Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/E4B8817A55BE11F19755025CA4833773.roa
File:                     E4B8817A55BE11F19755025CA4833773.roa (raw, json)
Hash identifier:          uq6P1LBJefJ7lhndlJS9zMmJuBYYAwLLd1ShSL1M7tQ=
Subject key identifier:   20:F7:49:F8:AD:AD:9C:4F:BA:3E:2C:BE:29:F0:54:DE:CA:DA:25:B1
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       BD
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/E4B8817A55BE11F19755025CA4833773.roa
Signing time:             Tue 16 Jun 2026 04:29:55 +0000
ROA not before:           Tue 16 Jun 2026 04:29:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137535
IP address blocks:        177.2.184.0/21 maxlen: 24
                          177.3.88.0/21 maxlen: 24
                          177.4.0.0/20 maxlen: 24
                          177.5.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 23:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Jun 16 04:29:55 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a30d143-a52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:20:07:f9:1e:b2:ca:90:bb:34:a7:02:ca:
                    ae:38:36:ba:bb:39:cf:4c:7a:8c:7f:12:6c:d5:f3:
                    e5:b9:f0:79:9e:04:57:b9:d2:51:d3:09:76:de:9d:
                    1b:79:1e:74:40:a8:11:24:f1:cc:fa:8c:a9:d1:7e:
                    91:0d:9b:02:56:56:a8:0e:44:75:6d:ed:9b:63:18:
                    4d:d8:33:8f:9f:69:2b:80:d7:55:64:8d:d2:e0:34:
                    d0:48:8c:bf:f2:94:69:a8:f6:f1:4c:9c:b9:ad:20:
                    90:fc:6b:d6:f3:bf:4a:fc:a0:b3:60:c5:88:ee:54:
                    01:00:70:d3:c1:6d:ed:89:9c:88:e3:99:4b:1f:44:
                    2f:c2:76:6f:eb:de:47:74:94:6c:dc:27:7d:51:dd:
                    81:97:b2:82:2d:48:75:8b:d0:e3:3c:a8:26:9f:53:
                    64:d5:1b:93:0a:af:65:f3:27:ef:de:84:de:46:85:
                    9e:16:08:99:fb:2a:94:7b:57:a1:7c:ec:10:60:40:
                    d2:46:e5:3e:d0:1a:96:7d:62:6c:c3:df:2c:4f:52:
                    47:0a:44:9b:77:e9:8c:c6:57:2d:01:e6:74:1b:be:
                    f6:f5:69:b5:51:a3:44:f2:6a:e8:68:32:a6:db:55:
                    52:af:b4:63:e0:45:fa:95:db:99:4b:e4:16:77:41:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F7:49:F8:AD:AD:9C:4F:BA:3E:2C:BE:29:F0:54:DE:CA:DA:25:B1
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/E4B8817A55BE11F19755025CA4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.2.184.0/21
                  177.3.88.0/21
                  177.4.0.0/20
                  177.5.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:fb:d1:2d:10:15:1b:1c:02:73:ce:08:14:b1:a8:fa:c7:
         55:f3:e4:80:39:88:f7:37:4d:5f:47:c5:c1:ca:1e:fd:7f:98:
         1e:a6:9f:73:3a:0d:fa:46:42:22:07:be:0d:04:9f:ba:cf:73:
         b1:53:5e:59:9d:39:4e:51:cf:90:37:96:94:ff:b3:02:53:4e:
         98:39:3c:c4:09:27:f5:85:73:72:74:02:dc:0c:76:ef:da:88:
         b1:0e:69:0c:0c:8d:c9:72:19:6a:fe:92:a8:ae:34:7e:8d:35:
         52:6b:c8:e4:83:d5:40:51:2b:db:97:37:17:c8:6d:cc:26:fa:
         f5:42:b6:6f:cd:a4:be:c8:46:bd:33:2e:8b:70:b3:f0:50:64:
         6e:d0:74:67:e6:52:09:89:4a:82:19:82:30:cd:cf:c6:0d:ef:
         c3:06:e0:fb:08:97:9c:0d:db:06:76:38:f6:de:f6:c7:bb:35:
         3b:ce:6e:27:b6:49:ce:e6:45:92:08:5f:04:11:d1:cc:53:b3:
         ae:60:ff:b5:69:e2:7a:4a:a2:dd:93:b8:c4:46:91:c6:d9:8f:
         76:9e:23:16:69:2d:3a:73:a6:ff:4b:0c:c4:b8:f1:32:8f:9d:
         14:b6:ea:ab:f4:0e:99:b1:b5:1a:20:45:b1:b0:49:a6:67:fc:
         04:18:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:55:55 2026 by rpki-client