Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2AA1812202CE11E6B167303FC4F9AE02.roa
File:                     2AA1812202CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          nS79IZuDBhOC2SAUskf7oOdinYh07KUuC40Jb1wjqTM=
Subject key identifier:   8A:84:AF:E1:30:79:95:4B:84:57:18:74:74:1B:97:3D:8A:D1:C0:48
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26A8
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2AA1812202CE11E6B167303FC4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:16:58 +0000
ROA not before:           Mon 20 Jul 2026 16:16:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24179
IP address blocks:        203.177.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9896 (0x26a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:16:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e49f9-de96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:17:23:80:b4:17:de:e9:6a:ae:fd:dd:a7:
                    1f:08:2e:b1:2a:42:db:46:cf:fc:cf:4e:d6:b0:9b:
                    e7:25:50:04:47:5e:e2:d1:c3:34:b7:74:47:e3:29:
                    ea:82:be:55:21:40:08:5c:9a:41:13:94:be:b7:8f:
                    9f:7d:cc:d2:b3:37:03:88:c6:89:56:c5:7a:aa:09:
                    be:73:29:6d:6f:3a:71:f1:a9:c8:0d:99:f2:04:04:
                    60:29:78:25:73:89:06:14:c0:fc:6d:fa:e8:a0:8d:
                    ab:c4:7e:6f:d7:8e:68:e7:82:1c:61:2c:91:71:8e:
                    7b:9e:5d:e9:f0:56:68:38:e1:d7:3d:48:01:57:b0:
                    5b:b3:1a:02:17:31:c2:f6:0b:e9:04:dd:41:a4:47:
                    d7:92:0b:d0:3e:f7:3a:a4:98:13:77:fb:d5:1d:dc:
                    b9:b1:d0:d4:c6:7c:50:b6:65:8c:78:01:ad:56:72:
                    ff:95:33:9d:4c:15:35:ff:7a:72:fc:94:2d:53:fb:
                    85:78:87:0b:07:cf:0b:66:e3:5d:2e:2e:6a:7b:51:
                    6c:a4:a0:cc:85:97:06:fe:d4:af:62:34:df:43:7e:
                    01:36:66:f3:74:36:54:12:5b:37:6d:25:5b:f7:7f:
                    53:98:dc:b0:66:06:d2:5d:16:e0:22:33:58:a8:dc:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:84:AF:E1:30:79:95:4B:84:57:18:74:74:1B:97:3D:8A:D1:C0:48
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2AA1812202CE11E6B167303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:02:38:a0:a0:df:e3:c9:0e:bd:e5:74:b3:f4:f2:d4:c9:35:
         da:b6:d7:af:eb:43:45:da:bc:02:da:a8:04:3d:22:34:30:88:
         cd:53:c3:59:7c:36:d8:43:a1:c2:01:68:c6:d7:38:86:97:ec:
         2a:f6:7c:78:10:85:c5:78:95:cd:34:cd:98:94:3f:1a:4f:00:
         4c:35:53:74:20:f3:94:d2:06:15:c2:fe:c9:00:e3:d6:66:1f:
         db:54:f8:28:10:a6:1e:f6:48:f9:89:3a:51:38:59:6e:a4:98:
         13:c5:86:95:08:fd:30:be:05:f1:db:6b:54:5e:dd:09:ea:33:
         10:7c:89:de:9b:ee:15:fb:29:c7:00:b5:68:d5:bc:19:09:18:
         cf:ad:f6:ad:16:6d:25:f5:11:80:dd:f6:aa:f3:58:58:a4:88:
         25:e5:e1:e5:21:e0:b4:2d:4e:0b:51:56:ec:7a:8d:cc:e8:9c:
         86:93:62:a6:b0:21:f7:b8:e8:84:93:f5:77:af:46:4b:18:fa:
         78:49:79:aa:27:91:b8:14:f0:5d:7c:37:91:b9:96:d3:74:09:
         92:a6:2a:36:3c:b2:39:bc:51:d7:ff:c1:93:a7:d2:7b:82:f2:
         f2:19:78:c2:c3:54:91:40:90:3b:36:11:39:0d:8d:ff:f5:2e:
         6b:f1:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:05 2026 by rpki-client