Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/06C575F8A5B911F198D1D1366C11F970.roa
File:                     06C575F8A5B911F198D1D1366C11F970.roa (raw, json)
Hash identifier:          NokoFevfvQskoHnxohVLzCM9L0IYhUXDVwoiqSoRVHQ=
Subject key identifier:   4B:67:9E:1A:62:3D:7F:3E:7F:0B:91:8C:89:62:CB:C9:34:07:9E:41
Certificate issuer:       /CN=A9199197/serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
Certificate serial:       07
Authority key identifier: 49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/06C575F8A5B911F198D1D1366C11F970.roa
Signing time:             Tue 01 Sep 2026 03:55:53 +0000
ROA not before:           Tue 01 Sep 2026 03:55:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     24560
IP address blocks:        177.7.160.0/20 maxlen: 24
                          177.7.224.0/20 maxlen: 24
                          179.197.112.0/20 maxlen: 24
                          179.197.128.0/20 maxlen: 24
                          179.199.160.0/20 maxlen: 24
                          179.252.0.0/20 maxlen: 24
                          179.252.160.0/20 maxlen: 24
                          179.254.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
        Validity
            Not Before: Sep  1 03:55:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a964cc8-b6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:f4:16:3d:7b:35:d5:8e:cb:ad:4a:74:5f:
                    f0:7f:37:e2:db:af:3b:22:a0:df:91:7b:dc:00:24:
                    c9:f5:69:5b:70:b2:0d:0c:d2:08:b0:27:99:92:9f:
                    f0:07:30:f6:78:ef:a6:6c:87:d8:b3:c9:f6:c9:a8:
                    4e:f4:68:02:3b:f5:70:38:5f:af:0f:6b:32:80:4b:
                    da:e5:eb:ae:d3:09:00:78:03:c5:62:b2:8d:d3:11:
                    f6:ab:37:ee:1e:4b:9f:79:a4:aa:77:54:33:11:64:
                    89:52:81:4a:93:f1:53:51:ff:c6:93:44:f6:9d:a4:
                    33:f4:d7:a6:d4:70:bc:84:90:09:51:f2:dd:e6:ea:
                    2c:49:ae:e0:3a:3e:ad:28:71:e9:e2:db:f9:4e:4e:
                    4f:0a:5e:23:10:86:97:1b:84:1d:5e:75:34:80:83:
                    05:bb:9a:9b:95:a6:f8:69:e1:e5:06:fa:02:b8:71:
                    07:e5:59:cc:28:1e:a9:42:32:6a:a9:f6:a8:00:3a:
                    19:9c:28:c9:28:03:11:9e:2d:c4:3a:88:f5:79:51:
                    5a:9e:7a:4a:2c:a1:42:df:19:ad:96:46:91:8b:cd:
                    ba:31:f2:f8:d6:e3:2f:d8:25:07:f0:05:bd:27:14:
                    87:a7:ef:f7:88:52:87:5e:87:cd:07:15:6e:fe:e1:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:9E:1A:62:3D:7F:3E:7F:0B:91:8C:89:62:CB:C9:34:07:9E:41
            X509v3 Authority Key Identifier:
                keyid:49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/06C575F8A5B911F198D1D1366C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.7.160.0/20
                  177.7.224.0/20
                  179.197.112.0-179.197.143.255
                  179.199.160.0/20
                  179.252.0.0/20
                  179.252.160.0/20
                  179.254.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:64:8e:0b:77:48:e4:16:c4:e8:ed:4f:0c:d1:d7:c1:c3:
         73:1c:df:01:98:b9:8d:02:f0:6a:18:6e:30:5f:6a:fc:45:43:
         06:ac:27:53:24:3f:a9:03:bb:86:7a:ae:4a:07:1c:cd:0d:40:
         a0:2f:8b:55:20:03:04:fa:b5:43:4c:a7:c7:81:7f:5b:75:69:
         8f:08:d9:af:2a:17:87:07:da:2d:a8:49:9e:d2:a0:34:1e:ab:
         47:ea:e3:51:2a:cf:74:e0:09:dc:22:c6:3d:7b:9c:4e:f4:8a:
         c6:44:69:41:84:91:92:5f:7c:92:84:64:33:d3:99:a3:fc:bf:
         a6:90:89:f4:5b:91:06:07:32:9d:a6:c2:1b:c6:4e:bb:09:72:
         54:65:7c:f7:71:61:0e:96:17:15:09:65:ea:9f:fb:e0:3d:cd:
         8f:0f:ec:37:50:1e:12:0c:23:73:7a:42:be:25:81:be:6f:7d:
         32:05:e8:43:67:0f:95:bf:e7:d4:98:f4:f4:c2:1a:d7:9e:f8:
         63:89:73:e3:64:69:a5:89:fd:29:8c:3e:b5:3f:69:e7:6e:6d:
         76:6e:1a:4d:45:53:f6:a7:1a:71:6a:05:5e:17:ea:e0:29:b8:
         80:6c:e6:0e:71:2e:a0:56:1a:ee:6a:5a:47:16:e1:2e:91:fc:
         69:5c:95:cf
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTE5NzExMC8GA1UEBRMoNDlDMzUxRDU0Q0M0OEZBMUE2RkU5QTFGNENGQzRCRThD
MDM2QjRBMDAeFw0yNjA5MDEwMzU1NTNaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTY0Y2M4LWI2ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwK/QWPXs11Y7LrUp0X/B/N+LbrzsioN+Re9wAJMn1aVtwsg0M0giwJ5mSn/AH
MPZ476Zsh9izyfbJqE70aAI79XA4X68PazKAS9rl667TCQB4A8Viso3TEfarN+4e
S595pKp3VDMRZIlSgUqT8VNR/8aTRPadpDP016bUcLyEkAlR8t3m6ixJruA6Pq0o
ceni2/lOTk8KXiMQhpcbhB1edTSAgwW7mpuVpvhp4eUG+gK4cQflWcwoHqlCMmqp
9qgAOhmcKMkoAxGeLcQ6iPV5UVqeekosoULfGa2WRpGLzbox8vjW4y/YJQfwBb0n
FIen7/eIUodeh80HFW7+4YERAgMBAAGjggKMMIICiDAdBgNVHQ4EFgQUS2eeGmI9
fz5/C5GMiWLLyTQHnkEwHwYDVR0jBBgwFoAUScNR1UzEj6Gm/pofTPxL6MA2tKAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MTk3L0FCMDAyMzAwQTFE
RDExRjFBMjVBMzU0MTdFRUU1MjhFL1NjTlIxVXpFajZHbV9wb2ZUUHhMNk1BMnRL
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvU2NOUjFVekVqNkdtX3BvZlRQeEw2TUEydEtBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTE5Ny9BQjAwMjMwMEExREQxMUYxQTI1QTM1NDE3RUVFNTI4RS8wNkM1NzVGOEE1
QjkxMUYxOThEMUQxMzY2QzExRjk3MC5yb2EwSwYIKwYBBQUHAQcBAf8EPDA6MDgE
AgABMDIDBASxB6ADBASxB+AwDAMEBLPFcAMEBLPFgAMEBLPHoAMEBLP8AAMEBLP8
oAMEBLP+4DANBgkqhkiG9w0BAQsFAAOCAQEAJ1xkjgt3SOQWxOjtTwzR18HDcxzf
AZi5jQLwahhuMF9q/EVDBqwnUyQ/qQO7hnquSgcczQ1AoC+LVSADBPq1Q0ynx4F/
W3VpjwjZryoXhwfaLahJntKgNB6rR+rjUSrPdOAJ3CLGPXucTvSKxkRpQYSRkl98
koRkM9OZo/y/ppCJ9FuRBgcynabCG8ZOuwlyVGV893FhDpYXFQll6p/74D3Njw/s
N1AeEgwjc3pCviWBvm99MgXoQ2cPlb/n1Jj09MIa1574Y4lz42RppYn9KYw+tT9p
525tdm4aTUVT9qcacWoFXhfq4Cm4gGzmDnEuoFYa7mpaRxbhLpH8aVyVzw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:14:57 2026 by rpki-client