Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
File:                     89C7E3A255B211F1AB301B6C9D833773.roa (raw, json)
Hash identifier:          Ud57u/4onU2ULb6FSQyiz03UKna0ah+jPo8qNli4+h4=
Subject key identifier:   2D:21:2C:8E:A6:A0:E2:83:7C:B5:2C:27:8E:17:49:A5:6D:0B:31:E9
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       0106
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
Signing time:             Mon 06 Jul 2026 06:53:58 +0000
ROA not before:           Mon 06 Jul 2026 06:53:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     18186
IP address blocks:        177.4.0.0/20 maxlen: 24
                          177.4.32.0/20 maxlen: 24
                          177.4.80.0/20 maxlen: 24
                          177.5.64.0/20 maxlen: 24
                          177.5.112.0/20 maxlen: 24
                          177.5.176.0/20 maxlen: 24
                          177.6.176.0/20 maxlen: 24
                          177.201.224.0/20 maxlen: 24
                          179.236.96.0/21 maxlen: 24
                          179.236.104.0/21 maxlen: 24
                          191.223.32.0/20 maxlen: 24
                          200.222.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 02:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Jul  6 06:53:58 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a4b5106-1d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:8c:5f:78:b4:12:ac:f0:cc:a9:02:fe:8f:
                    eb:74:66:0d:4b:58:a0:cb:65:71:59:c8:66:b8:3a:
                    b2:b9:71:e0:5b:6c:a0:6a:8c:57:f8:d4:af:d0:03:
                    f6:16:d5:c3:0a:b0:fa:94:e2:b7:50:d8:d9:9e:84:
                    6e:92:8d:85:43:86:87:77:38:29:af:bc:65:4a:48:
                    5a:0f:9a:a6:f7:ac:9c:d7:05:24:10:df:f5:ae:85:
                    c4:80:a7:95:23:37:da:1b:16:b5:6f:63:2d:ea:87:
                    24:39:5e:d5:42:b7:20:21:61:94:25:26:2c:5c:15:
                    72:f6:7f:6d:44:64:ed:14:8b:8b:13:bb:0c:e5:15:
                    32:2c:e8:20:98:c8:c6:81:5b:ae:f5:e6:d3:0b:34:
                    31:2f:f0:39:d5:e9:ad:2b:b5:a4:b6:b5:fa:1f:44:
                    32:95:77:cc:68:da:88:e4:fa:14:47:0b:3b:b7:a5:
                    c0:85:79:d2:d5:44:81:00:b0:2a:f9:af:56:fa:5c:
                    3c:ac:39:43:dc:29:eb:e4:c2:1f:2b:bd:73:4b:39:
                    68:9e:92:69:b9:03:f7:31:2d:04:48:37:e3:63:76:
                    6e:64:dd:14:eb:96:3f:44:f8:52:fa:01:b8:8c:7d:
                    96:29:93:86:17:23:24:74:c9:5d:99:bd:e2:f0:e1:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:2C:8E:A6:A0:E2:83:7C:B5:2C:27:8E:17:49:A5:6D:0B:31:E9
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.4.0.0/20
                  177.4.32.0/20
                  177.4.80.0/20
                  177.5.64.0/20
                  177.5.112.0/20
                  177.5.176.0/20
                  177.6.176.0/20
                  177.201.224.0/20
                  179.236.96.0/20
                  191.223.32.0/20
                  200.222.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:96:8e:02:86:4a:71:12:7f:2d:16:3b:c1:79:0f:18:4a:ca:
         fa:cf:80:a5:f2:a2:c1:bd:9e:af:31:31:c3:7f:a0:d2:12:ce:
         d2:75:e4:5e:79:9e:59:32:d0:0f:6e:08:a2:31:38:bf:0c:63:
         eb:3c:b5:68:ae:7e:9f:ad:f7:b3:67:09:d8:92:8f:40:aa:7a:
         da:07:8d:9f:67:3c:0c:d6:b1:6d:5a:ed:02:6f:f3:6f:78:95:
         c8:7a:0a:49:a9:fb:2e:58:63:be:82:be:24:64:3c:b5:bb:1d:
         32:31:7a:b0:b6:17:3d:a8:ec:d3:4d:91:1f:ae:cb:21:8f:11:
         de:b2:5c:15:b4:08:98:23:75:3b:29:d4:e6:fc:aa:1b:9f:c7:
         85:ee:a5:1a:69:68:f2:e9:fa:59:1e:c3:5f:f1:42:dd:d6:c8:
         fa:4a:b4:2c:cd:73:fa:54:d3:ef:d3:dc:d3:d7:9a:4a:91:04:
         31:ae:57:c4:8b:ae:e4:1e:31:5d:a3:c9:47:19:e4:74:04:28:
         ff:d0:6a:8a:be:4e:99:2c:b7:77:ea:fc:74:c6:71:68:76:25:
         2f:b6:21:17:21:f3:d7:96:66:3c:d3:8c:62:94:40:d4:bc:78:
         67:97:84:87:b0:a4:94:b5:f6:e5:1a:1d:78:45:aa:bb:a3:c5:
         d6:e3:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:04:00 2026 by rpki-client