Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CF5A760C39611F0AD7B1E69C4F9AE02.roa
File:                     9CF5A760C39611F0AD7B1E69C4F9AE02.roa (raw, json)
Hash identifier:          a6/ax3Q9DmG9S0+FvA0q1LFkW55Zpz9tL4HFumQYKoI=
Subject key identifier:   2A:8A:FF:D6:08:D6:0F:25:C9:FD:34:2B:F9:C3:BE:76:2B:1A:A1:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CCF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CF5A760C39611F0AD7B1E69C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:50:01 +0000
ROA not before:           Mon 17 Nov 2025 09:27:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149526
IP address blocks:        157.66.30.0/23 maxlen: 23
                          157.66.30.0/24 maxlen: 24
                          157.66.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11471 (0x2ccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 17 09:27:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c299-c1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:aa:3b:31:b8:e0:36:e4:36:a8:f9:8d:8a:
                    94:bb:70:6c:16:bb:8a:f8:73:b8:ed:3a:5f:36:4c:
                    34:0f:d9:e9:b3:ff:2d:92:41:cf:90:2c:6f:66:b4:
                    90:79:24:09:e8:e2:b7:8d:40:53:42:39:37:2f:6e:
                    fb:40:64:d6:53:e5:27:57:1d:79:ea:cb:b3:74:8d:
                    ed:6b:4c:0d:44:72:fc:a2:48:eb:27:9f:54:78:d9:
                    a9:e9:0e:bd:9e:6b:26:9c:90:99:12:29:fd:52:9f:
                    d6:58:96:2e:81:37:f1:94:e5:2d:3e:65:3c:e1:b0:
                    d5:63:50:af:fc:d4:3e:4e:cd:95:cd:86:1e:4e:ab:
                    ab:21:42:b9:7d:14:b8:66:eb:ac:10:1a:17:51:5d:
                    69:cd:2c:ee:00:4e:4b:b6:18:93:74:c5:da:c9:7d:
                    a5:f3:47:dd:91:67:77:a4:d6:d8:95:70:fe:57:ea:
                    1f:27:2e:8f:e7:0e:76:4a:04:92:b8:f3:c3:11:1d:
                    71:0c:8a:ca:fb:65:c8:7a:e1:37:c3:16:5c:33:f2:
                    da:a7:92:a2:39:99:ee:ae:e0:45:91:9e:f9:34:8a:
                    99:c1:c2:7a:a2:0c:a6:06:9e:55:c7:21:d5:86:71:
                    dc:bd:5d:8c:0c:d3:6f:b2:5e:80:4f:77:f0:c0:3e:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:FF:D6:08:D6:0F:25:C9:FD:34:2B:F9:C3:BE:76:2B:1A:A1:BD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CF5A760C39611F0AD7B1E69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:1d:8a:5b:9b:6a:94:ba:e3:54:ca:2c:5f:f7:4b:f2:d5:b7:
         c3:c4:44:1d:88:5f:ac:35:f7:c9:b7:b9:b9:a7:0c:22:2f:75:
         e9:c6:8d:f6:d4:21:04:67:c7:8c:e9:88:fe:2d:e0:57:79:e8:
         c6:c7:7e:ce:82:43:8b:3e:75:91:4d:74:0c:81:09:35:54:c0:
         0a:13:55:04:a6:c3:20:82:49:0f:62:01:de:6d:4d:05:69:ce:
         ff:f7:ce:3a:d8:f9:0c:a9:e3:3e:ff:ca:0b:0a:85:99:69:8a:
         e7:a9:c6:13:b6:2c:af:5c:d3:fb:ae:14:1f:fb:fe:15:e6:92:
         27:36:40:64:38:b2:23:ab:fd:7b:3a:db:fa:62:b4:d4:29:85:
         42:27:91:eb:9d:68:f6:85:dd:75:b3:d8:0f:39:d2:9e:c8:64:
         a6:36:e0:db:01:39:2d:53:d6:3b:a1:4d:8a:15:3a:96:51:56:
         3e:9e:f1:7a:04:12:86:e4:24:60:0f:12:52:17:41:c0:df:4e:
         ef:52:cd:75:fe:cb:fe:9c:7c:b2:33:7d:37:1a:fa:c6:d3:5d:
         06:ba:9f:dc:8c:8a:b7:2e:47:d6:74:27:51:fb:94:36:b8:db:
         c7:57:97:b9:92:95:51:82:03:2f:16:bf:b4:21:90:91:c7:de:
         58:a5:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:54 2026 by rpki-client