Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/06A10448541011F1884CD63093833773.roa
File:                     06A10448541011F1884CD63093833773.roa (raw, json)
Hash identifier:          6HuRjlixmtBwUNgYtybQszEYe0FzlDiikZKlp6t1LjA=
Subject key identifier:   E4:22:67:0A:C9:6B:C7:69:7F:EB:BC:D7:36:2D:55:F1:25:BA:9D:BE
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       3F
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/06A10448541011F1884CD63093833773.roa
Signing time:             Thu 21 May 2026 07:14:45 +0000
ROA not before:           Thu 21 May 2026 07:14:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8796
IP address blocks:        177.2.16.0/21 maxlen: 24
                          177.2.24.0/21 maxlen: 24
                          177.2.176.0/21 maxlen: 24
                          177.3.32.0/20 maxlen: 24
                          177.3.80.0/21 maxlen: 24
                          177.5.48.0/20 maxlen: 24
                          177.7.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 21 07:14:45 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0eb0e5-62ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:12:2d:1e:a4:13:c6:f3:2f:cc:39:84:6c:
                    6f:30:da:b8:2c:78:a9:22:ef:77:e5:36:cd:0c:e7:
                    ff:c7:df:71:a8:54:b0:3f:27:d5:c3:28:96:42:71:
                    65:54:ee:ac:8b:07:1d:d1:a2:ea:af:9e:b2:0e:0b:
                    70:fc:f8:a3:0c:b7:aa:75:86:bf:a0:3f:90:a1:19:
                    05:7d:b6:49:b9:de:f4:1e:2f:49:f4:32:3a:ac:d9:
                    2b:73:c9:e0:dc:3d:48:76:e7:e8:a1:84:93:d8:b2:
                    aa:0b:cf:a0:7e:d5:be:a5:18:95:82:0a:db:93:c0:
                    25:e4:8d:03:cd:63:38:42:8a:12:9c:f6:69:a8:d6:
                    59:74:a8:d9:77:cb:3b:87:61:23:25:1f:8c:56:4f:
                    fa:58:25:a2:be:1e:13:91:e8:83:3a:a5:66:e0:bb:
                    bd:54:d8:f1:c2:07:25:5b:f9:f8:a3:e3:eb:76:46:
                    a9:51:55:c3:da:9b:ef:e1:eb:f3:7a:de:dc:ea:ed:
                    6d:4a:97:20:47:ca:ae:62:be:66:f1:1f:2a:13:06:
                    53:35:87:ec:47:12:1f:e8:e0:bf:cf:f2:e3:a1:25:
                    8d:55:7b:04:e3:00:8b:fa:0d:e3:5c:f7:5a:b2:df:
                    27:ac:83:a2:91:42:49:8d:06:a4:aa:87:f5:38:75:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:22:67:0A:C9:6B:C7:69:7F:EB:BC:D7:36:2D:55:F1:25:BA:9D:BE
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/06A10448541011F1884CD63093833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.16.0/20
                  177.2.176.0/21
                  177.3.32.0/20
                  177.3.80.0/21
                  177.5.48.0/20
                  177.7.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:cc:d8:b4:fb:ed:ce:95:0a:97:40:32:12:d2:da:e1:8b:
         54:d7:c1:4e:4d:f7:7c:71:1e:98:64:d8:31:68:18:3c:da:fa:
         a6:c4:b0:89:ca:de:24:6b:bf:b3:67:7f:30:dd:d3:35:53:ec:
         1c:ce:9c:44:93:a1:ba:19:d3:3a:40:80:ae:e4:20:08:42:02:
         09:be:09:b9:91:bf:2e:86:a2:9e:87:d1:ac:61:46:59:1d:54:
         10:77:92:bf:61:16:33:f3:73:c8:fe:bd:20:5a:e4:4b:cc:ce:
         ed:84:7e:0e:45:27:50:29:ef:8c:62:72:53:46:19:a3:b5:ac:
         d6:72:10:99:72:de:64:5d:bf:c4:1b:f9:6f:ab:56:e4:d7:de:
         e3:8f:cd:bb:2a:f2:bf:c1:26:d8:e0:86:7d:ac:f4:04:99:53:
         81:f2:d6:33:d2:d4:af:03:1c:cd:aa:9b:66:6c:27:7d:a5:12:
         6a:99:61:ee:23:46:13:c1:30:a1:b4:14:0b:2d:8e:31:ca:6b:
         bc:5b:0f:35:24:3d:e7:aa:2b:56:36:8e:37:fa:79:b5:19:72:
         d4:49:15:c3:39:46:cd:b8:90:02:3a:c1:ec:ca:f8:9a:69:56:
         83:f3:d2:eb:50:06:21:c5:cd:50:32:5c:c5:cf:96:55:02:2b:
         cd:33:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:52:57 2026 by rpki-client