Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/FFF1E08E502E11F198DE5D87C9833773.roa
File:                     FFF1E08E502E11F198DE5D87C9833773.roa (raw, json)
Hash identifier:          epsRKPeN2DsUj5PvFuEX3GKPxB2TNVkVQCWsUlIKFIE=
Subject key identifier:   48:6F:4E:B6:95:A2:92:64:3A:BE:DD:72:86:B2:A6:1B:08:47:77:39
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       04
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/FFF1E08E502E11F198DE5D87C9833773.roa
Signing time:             Fri 15 May 2026 07:23:42 +0000
ROA not before:           Fri 15 May 2026 07:23:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154561
IP address blocks:        177.0.128.0/24 maxlen: 24
                          177.0.129.0/24 maxlen: 24
                          177.0.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 15 07:23:42 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a06c9fe-0efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:f0:cd:82:57:58:72:00:f2:df:2d:01:fb:
                    51:61:bf:63:69:cf:95:68:b1:34:09:3e:1c:23:ba:
                    20:44:3f:4d:77:97:92:4e:5f:b1:b4:c4:a3:62:8e:
                    bb:0f:21:4c:e0:d2:d9:27:87:48:ea:00:a9:86:b2:
                    e1:19:56:aa:e7:08:f5:69:a4:53:66:5f:6f:9f:13:
                    93:06:02:13:f1:87:b2:5d:0b:8a:65:77:71:a1:f1:
                    2c:9b:38:95:82:cd:da:d3:38:04:f3:d2:43:59:fa:
                    58:f8:c4:ef:86:00:62:66:f5:68:98:0b:ad:05:65:
                    18:af:1a:07:8f:97:ca:4a:6b:91:d0:83:45:3d:0d:
                    ab:9d:61:6a:07:29:2f:4e:87:9a:fb:df:e2:23:1f:
                    7d:05:a8:f6:46:1d:ab:da:b2:e5:72:da:0e:01:b0:
                    da:6d:ea:e9:06:61:93:f5:d9:ac:08:33:da:fe:bc:
                    95:62:26:57:a6:47:1d:1b:e0:fb:3b:9c:3c:d1:9e:
                    37:90:c3:9f:72:7e:27:40:2f:7b:04:e2:c8:5f:dd:
                    33:3d:4e:18:31:16:d6:a1:aa:d1:5e:1b:8e:0b:41:
                    a7:70:65:2e:a9:bb:39:d9:b0:6c:50:0a:5f:9c:58:
                    28:b6:3a:eb:23:a5:d7:84:13:07:b9:52:7a:ec:ab:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6F:4E:B6:95:A2:92:64:3A:BE:DD:72:86:B2:A6:1B:08:47:77:39
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/FFF1E08E502E11F198DE5D87C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.0.128.0-177.0.130.255

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:0a:b7:c3:a3:84:e1:f8:cb:c9:d4:4c:19:05:b7:9a:b0:
         db:5b:2d:c4:b9:ca:5f:46:c0:41:e6:c8:0e:13:d1:c6:31:81:
         58:25:28:be:d6:3c:ee:b4:3b:a0:f4:dc:a9:49:fd:1a:8c:e9:
         7b:4f:4b:c5:12:24:fa:ce:de:05:b6:51:f9:08:82:87:fe:a8:
         4c:38:b9:d9:6a:99:c5:33:47:82:02:f5:b2:92:46:ec:1e:b5:
         3a:8b:21:c3:13:60:1e:52:0d:d4:e2:d1:f1:2b:5f:29:fe:5f:
         34:21:4d:c2:64:b9:52:96:a6:bd:9c:90:08:0e:8f:a2:61:10:
         51:b2:a2:38:57:05:55:22:8b:35:d6:6c:68:66:28:d0:81:7b:
         77:5e:85:b6:1b:5b:38:3c:69:34:a7:8a:be:41:c7:bf:27:12:
         8d:c0:46:9c:73:5c:03:2e:0f:93:e7:c4:ff:0d:fc:d7:86:2b:
         54:31:54:1d:37:80:2a:45:0c:fa:02:6c:58:62:9d:60:c5:b2:
         29:3e:f7:ef:f6:58:a0:d3:ac:b1:57:1e:4d:6c:56:77:e1:2e:
         7f:35:36:85:88:a7:cb:23:80:96:a1:79:6c:40:2c:d9:70:81:
         1f:54:ed:c9:57:66:d2:db:46:4d:e4:7f:2b:13:13:0e:d0:ee:
         54:77:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:37:06 2026 by rpki-client