Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/8AB9CB6855B211F1AB301B6C9D833773.roa
File:                     8AB9CB6855B211F1AB301B6C9D833773.roa (raw, json)
Hash identifier:          1hc62kqQRiRgNKivYeEO8hfNnHIGGNiAazIjGWCGXYQ=
Subject key identifier:   A2:6F:E7:20:10:1E:61:09:89:7F:8E:D4:79:AF:D1:3A:5E:48:14:B6
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       84
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/8AB9CB6855B211F1AB301B6C9D833773.roa
Signing time:             Fri 22 May 2026 08:09:13 +0000
ROA not before:           Fri 22 May 2026 08:09:13 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     40115
IP address blocks:        177.2.16.0/20 maxlen: 24
                          177.2.176.0/21 maxlen: 24
                          177.3.32.0/20 maxlen: 24
                          177.3.80.0/21 maxlen: 24
                          177.4.0.0/20 maxlen: 24
                          177.4.32.0/20 maxlen: 24
                          177.5.48.0/20 maxlen: 24
                          177.5.64.0/20 maxlen: 24
                          177.5.112.0/20 maxlen: 24
                          177.5.176.0/20 maxlen: 24
                          177.6.176.0/20 maxlen: 24
                          177.7.128.0/20 maxlen: 24
                          179.236.96.0/21 maxlen: 24
                          191.223.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 05:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 22 08:09:13 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a100f29-4778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:a9:83:a4:62:d3:c4:3f:92:96:df:b9:c9:
                    09:02:58:49:c6:e8:de:b5:fb:2c:8e:a1:45:28:66:
                    7a:ac:11:08:74:24:64:34:78:28:c4:77:7a:a3:57:
                    9c:32:d5:49:2e:1c:d4:1c:17:66:82:81:37:74:3e:
                    c0:d9:95:4c:10:b9:96:7d:32:78:e7:04:7d:d9:72:
                    24:b6:90:66:01:62:cd:6a:2f:61:30:f8:89:7a:7a:
                    03:57:ba:30:af:7d:73:8a:11:14:0c:fc:66:56:a5:
                    31:2b:ab:02:c7:a6:04:20:1e:15:2e:7b:7e:79:4a:
                    6d:8d:d9:ae:25:9e:e8:88:62:93:e5:d6:f2:81:56:
                    74:e5:b1:65:f2:1f:1f:86:83:a8:12:d8:aa:ac:42:
                    5a:d2:39:a5:6d:60:81:2f:d8:a0:f7:0a:b7:77:b2:
                    04:10:c2:28:a3:cc:f6:cb:a1:f1:5c:49:12:c3:99:
                    15:de:b4:70:c6:df:e2:23:4a:2c:b5:0b:7c:80:17:
                    67:06:66:69:17:6b:04:f6:8d:91:d1:e4:f2:ac:48:
                    c9:9f:3c:c7:07:d5:16:47:17:76:ef:6a:30:98:5c:
                    36:2b:da:64:0d:7b:60:0f:b3:2b:88:e0:d6:26:cd:
                    10:a3:74:50:19:87:1e:09:3b:6b:e0:1a:74:40:69:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:E7:20:10:1E:61:09:89:7F:8E:D4:79:AF:D1:3A:5E:48:14:B6
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/8AB9CB6855B211F1AB301B6C9D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.16.0/20
                  177.2.176.0/21
                  177.3.32.0/20
                  177.3.80.0/21
                  177.4.0.0/20
                  177.4.32.0/20
                  177.5.48.0-177.5.79.255
                  177.5.112.0/20
                  177.5.176.0/20
                  177.6.176.0/20
                  177.7.128.0/20
                  179.236.96.0/21
                  191.223.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:23:22:4b:56:c6:54:ee:df:bf:cd:87:89:6c:38:c8:de:
         6f:0a:dd:80:b7:8e:a2:32:aa:b6:e0:dc:6f:6b:10:a5:72:1f:
         b3:a5:ac:03:3c:19:31:0c:03:55:3e:54:44:c9:1d:b9:d6:ef:
         03:dc:6c:95:d2:68:e8:7e:6f:a7:66:25:97:27:68:bd:c7:8b:
         c7:8d:ba:35:99:f4:d3:0b:ea:df:95:7c:61:12:b2:47:31:18:
         32:d3:ac:02:79:4e:4e:1e:64:53:d9:1f:6f:2c:fd:8e:33:4c:
         2f:2a:d8:01:d1:db:02:b5:58:cd:5f:a8:1d:a4:ae:fd:98:83:
         9f:fa:39:80:de:63:7e:2c:97:ba:ef:af:b0:aa:bc:d1:8b:7a:
         47:b5:37:b0:04:b2:56:28:98:e6:1a:62:72:a3:ad:28:55:72:
         ea:ef:35:10:5f:01:f2:0c:fc:43:ff:b4:6e:23:87:a7:b3:2d:
         00:c1:00:7e:3b:14:9e:1a:f3:e6:be:64:91:70:35:39:a8:d3:
         b4:d3:eb:5d:a0:3f:77:8c:b2:bf:b0:f5:98:f1:0d:e2:6b:96:
         e2:77:48:93:2f:0e:d5:2d:bc:98:07:ee:0f:3b:d8:0b:9d:39:
         39:42:5b:a2:62:83:35:ab:b4:38:c2:80:2c:91:61:d3:2b:18:
         7e:4b:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:49 2026 by rpki-client