Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A44195AC558A11F1ABEF45E790833773.roa
File:                     A44195AC558A11F1ABEF45E790833773.roa (raw, json)
Hash identifier:          10iITYE7o1tL5GsiufULjXzGG9OKl2raaeNm6xIuyVc=
Subject key identifier:   6A:91:C4:AE:6F:3F:CE:D9:6F:0F:F5:5F:22:0C:68:15:7A:5E:3F:9A
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       74
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A44195AC558A11F1ABEF45E790833773.roa
Signing time:             Fri 22 May 2026 03:05:52 +0000
ROA not before:           Fri 22 May 2026 03:05:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8796
IP address blocks:        177.2.16.0/20 maxlen: 24
                          177.2.176.0/21 maxlen: 24
                          177.3.32.0/20 maxlen: 24
                          177.3.80.0/21 maxlen: 24
                          177.5.48.0/20 maxlen: 24
                          177.7.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 22 03:05:52 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0fc810-4fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:03:fa:5c:cf:80:11:d3:09:34:a2:4a:48:6c:
                    60:ce:31:67:97:cc:1e:cd:13:51:1d:af:cb:71:db:
                    fb:52:54:7d:27:ca:aa:5a:2b:03:30:ff:c7:8c:57:
                    a9:d7:a1:49:6f:48:b2:ac:40:36:f6:93:39:1a:d2:
                    2a:74:e2:b3:46:73:bd:b2:3e:dd:a8:8a:5f:ba:42:
                    f1:eb:f1:11:c3:10:46:02:14:93:13:9e:77:d7:85:
                    07:d1:01:91:c4:11:5d:1d:99:24:1e:83:7d:7c:88:
                    36:a1:7b:c5:07:a4:1a:bd:ba:3c:ca:8e:74:42:74:
                    8d:8b:74:86:fd:81:6a:a6:90:29:ef:de:f7:63:f6:
                    5e:95:3d:f9:5a:5a:1a:a4:07:88:71:bd:08:e3:e9:
                    f9:66:0c:d9:bf:9c:0e:40:13:aa:4a:88:ee:e4:3c:
                    27:c3:45:ad:5d:64:c7:13:e8:8f:4e:3c:e5:ff:0e:
                    95:86:26:9b:1e:b3:65:39:80:fb:c4:1d:fb:24:a6:
                    4d:ff:e7:cb:50:79:4d:bf:7e:b0:4d:ed:f8:2f:e3:
                    7c:63:a2:77:e0:96:20:f1:ee:c2:02:21:12:c4:3b:
                    a8:46:58:8a:40:7e:10:bb:bc:f9:15:18:70:56:5b:
                    d4:1b:7f:b6:c8:18:98:84:f5:62:bb:55:cc:90:17:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:C4:AE:6F:3F:CE:D9:6F:0F:F5:5F:22:0C:68:15:7A:5E:3F:9A
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/A44195AC558A11F1ABEF45E790833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.16.0/20
                  177.2.176.0/21
                  177.3.32.0/20
                  177.3.80.0/21
                  177.5.48.0/20
                  177.7.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:01:5c:cc:79:69:b6:4b:ea:25:37:3c:b1:6c:eb:35:53:
         1a:48:56:7b:3a:ad:47:d1:24:06:2f:f0:5d:c0:f3:6d:13:fe:
         d5:37:14:32:2b:28:50:1c:26:13:e7:42:6a:e3:7f:7b:ec:a2:
         48:85:45:48:1b:cb:4a:25:7a:b9:b3:8f:83:14:34:d0:27:c0:
         ca:1c:8c:ac:fb:c4:95:c4:ae:3c:03:a2:31:40:38:78:e0:11:
         17:80:9a:24:83:2c:29:ec:4e:0d:54:ac:5c:c1:73:14:55:fd:
         48:a5:44:98:a0:48:2a:f3:ba:dc:e2:be:13:f3:2b:f0:8a:01:
         60:67:84:9d:cd:3e:44:6e:49:23:53:f1:0e:cd:78:f2:da:1b:
         1f:01:2e:0f:03:84:ff:9f:0b:b2:3c:48:6a:3d:02:37:53:da:
         e7:66:ff:a8:84:98:75:25:99:6b:76:45:e4:c5:af:3d:dd:c4:
         90:92:14:88:6f:cd:6b:2c:a0:d7:9c:4d:44:2f:d8:17:ab:1a:
         70:85:60:e0:3d:c0:f1:10:ae:e0:c3:e1:ac:f8:54:fb:2a:8a:
         5a:7b:72:56:9d:ff:a9:73:6c:29:87:65:c2:98:ff:52:63:83:
         eb:58:3b:d6:e2:59:09:5d:a0:2d:4e:27:3c:06:9d:1d:a3:85:
         f4:63:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:00 2026 by rpki-client