Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
File:                     89C7E3A255B211F1AB301B6C9D833773.roa (raw, json)
Hash identifier:          FlK2ErebuPoLlXe8uyCOVyBbtVz4jA09/E7vFyIyM3E=
Subject key identifier:   F5:66:F7:0A:93:0A:F9:91:27:6E:ED:3A:C2:84:88:60:20:8C:29:2A
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       01B8
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa
Signing time:             Tue 13 Oct 2026 03:52:12 +0000
ROA not before:           Tue 13 Oct 2026 03:52:12 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     18186
IP address blocks:        177.4.0.0/20 maxlen: 24
                          177.4.32.0/20 maxlen: 24
                          177.4.80.0/20 maxlen: 24
                          177.5.64.0/20 maxlen: 24
                          177.5.112.0/20 maxlen: 24
                          177.5.176.0/20 maxlen: 24
                          177.6.176.0/20 maxlen: 24
                          177.201.224.0/20 maxlen: 24
                          179.236.96.0/21 maxlen: 24
                          179.236.104.0/21 maxlen: 24
                          191.223.32.0/20 maxlen: 24
                          200.222.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 02:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Oct 13 03:52:12 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acdaaec-5077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:4d:b9:85:cd:39:e7:2f:22:43:ec:20:76:
                    14:b0:e3:e5:6f:6e:21:76:56:f7:2d:f7:20:5e:18:
                    b2:cb:31:2a:ac:48:fd:08:5b:8a:f4:f6:4f:c1:af:
                    66:c8:c2:0f:9d:ac:58:b4:f4:f0:ef:9b:5f:1a:5d:
                    01:b7:6a:48:fe:8f:a3:61:24:dd:25:8f:56:09:59:
                    0e:b0:57:b6:21:a2:53:af:fd:63:20:fb:94:d5:14:
                    94:db:ba:85:a3:06:7b:0e:05:f5:f2:74:ab:92:5c:
                    e8:79:9c:6c:42:0b:b3:c4:5a:35:65:46:9b:50:4d:
                    7e:78:b4:a4:a6:55:db:58:22:e1:cb:8f:08:f5:55:
                    1e:12:4f:96:08:46:f3:5a:1b:f9:6e:e3:13:fd:2c:
                    a9:88:bf:f3:09:62:0f:9d:5e:e4:bf:9b:1b:fd:90:
                    09:72:2b:2c:1d:54:d0:f2:49:7e:31:9a:bb:96:8b:
                    ff:67:82:e2:83:c6:25:e9:7b:52:fc:93:10:06:39:
                    07:72:67:37:2a:90:4b:d9:16:29:04:41:36:00:68:
                    36:48:f0:65:72:50:c2:d2:6e:d6:c7:15:63:68:b2:
                    62:64:60:4b:1f:3a:f2:e9:24:39:32:56:54:26:82:
                    39:ac:2d:1a:1a:f8:b3:6f:9c:c4:ef:47:6f:0f:72:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:66:F7:0A:93:0A:F9:91:27:6E:ED:3A:C2:84:88:60:20:8C:29:2A
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/89C7E3A255B211F1AB301B6C9D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.4.0.0/20
                  177.4.32.0/20
                  177.4.80.0/20
                  177.5.64.0/20
                  177.5.112.0/20
                  177.5.176.0/20
                  177.6.176.0/20
                  177.201.224.0/20
                  179.236.96.0/20
                  191.223.32.0/20
                  200.222.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:74:1c:08:ee:51:69:d1:30:fc:97:12:be:08:a2:99:74:4c:
         0a:a0:7c:d5:0e:c9:42:c7:07:9e:3c:f8:4c:d4:58:9b:22:6a:
         53:07:c9:c8:5b:1a:80:bf:1a:15:91:6c:fb:0a:be:31:f0:00:
         e7:9e:05:0a:2a:5b:32:15:e2:53:7b:4a:c7:6b:53:d7:cd:5e:
         03:02:79:1f:e0:63:aa:2b:34:73:8c:17:02:68:89:75:84:25:
         c6:72:a9:c4:1a:36:fa:1e:e5:d7:4d:17:82:3e:f4:60:49:67:
         7b:89:c5:9d:c7:2e:fc:80:59:e2:9b:21:a1:bb:76:b0:a5:9d:
         37:78:e2:c9:06:f0:27:29:7c:42:09:1a:25:45:10:d6:c8:fe:
         83:98:41:34:73:c4:e4:2e:c2:83:46:39:4f:f0:ed:b1:20:25:
         49:87:ce:00:dd:5d:cc:a3:e8:62:ee:73:26:a7:41:df:0d:26:
         10:75:de:94:d3:08:cc:62:1d:8c:d9:04:23:1a:2d:0d:14:79:
         06:46:59:f3:b5:e5:a8:aa:90:86:eb:26:ad:13:c9:10:fb:18:
         86:a8:44:f4:da:25:be:eb:6d:51:57:a7:97:2b:84:ac:b6:eb:
         01:3e:e1:97:c9:89:09:e7:d9:46:c8:92:52:b4:83:8d:94:59:
         1d:0d:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:53:18 2026 by rpki-client