Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
File:                     2187C56A5A7A11F1B6CAB384BF833773.roa (raw, json)
Hash identifier:          RS+RNVV2GI93FhZ2iO2YPawBc6o/YKECzxAvACZ+FpQ=
Subject key identifier:   94:D5:05:C1:15:E7:DC:97:39:32:31:19:FB:C5:EE:9A:EA:64:55:D3
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       9C
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa
Signing time:             Thu 28 May 2026 09:46:42 +0000
ROA not before:           Thu 28 May 2026 09:46:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     400618
IP address blocks:        177.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 28 09:46:42 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a180f02-38a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:7b:7d:f6:0a:12:26:aa:52:69:f0:9f:a1:
                    fa:cc:b8:fe:0f:da:f3:24:3d:f9:d6:84:12:c3:91:
                    d5:1c:45:47:c8:58:79:54:d1:b2:ae:d8:90:3b:d1:
                    18:8b:87:b0:71:b7:5e:f7:45:ad:ee:59:d4:bc:fc:
                    89:28:79:2f:5e:e8:92:fe:d8:c2:48:ed:b3:f5:2f:
                    ca:29:0c:03:01:f5:9a:92:5a:a4:02:d3:c4:80:8f:
                    66:21:c5:59:fb:11:64:11:27:09:1a:69:52:81:a4:
                    c8:22:50:2d:71:14:9b:5e:08:6d:2a:6e:96:70:7a:
                    37:e1:9c:b8:9f:86:9e:06:64:6a:d5:26:07:d4:2e:
                    8b:d4:33:13:9e:1e:b1:db:0a:44:5b:e4:ef:5f:58:
                    00:80:86:fc:33:22:24:84:9d:37:82:ec:ec:77:e2:
                    c3:09:66:98:57:e6:d2:44:9c:d0:de:a9:ee:1a:36:
                    1a:50:08:ef:5d:d5:0d:28:a4:5a:92:ca:44:2f:cb:
                    56:98:6f:6d:e0:b7:b8:21:d2:a1:54:d8:a5:70:03:
                    67:06:b0:97:3c:09:d1:f0:40:1a:b6:c8:a9:6e:ae:
                    ac:4c:78:c9:e8:f9:32:c6:5a:3e:50:17:4b:81:f6:
                    5d:25:1c:2d:da:b2:4d:0f:9a:57:6b:f4:5d:51:4a:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:05:C1:15:E7:DC:97:39:32:31:19:FB:C5:EE:9A:EA:64:55:D3
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/2187C56A5A7A11F1B6CAB384BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.0.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:4f:25:87:e4:bc:57:ef:1a:b4:29:6e:7e:52:c5:3e:8f:f0:
         aa:61:63:38:59:86:f1:63:e9:e3:11:83:74:f8:52:90:d2:02:
         7f:62:85:96:90:58:33:42:d1:61:85:e3:1d:23:31:67:82:87:
         1f:79:c0:46:5e:e4:e3:82:2e:2b:59:aa:55:94:4a:50:b0:df:
         8b:06:5d:91:8b:03:cc:4b:65:a5:f7:32:b9:ad:f1:81:bb:9c:
         14:6b:81:53:3f:e8:70:4c:e3:61:b9:a4:9d:a2:6c:69:e4:8c:
         e6:77:28:c9:95:b2:65:2b:d2:7f:78:9a:5a:33:cd:7a:04:26:
         5d:01:39:ca:5a:05:97:16:23:23:ba:13:d4:b7:53:93:7c:c7:
         d8:00:b3:66:f3:d0:ab:af:f5:63:8c:f2:5d:28:20:22:89:8b:
         bc:85:20:ab:4e:21:26:89:92:a0:bf:c3:ca:85:46:34:2a:df:
         18:36:ef:c0:fb:84:65:08:d3:28:bf:3a:c4:c1:11:a4:c3:7b:
         11:f3:6e:7b:dd:53:fc:92:28:29:d7:3b:b0:0a:64:c7:d1:0d:
         73:d0:88:12:5c:ef:81:c7:14:d4:ec:ab:d0:53:4a:33:36:5d:
         62:75:d5:f4:6b:0b:51:53:11:7b:d1:34:bf:b6:0a:e6:ea:fe:
         48:b0:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:23 2026 by rpki-client