Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/932C5CF28B2C11F1938379423E11F970.roa
File:                     932C5CF28B2C11F1938379423E11F970.roa (raw, json)
Hash identifier:          6x4zg3RShZkV+0VjijXtAsRZy4Cy68u6hzwg44RyXgo=
Subject key identifier:   14:C7:0E:89:C8:F6:2A:18:E2:81:CA:A2:C1:AC:36:66:A9:BE:5F:33
Certificate issuer:       /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial:       1A98
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/932C5CF28B2C11F1938379423E11F970.roa
Signing time:             Wed 29 Jul 2026 09:04:59 +0000
ROA not before:           Wed 29 Jul 2026 09:04:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149315
IP address blocks:        66.150.244.0/24 maxlen: 24
                          66.150.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6808 (0x1a98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
        Validity
            Not Before: Jul 29 09:04:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69c23b-b3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:65:6f:39:fa:eb:52:8d:80:fa:4d:05:29:
                    d2:02:88:47:0f:77:c3:7f:53:48:ec:ff:c9:80:e9:
                    aa:1c:ef:46:05:b6:95:0a:81:f2:1f:89:38:85:c0:
                    90:15:a1:f7:7c:9f:9c:b7:3d:83:39:d2:3a:8e:d4:
                    b0:38:2b:98:be:b7:ee:28:ca:bb:d2:34:93:f0:b8:
                    54:55:f3:e5:dc:03:b7:ce:0c:94:84:ad:82:c3:78:
                    54:d5:14:29:1c:0c:c2:40:c8:52:be:48:07:4f:07:
                    dc:b6:9a:c9:c9:a6:f3:d7:4b:de:ff:b4:eb:2b:b3:
                    a7:6f:9e:8e:f0:fb:b3:47:87:f3:7c:81:f6:62:48:
                    02:4f:54:db:2a:a9:08:b3:2b:ff:d8:da:56:77:81:
                    f6:bb:c9:73:05:38:38:32:98:8f:e2:3e:fb:2b:03:
                    07:bf:3a:fb:4d:39:e0:e6:a0:9b:fa:ba:5c:f2:bb:
                    0d:52:4a:e6:35:45:2f:46:5a:ca:a9:b1:67:96:88:
                    87:6b:d6:1b:2b:7a:33:e8:78:6c:c8:fd:44:a2:c7:
                    99:1f:e4:b2:0b:21:0c:8e:3f:32:7d:e3:07:cc:d0:
                    31:73:1e:72:81:ea:0e:00:a9:3e:ab:a8:bc:0c:4d:
                    e3:5d:dd:54:0e:a8:c5:16:f3:6b:4a:0b:b6:32:7b:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C7:0E:89:C8:F6:2A:18:E2:81:CA:A2:C1:AC:36:66:A9:BE:5F:33
            X509v3 Authority Key Identifier:
                keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/932C5CF28B2C11F1938379423E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.150.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:74:b4:6b:d7:4a:23:ae:7b:a4:a2:76:ad:a2:d5:3e:96:db:
         5f:de:83:14:99:d0:3a:53:d7:d5:51:a4:f8:a7:93:17:14:6d:
         26:34:96:2c:59:59:3e:0e:51:0d:d9:72:3d:28:12:57:d0:c9:
         6e:3a:03:8b:89:bd:ac:d8:1e:d8:f3:1f:2d:c1:24:40:5d:ef:
         92:00:02:af:e8:b9:e7:6c:ae:b2:8f:d6:c8:ff:ff:79:26:2a:
         d5:5e:90:b8:f2:ec:d9:a5:17:97:ab:f5:35:cc:8d:3d:36:58:
         88:ed:1a:d1:2a:72:bf:77:30:94:dc:36:8d:39:19:99:74:b8:
         1f:d0:d6:98:d7:ea:80:03:3f:d9:78:62:b5:45:4b:2a:74:05:
         31:39:cc:a6:a2:20:84:fe:66:20:dc:9f:2f:09:0c:24:be:0d:
         9d:e9:60:6c:86:c3:af:90:37:6e:d7:99:fc:7c:96:41:ad:bf:
         cc:20:32:ee:8a:fc:dd:99:60:30:ef:07:ad:59:b1:9c:79:54:
         e7:21:94:78:b4:c5:d0:8d:06:89:20:30:7b:35:b6:19:68:98:
         a0:cf:b4:84:d6:41:e7:fe:f3:28:d7:e5:26:5a:be:ae:0f:c3:
         ad:89:26:2e:0e:e3:0d:ca:aa:e3:e8:6d:1f:e1:77:3a:21:6f:
         ca:7b:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:07:39 2026 by rpki-client