Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/277CA19802CE11E6B167303FC4F9AE02.roa
File:                     277CA19802CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          ohZ0rNcC4o/lvqqhJ5dRQl2sFSNT+9W0ZljDeoeU/f8=
Subject key identifier:   0E:BE:1F:53:9D:E4:9E:62:74:28:11:7F:A9:74:35:41:BA:4C:08:11
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2617
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/277CA19802CE11E6B167303FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:52:43 +0000
ROA not before:           Mon 04 Aug 2025 16:24:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132595
IP address blocks:        203.177.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9751 (0x2617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Aug  4 16:24:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48afa-16a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:b0:11:89:1c:0d:99:7d:35:5f:77:54:71:
                    ea:61:13:2a:36:e5:b8:69:1d:bb:45:97:1d:02:51:
                    eb:70:7c:0f:dc:70:79:cd:79:6b:4b:2f:de:71:ec:
                    6e:0f:f9:3b:fc:56:06:3c:15:80:5f:1e:d4:3e:37:
                    cd:6d:24:e7:c9:a3:d1:e7:ba:c7:cc:16:d3:d0:4d:
                    f6:00:40:5b:0e:0c:c6:97:58:94:16:df:9b:8b:45:
                    db:da:d4:13:68:31:a1:6a:5f:dc:07:97:64:6f:a5:
                    61:45:54:4a:16:b5:ec:87:a1:44:39:a0:95:d2:02:
                    39:5c:01:84:1d:11:cf:38:be:1c:a8:c5:07:23:1d:
                    b5:86:4b:b7:bf:8d:b9:8d:2a:4e:7b:3f:f9:1a:fc:
                    2f:09:28:1d:14:47:89:a9:6b:96:69:7e:cc:9c:e4:
                    93:48:45:b5:ad:41:4d:ea:e6:5e:f8:16:28:46:09:
                    54:f8:5e:00:92:e9:12:54:50:59:0a:9c:1a:fe:67:
                    30:9c:25:98:7e:0d:a0:69:c7:ac:4e:d1:ab:c4:cf:
                    ef:22:e6:3e:60:b7:b1:e8:43:f1:08:21:aa:05:53:
                    2f:2f:bb:ea:52:fe:7a:a2:61:66:0f:2c:48:20:4c:
                    ea:bc:12:d0:5f:e3:09:0e:67:22:e1:5f:d5:b8:61:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:1F:53:9D:E4:9E:62:74:28:11:7F:A9:74:35:41:BA:4C:08:11
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/277CA19802CE11E6B167303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:97:27:df:52:7c:85:e4:13:62:97:43:86:49:42:32:9e:
         44:27:d3:1d:01:62:79:42:70:70:9f:b6:af:4a:f7:c1:8e:51:
         39:64:97:11:ba:ac:e5:54:c8:ff:41:21:0f:12:00:ef:1c:ef:
         5a:f1:bd:bf:de:24:27:5c:56:e1:b8:41:81:46:0b:a2:4d:3c:
         34:c6:78:2a:c9:da:37:56:7f:74:e5:29:53:e9:3f:a2:ba:7b:
         ad:d8:10:03:48:9b:e9:b6:e5:f8:01:c2:ae:4c:7d:a2:7e:37:
         b7:ce:c0:9f:10:90:b1:46:bc:98:ee:59:ff:38:34:18:1f:0b:
         de:7d:43:76:c2:bf:90:7f:86:bf:ab:59:a7:3f:29:7b:3b:6a:
         11:7a:eb:1f:29:85:2b:46:9b:eb:07:dd:cf:52:b3:90:72:9a:
         11:e3:1f:e8:3e:5c:80:7f:18:21:fc:30:3a:7a:1d:34:07:c2:
         36:75:dc:12:ee:87:c8:4f:fa:f3:ad:ad:fa:77:a5:31:d5:c8:
         8b:e0:f2:e4:18:d4:32:9f:6e:39:a8:18:2a:e1:c6:c3:8c:b9:
         48:2b:dd:26:fa:e2:b9:4f:2a:0e:1e:80:db:a3:4a:8a:2a:f2:
         77:8d:b9:80:3c:39:c9:e7:80:c1:03:88:ae:ac:ef:e9:ea:13:
         ba:e6:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:34:54 2026 by rpki-client