Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B987F59254E411F1A8787FAE9C833773.roa
File:                     B987F59254E411F1A8787FAE9C833773.roa (raw, json)
Hash identifier:          gvmEeTCPFjKCI17kJKuZFDvUtGT6zAORKlMeY/KtA00=
Subject key identifier:   E1:E4:29:CB:FC:61:06:3D:F2:18:CC:3D:A9:B5:E9:F2:2F:8E:68:8E
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       3B
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B987F59254E411F1A8787FAE9C833773.roa
Signing time:             Thu 21 May 2026 07:14:37 +0000
ROA not before:           Thu 21 May 2026 07:14:37 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137535
IP address blocks:        177.2.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 21 07:14:37 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0eb0dd-593c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:3d:0f:a9:65:38:a2:ed:40:9e:9a:53:e5:
                    6b:c5:f2:d7:67:7c:93:81:e1:63:1b:75:8e:72:47:
                    58:25:22:25:72:8a:6f:aa:c2:dc:a0:ca:7c:7f:27:
                    05:2b:9e:91:f8:c0:c8:6e:2d:9b:3d:1a:a8:9f:ad:
                    79:66:c6:38:c0:7c:68:c1:01:8d:fd:74:24:24:06:
                    4c:6b:28:e8:3f:7e:37:86:b9:5f:69:30:61:6b:1a:
                    51:de:dc:6a:e7:34:2e:e9:1b:a1:67:d9:04:33:ba:
                    8c:cb:a1:e0:3f:f3:50:5f:40:cd:29:3f:9b:37:a5:
                    b4:c6:fc:44:ec:b2:04:e1:98:15:8e:39:53:fe:6c:
                    9f:89:01:93:3c:e4:44:cf:7e:d3:ad:ab:03:26:1b:
                    56:bb:e7:2b:1d:41:df:f1:c9:fb:c0:3b:90:87:1a:
                    f8:80:4f:0e:9b:03:73:de:3a:9b:60:1f:7a:66:9d:
                    48:ee:26:17:87:f4:ff:40:64:8f:26:39:3d:2e:e2:
                    3b:a9:88:82:5e:26:11:43:c3:2a:df:a6:8c:fc:f6:
                    a7:30:35:35:b0:ce:f9:a4:8e:ad:df:dc:47:b2:0f:
                    a7:85:ad:e5:6f:92:08:8c:ae:7a:17:f4:d5:10:f6:
                    17:de:56:06:5e:39:d0:0e:9a:cb:0a:d0:62:cf:97:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:29:CB:FC:61:06:3D:F2:18:CC:3D:A9:B5:E9:F2:2F:8E:68:8E
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/B987F59254E411F1A8787FAE9C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:f5:b1:f8:3a:15:9b:24:27:db:63:7a:4a:94:9b:82:1c:
         51:ad:31:86:d2:6d:b2:93:51:82:1e:3b:33:7a:f9:c8:35:0d:
         41:00:87:47:41:de:f3:23:e1:c6:35:c8:aa:12:d2:66:5c:d8:
         a1:ca:c8:8f:ba:9d:8b:c1:88:ed:e0:45:d6:02:2e:c2:00:b8:
         3e:0a:73:2f:6d:ae:10:0d:4b:d8:53:3e:e4:41:72:82:c1:33:
         f7:aa:a2:a9:b9:90:8c:19:7d:a8:16:e7:c0:f0:1b:99:a6:18:
         4f:d8:80:0c:5c:0b:da:d3:5b:94:96:ab:8d:07:03:d9:09:ed:
         42:bc:5e:39:72:86:57:94:3c:38:1b:46:12:2c:a6:d9:c3:19:
         fe:03:ae:a0:8d:5b:17:52:2b:20:77:6d:f4:11:86:06:55:4f:
         ec:ba:7a:16:5e:84:6e:d8:69:4c:32:fb:f4:04:9d:f9:93:51:
         fa:b9:89:f6:ce:4a:dc:b6:c9:48:94:21:78:c8:c0:65:ff:3a:
         dd:4e:70:6a:78:05:87:39:71:99:7f:7f:6d:4e:f9:7f:05:38:
         7e:df:03:ab:8b:00:43:0b:85:74:40:10:d6:57:9f:e9:ae:f1:
         5b:e6:36:de:47:3a:c9:53:3e:27:8d:10:1b:64:76:52:f5:91:
         15:aa:04:a4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njc4QzExMC8GA1UEBRMoRUMzNjhENTgyRTExNzdFMDk5MTVFMzNGNDRFREI5REU0
RUYzMkM1MjAeFw0yNjA1MjEwNzE0MzdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMGViMGRkLTU5M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCKkD0PqWU4ou1AnppT5WvF8tdnfJOB4WMbdY5yR1glIiVyim+qwtygynx/JwUr
npH4wMhuLZs9GqifrXlmxjjAfGjBAY39dCQkBkxrKOg/fjeGuV9pMGFrGlHe3Grn
NC7pG6Fn2QQzuozLoeA/81BfQM0pP5s3pbTG/ETssgThmBWOOVP+bJ+JAZM85ETP
ftOtqwMmG1a75ysdQd/xyfvAO5CHGviATw6bA3PeOptgH3pmnUjuJheH9P9AZI8m
OT0u4jupiIJeJhFDwyrfpoz89qcwNTWwzvmkjq3f3EeyD6eFreVvkgiMrnoX9NUQ
9hfeVgZeOdAOmssK0GLPl+BzAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU4eQpy/xh
Bj3yGMw9qbXp8i+OaI4wHwYDVR0jBBgwFoAU7DaNWC4Rd+CZFeM/RO253k7zLFIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NzhDLzNCREUxRDZFNEYy
QzExRjFCQkUyRjZFQTlCRUU1MjhFLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxG
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvN0RhTldDNFJkLUNaRmVNX1JPMjUzazd6TEZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njc4Qy8zQkRFMUQ2RTRGMkMxMUYxQkJFMkY2RUE5QkVFNTI4RS9COTg3RjU5MjU0
RTQxMUYxQTg3ODdGQUU5QzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAOxAhgwDQYJKoZIhvcNAQELBQADggEBALdU9bH4OhWbJCfbY3pKlJuC
HFGtMYbSbbKTUYIeOzN6+cg1DUEAh0dB3vMj4cY1yKoS0mZc2KHKyI+6nYvBiO3g
RdYCLsIAuD4Kcy9trhANS9hTPuRBcoLBM/eqoqm5kIwZfagW58DwG5mmGE/YgAxc
C9rTW5SWq40HA9kJ7UK8XjlyhleUPDgbRhIsptnDGf4DrqCNWxdSKyB3bfQRhgZV
T+y6ehZehG7YaUwy+/QEnfmTUfq5ifbOSty2yUiUIXjIwGX/Ot1OcGp4BYc5cZl/
f21O+X8FOH7fA6uLAEMLhXRAENZXn+mu8VvmNt5HOslTPieNEBtkdlL1kRWqBKQ=
-----END CERTIFICATE-----
Generated at Thu May 21 12:52:55 2026 by rpki-client