Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/34705B9E59E211F1AE176CAE90833773.roa
File:                     34705B9E59E211F1AE176CAE90833773.roa (raw, json)
Hash identifier:          2ORjQfQtAW1WnfDbKU31edC4pJBExTW2lzTOLcwhu7o=
Subject key identifier:   6A:1A:DE:E4:DA:F5:3B:4B:B9:FA:C3:2B:0B:03:76:C1:82:60:0D:69
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       01BF
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/34705B9E59E211F1AE176CAE90833773.roa
Signing time:             Tue 13 Oct 2026 03:52:30 +0000
ROA not before:           Tue 13 Oct 2026 03:52:30 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     65403
IP address blocks:        177.0.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Oct 13 03:52:30 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acdaafe-3c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:b2:0a:bf:06:36:98:e1:6f:0d:4b:f6:64:
                    62:a3:9d:22:20:ad:0a:69:cf:b7:5c:06:ed:ca:a0:
                    41:9c:eb:07:00:29:c4:ae:93:99:15:32:62:c6:06:
                    31:af:ae:c4:8c:f6:f0:43:51:01:22:1f:7e:a4:ef:
                    26:00:de:ee:e1:48:ae:57:ca:be:2c:f7:dd:72:67:
                    38:22:41:65:01:be:ca:42:72:0c:2b:28:60:cd:a9:
                    cd:80:b0:84:65:d2:14:d8:d7:7e:73:39:02:f7:b5:
                    13:90:d5:55:1c:d4:e7:9d:22:12:1e:5d:75:3c:4a:
                    66:61:c5:c2:8b:d7:e2:f9:db:88:40:97:35:8b:5a:
                    ab:48:62:c5:17:e9:da:65:4f:c9:a6:3d:ae:30:62:
                    1b:8a:56:c5:2f:34:bb:4d:7e:f6:3a:96:9f:db:e4:
                    76:9b:cd:bf:d2:c1:9a:42:c7:ba:f1:b2:67:3f:ac:
                    c4:88:48:3a:0f:ff:51:d6:75:f3:83:52:d6:95:f0:
                    75:84:be:ec:a0:68:81:2d:a1:66:ab:a6:bc:e8:65:
                    2a:d7:5c:31:88:46:5f:7f:3b:09:b7:78:9d:16:c4:
                    64:2c:9f:ea:2b:76:ab:8b:b4:c5:eb:9f:ee:70:a7:
                    55:cc:df:dd:77:47:85:5a:6d:bb:4b:1b:d0:a8:a5:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:DE:E4:DA:F5:3B:4B:B9:FA:C3:2B:0B:03:76:C1:82:60:0D:69
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/34705B9E59E211F1AE176CAE90833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.0.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:16:06:0b:53:ce:b1:5b:29:7a:8d:14:fc:74:ba:3b:c4:f5:
         d4:17:f1:93:49:73:f5:10:40:47:1a:0a:ae:84:fd:c5:8f:77:
         b5:e3:20:93:17:d5:2a:77:d9:25:90:fc:fc:dc:00:c2:4b:4c:
         50:e5:5b:50:52:91:af:78:c0:13:7f:0b:5f:f3:19:e5:c2:44:
         33:85:66:07:02:7c:44:5c:e4:ce:e8:86:5d:b4:c5:87:a1:a9:
         5a:2d:a1:3a:31:e5:63:ca:96:39:f4:73:64:80:08:d6:d8:83:
         a4:7a:ac:9c:7b:6e:18:2b:26:5c:ee:5c:81:72:7e:b6:36:19:
         71:3d:c2:ff:73:5e:43:98:93:47:a7:11:b2:bf:c9:79:a4:00:
         f6:3b:8a:1f:95:92:c9:b3:e1:68:d4:3b:64:e8:c4:5d:0a:43:
         c0:0a:eb:c6:08:f2:1a:9f:6b:74:4b:b7:7f:60:c3:08:f7:74:
         1d:08:f7:f4:37:e3:e5:22:a0:ce:83:6b:19:52:76:f0:6c:f8:
         47:49:1d:00:36:87:df:10:5e:91:61:db:08:a7:21:87:4a:c7:
         25:da:53:39:d7:db:6d:8b:dc:f1:41:bf:de:3b:a6:50:b4:5b:
         47:ce:0f:65:8d:2f:d5:3b:73:bf:75:e0:fd:29:74:aa:d4:3f:
         41:6e:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:13:23 2026 by rpki-client