Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/05684FB4541011F1884CD63093833773.roa
File:                     05684FB4541011F1884CD63093833773.roa (raw, json)
Hash identifier:          yD58uqoazC2s+Sv0Qiq7WKw5nDFhLfiguBaXgnz9iEM=
Subject key identifier:   16:C0:A7:42:60:F7:46:03:52:1F:FB:01:78:E4:F6:C4:FD:F7:C6:90
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       3D
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/05684FB4541011F1884CD63093833773.roa
Signing time:             Thu 21 May 2026 07:14:41 +0000
ROA not before:           Thu 21 May 2026 07:14:41 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     395886
IP address blocks:        177.2.16.0/21 maxlen: 24
                          177.2.24.0/21 maxlen: 24
                          177.2.176.0/21 maxlen: 24
                          177.3.32.0/20 maxlen: 24
                          177.3.80.0/21 maxlen: 24
                          177.5.48.0/20 maxlen: 24
                          177.7.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 21 07:14:41 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0eb0e0-cbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:06:57:7a:f9:d7:a5:e9:5b:4b:17:b6:44:8a:
                    2c:75:77:14:85:86:3f:82:db:40:cb:3c:32:66:b1:
                    34:b1:2c:8a:1d:66:5c:c1:50:b3:16:b0:71:98:ef:
                    8d:47:13:fc:2a:a1:f1:25:34:04:d4:0b:d6:ba:95:
                    89:de:3f:88:aa:cd:bb:a6:7a:50:3f:82:ba:07:1c:
                    89:8b:08:42:b2:60:ff:6b:97:62:63:3e:28:a6:67:
                    a1:91:71:b7:18:5a:1c:a1:e1:05:e8:1b:a9:42:38:
                    9b:69:ea:56:6b:8f:75:f1:8c:50:7a:42:57:bf:e9:
                    92:7e:54:c7:cf:13:7e:21:6e:82:ab:4f:9e:7a:0c:
                    6a:46:8a:a7:fa:22:87:a6:9f:6b:20:cd:94:fd:7e:
                    8d:a4:3f:01:86:0c:ee:94:1e:ce:96:bb:67:45:a0:
                    34:5a:12:54:80:47:8b:dc:6b:7f:41:63:33:93:4a:
                    64:82:cc:48:d6:05:06:2c:98:bf:e1:89:07:76:96:
                    7b:2f:3c:98:96:6c:b2:8c:ef:0f:19:66:cc:0d:1b:
                    f5:04:9f:07:d6:3f:83:c9:a2:97:b2:3f:8f:dd:d5:
                    0a:9d:10:5e:cf:0c:f6:6d:88:15:6b:bf:66:91:56:
                    8b:2a:f5:1d:0a:60:f4:14:51:6e:6a:67:a7:53:2c:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C0:A7:42:60:F7:46:03:52:1F:FB:01:78:E4:F6:C4:FD:F7:C6:90
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/05684FB4541011F1884CD63093833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.16.0/20
                  177.2.176.0/21
                  177.3.32.0/20
                  177.3.80.0/21
                  177.5.48.0/20
                  177.7.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:c9:b8:3e:a7:c8:a4:27:07:ca:b6:d2:5a:69:1e:31:c6:40:
         1b:6a:38:71:70:43:09:a5:3f:17:63:f5:09:9f:9b:7a:df:17:
         1d:b3:a3:dd:72:90:c1:e1:bb:94:76:44:e1:07:b6:bd:83:c0:
         dd:e9:14:2f:57:7d:f5:e5:64:4b:2d:4e:df:f5:93:9d:c7:8c:
         9b:8b:68:10:9f:45:78:a4:92:b6:0b:73:51:8b:af:c9:78:6f:
         af:1a:29:97:5e:8f:f4:72:e2:c5:ee:ca:e5:e8:37:8b:d6:24:
         27:9d:80:f2:85:28:74:86:4f:fd:90:6f:e4:98:32:d5:7c:61:
         a8:ba:c6:48:00:55:af:f1:b1:71:82:45:8d:cd:fe:ab:48:e9:
         52:53:2a:86:d0:be:f7:e2:76:e7:fb:e4:b5:56:3e:e8:35:83:
         c9:2c:c9:77:65:d9:f7:64:f7:24:e6:70:1a:4b:49:26:e7:54:
         98:f0:ee:37:10:98:8d:48:4b:53:dc:26:33:30:47:ce:26:42:
         00:3c:da:3f:a1:42:28:20:98:f8:e3:6e:7f:4e:e5:a1:5a:bd:
         57:02:cc:59:9b:52:ce:e5:71:c0:db:58:1e:5f:30:99:cf:cc:
         d5:80:6f:c6:d2:7b:a7:4b:ad:c4:77:81:b2:0c:30:f7:2e:6b:
         9b:8c:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:52:57 2026 by rpki-client