9dPzaCAIqk5l+Bt2VmR7m
vUyhKeD4TqV1bd1RJo9RHr/tOFoKYf3JZiRnEHmDSFaXAiJTS2QT/Wag48p5Abda
aK3JnokvX2PQTPbcQ2Myrx6VtjcAVaHhNklca4l9qQEOObCpwr0Qo6zHzUPY0HLI
83+wSjdxqG1anIzLSAS+Gs8AyQhF30sVgyaxJdqDwpaNbKA+TCXmEF2U9HBC4RDH
47r6dtBG2KVyA6xncDuXvmfnSqlUImfA6spAyf9cBShx+DRADJGbPK0Y18VwzrzD
wBkDJsEzR6O7I1I3bN+WuXaE5r7o9xopAKnKk4wWg/DFaAqDaHQ8V0W3c0oczFv4
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:30 2026 by rpki-client