Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
File:                     B872988654D711F1992D5F9296833773.roa (raw, json)
Hash identifier:          1dQZ3Uh0Vs/l+sJ0i7cz4cY/N1Qr7eVkCq5ahm6LLg8=
Subject key identifier:   FF:F3:F3:09:A4:B1:5F:65:CA:49:F1:95:AF:F5:BD:0F:89:FC:05:AF
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       01B4
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa
Signing time:             Tue 13 Oct 2026 03:52:00 +0000
ROA not before:           Tue 13 Oct 2026 03:52:00 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     140042
IP address blocks:        177.0.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 03:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Oct 13 03:52:00 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acdaae0-57fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:6e:b7:8e:e8:f8:cf:0a:c5:ba:b2:d5:0f:
                    5b:f4:32:23:d3:e1:20:53:cf:60:c1:d8:99:f7:68:
                    02:0a:fb:cf:fd:97:d2:ce:df:aa:4c:20:18:15:f4:
                    46:6d:37:00:ba:5d:54:5c:38:ab:4c:b3:12:aa:59:
                    4e:3f:b2:05:2c:50:07:70:5a:1b:4a:bd:8f:e3:ad:
                    98:e3:84:2f:13:be:c4:64:03:c3:87:68:67:e5:32:
                    8c:93:60:a2:03:71:1c:b6:7f:88:4f:7e:5c:4a:d8:
                    cf:91:09:28:49:58:3f:aa:e7:79:9b:12:7d:2d:a5:
                    92:95:c5:52:c4:40:42:37:9c:7f:7e:82:7e:30:0e:
                    3a:ee:8e:34:55:f5:10:36:16:c4:04:52:3a:ca:e3:
                    df:26:25:57:2f:34:5b:8d:c1:68:86:8e:87:ab:f5:
                    3b:5d:9a:78:5f:18:81:03:01:88:59:3b:f3:cf:54:
                    9d:ef:1e:f0:02:a2:c6:0a:cc:2f:b1:c9:73:b2:b1:
                    1b:ca:37:6d:4e:f4:cd:ad:72:67:01:91:96:3c:d3:
                    37:74:09:12:0e:80:70:a6:32:53:c6:e9:cc:9f:2c:
                    3a:74:47:cb:b6:4a:5c:ad:ae:57:67:b5:94:38:1a:
                    6e:93:ed:11:14:64:2a:00:be:32:7e:2a:ad:93:b9:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F3:F3:09:A4:B1:5F:65:CA:49:F1:95:AF:F5:BD:0F:89:FC:05:AF
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B872988654D711F1992D5F9296833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.0.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:35:bd:a7:2d:da:e0:e5:c3:1c:ab:a6:85:2e:57:f7:a6:12:
         f0:67:75:cb:f6:f7:ce:1e:dd:52:7c:19:d9:98:0b:8c:a8:e4:
         16:94:ea:49:6e:f9:2a:1f:30:69:e2:99:42:5c:4a:75:31:8d:
         a0:5d:d4:46:12:d8:0c:c9:55:40:71:21:dc:7f:59:22:b5:fb:
         05:d2:86:3f:5b:36:01:9c:d2:33:9f:2d:8d:31:c8:8f:71:d3:
         35:d7:eb:21:1a:df:6f:b2:22:17:a3:53:9f:b4:44:48:a7:49:
         d3:0e:b5:3b:3f:00:0b:07:b1:17:c0:69:69:5b:b1:5a:6a:d9:
         6d:9b:18:53:d0:46:3b:71:33:e9:09:13:f6:91:16:9e:a3:cd:
         77:f8:fb:ec:2d:95:7c:32:6c:23:dc:7d:79:bf:1f:27:4b:d9:
         47:c9:a3:e8:fb:6b:4c:7f:44:65:bc:1f:d9:7d:4a:7a:b8:3a:
         a0:dc:8e:07:c1:60:71:2f:08:a8:a7:5e:0c:7b:34:bc:f5:a3:
         36:69:b2:7b:db:a8:bc:b6:69:4d:ea:98:85:37:32:f0:c0:0d:
         f5:be:c2:33:61:68:eb:df:99:6c:4d:0c:b2:da:d7:83:ac:65:
         88:5f:ff:8f:b5:3b:89:5d:10:a9:25:16:00:7b:46:76:28:41:
         c8:59:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:59 2026 by rpki-client