Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/1C009EA655BF11F181F38166A4833773.roa
File:                     1C009EA655BF11F181F38166A4833773.roa (raw, json)
Hash identifier:          iR+TVjhbzPwL9A21bMttwQ7suv4TyjEqWp81sgd6dHY=
Subject key identifier:   91:30:0D:A7:66:17:DA:07:0B:FD:16:DE:80:48:59:5E:A3:F5:7D:FE
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       93
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/1C009EA655BF11F181F38166A4833773.roa
Signing time:             Tue 26 May 2026 07:38:55 +0000
ROA not before:           Tue 26 May 2026 07:38:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140227
IP address blocks:        177.2.16.0/20 maxlen: 24
                          177.2.176.0/21 maxlen: 24
                          177.3.32.0/20 maxlen: 24
                          177.3.80.0/21 maxlen: 24
                          177.4.0.0/20 maxlen: 24
                          177.4.32.0/20 maxlen: 24
                          177.5.48.0/20 maxlen: 24
                          177.5.64.0/20 maxlen: 24
                          177.5.112.0/20 maxlen: 24
                          177.5.176.0/20 maxlen: 24
                          177.6.176.0/20 maxlen: 24
                          177.7.128.0/20 maxlen: 24
                          179.236.96.0/21 maxlen: 24
                          191.223.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 26 07:38:55 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a154e0f-6c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:3d:2e:54:6c:02:58:b0:bf:9a:92:8a:92:
                    86:89:eb:7e:0a:24:43:bf:ce:ae:2b:05:7b:4f:70:
                    d5:e7:9e:a4:aa:f3:ea:99:89:df:a8:3c:9d:1c:a7:
                    47:70:84:76:ad:e5:1e:75:08:9b:9b:1c:0d:45:70:
                    72:55:77:82:2c:b3:c8:db:58:e9:97:7f:c8:d1:ff:
                    02:b1:27:44:7e:00:ba:4f:ef:e6:ce:c1:b3:6c:56:
                    fa:db:db:6f:25:71:ac:2a:08:fc:f2:7b:38:81:ca:
                    14:63:4c:5f:24:24:cb:4b:b1:f8:68:69:73:c2:44:
                    5a:ab:83:3c:88:de:ad:0a:41:ad:6a:13:6b:32:6f:
                    69:38:55:f5:e0:a5:ed:68:1b:52:14:8a:86:5b:61:
                    f9:e7:e4:9e:ea:37:3d:49:75:16:13:f7:42:4e:31:
                    f0:92:17:c4:16:e3:4d:df:31:52:35:38:d2:d6:2b:
                    f5:e4:06:6c:46:aa:9a:a2:45:04:28:84:06:d9:5e:
                    99:f9:fb:0b:18:5c:96:53:c0:6e:8e:39:67:87:3c:
                    42:70:6f:96:ca:78:92:ce:c7:a0:bb:5b:33:9a:59:
                    bf:09:3a:95:19:94:ae:28:9d:f7:c1:ea:fa:a3:f9:
                    2f:1d:d0:3e:4c:ca:ae:42:f0:63:a9:78:65:48:07:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:0D:A7:66:17:DA:07:0B:FD:16:DE:80:48:59:5E:A3:F5:7D:FE
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/1C009EA655BF11F181F38166A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.16.0/20
                  177.2.176.0/21
                  177.3.32.0/20
                  177.3.80.0/21
                  177.4.0.0/20
                  177.4.32.0/20
                  177.5.48.0-177.5.79.255
                  177.5.112.0/20
                  177.5.176.0/20
                  177.6.176.0/20
                  177.7.128.0/20
                  179.236.96.0/21
                  191.223.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:84:bd:b9:34:9b:f6:5f:46:d9:3f:84:5e:ed:73:47:69:
         5f:10:85:59:c5:7a:b6:48:e7:a2:09:cb:0b:f3:9d:22:ab:64:
         67:37:dd:cc:04:0f:fc:a4:4c:20:44:89:f4:be:36:3c:85:af:
         5e:7b:6c:dd:46:88:1f:cc:ff:98:db:2e:e1:65:ee:fa:76:72:
         49:18:0a:4f:7d:c4:aa:76:61:01:7d:ef:49:d1:4f:46:ee:4d:
         03:84:cd:6c:ec:4e:ef:d4:be:09:bf:18:8a:4f:83:b6:d7:bc:
         70:f0:ff:a2:43:23:24:57:56:73:e2:9a:97:63:a7:29:f7:ce:
         53:72:ca:53:f9:21:02:e5:d9:c8:bb:c2:ad:a3:18:70:b5:9b:
         68:31:00:fe:40:44:bf:a7:94:2e:d3:a2:d2:be:1a:c8:5f:e8:
         c6:02:93:bd:3a:ba:69:31:1c:9a:aa:39:13:35:24:0d:7c:c7:
         37:0b:57:d5:43:03:ff:31:96:5a:a6:8d:55:3e:e2:35:56:48:
         1e:54:69:a7:3e:43:57:f2:29:be:57:e4:ef:70:9b:4f:02:0e:
         c9:ae:1a:1f:be:3a:f5:f5:cd:20:65:6b:7e:c4:e3:0a:f4:00:
         40:00:6a:27:23:62:70:f3:18:44:75:e8:4f:f6:f3:a2:8a:d2:
         8b:09:ca:f5
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF
NEVGMzJDNTIwHhcNMjYwNTI2MDczODU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE1NGUwZi02YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsxU9LlRsAliwv5qSipKGiet+CiRDv86uKwV7T3DV556kqvPqmYnfqDydHKdH
cIR2reUedQibmxwNRXByVXeCLLPI21jpl3/I0f8CsSdEfgC6T+/mzsGzbFb629tv
JXGsKgj88ns4gcoUY0xfJCTLS7H4aGlzwkRaq4M8iN6tCkGtahNrMm9pOFX14KXt
aBtSFIqGW2H55+Se6jc9SXUWE/dCTjHwkhfEFuNN3zFSNTjS1iv15AZsRqqaokUE
KIQG2V6Z+fsLGFyWU8BujjlnhzxCcG+WyniSzsegu1szmlm/CTqVGZSuKJ33wer6
o/kvHdA+TMquQvBjqXhlSAcgGQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJEwDadm
F9oHC/0W3oBIWV6j9X3+MB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG
MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvMUMwMDlFQTY1
NUJGMTFGMTgxRjM4MTY2QTQ4MzM3NzMucm9hMG8GCCsGAQUFBwEHAQH/BGAwXjBc
BAIAATBWAwQEsQIQAwQDsQKwAwQEsQMgAwQDsQNQAwQEsQQAAwQEsQQgMAwDBASx
BTADBASxBUADBASxBXADBASxBbADBASxBrADBASxB4ADBAOz7GADBAS/3yAwDQYJ
KoZIhvcNAQELBQADggEBAIfPhL25NJv2X0bZP4Re7XNHaV8QhVnFerZI56IJywvz
nSKrZGc33cwED/ykTCBEifS+NjyFr157bN1GiB/M/5jbLuFl7vp2ckkYCk99xKp2
YQF970nRT0buTQOEzWzsTu/Uvgm/GIpPg7bXvHDw/6JDIyRXVnPimpdjpyn3zlNy
ylP5IQLl2ci7wq2jGHC1m2gxAP5ARL+nlC7TotK+Gshf6MYCk706umkxHJqqORM1
JA18xzcLV9VDA/8xllqmjVU+4jVWSB5Uaac+Q1fyKb5X5O9wm08CDsmuGh++OvX1
zSBla37E4wr0AEAAaicjYnDzGER16E/286KK0osJyvU=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:47:59 2026 by rpki-client