Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/54CD674C002811F182264655466F56BC.roa
File:                     54CD674C002811F182264655466F56BC.roa (raw, json)
Hash identifier:          PUHb1N3AQwJXm5l4rZHWUpXN6PVND28xPxE0pZazDKA=
Subject key identifier:   27:A5:5F:FC:80:98:64:82:5F:EA:CB:A9:0E:58:2E:D2:40:B7:7C:AB
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0BDA
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/54CD674C002811F182264655466F56BC.roa
Signing time:             Mon 02 Feb 2026 11:14:25 +0000
ROA not before:           Mon 02 Feb 2026 11:14:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55154
IP address blocks:        45.115.24.0/24 maxlen: 24
                          45.115.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 18:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Feb  2 11:14:25 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69808710-2df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:3e:cb:ad:a3:4c:35:bf:15:f5:86:2a:d5:
                    1e:ab:91:3c:3f:a8:b8:6c:98:b4:3b:9b:dc:db:45:
                    56:f0:ae:b8:e7:31:84:77:f3:bb:b1:09:2c:eb:31:
                    57:0d:ce:69:82:30:6f:c6:e8:3e:dc:3e:e7:f5:fd:
                    ad:37:d1:04:6c:e6:b3:7d:56:e7:f6:3d:08:61:53:
                    61:11:e9:af:cd:a8:2f:ad:03:c4:69:03:f9:d9:21:
                    08:7f:8b:7d:cc:a8:17:d1:ac:a8:be:bc:c2:e0:46:
                    7e:a6:1e:e7:46:cb:dc:c5:e8:2d:bf:12:39:67:00:
                    d1:35:f7:64:2a:e4:3e:74:6f:c8:c0:e4:3d:ab:19:
                    31:57:ca:91:19:30:72:f4:5f:5c:d6:7f:7e:8c:b3:
                    1a:50:c9:62:07:d2:e8:87:78:9b:6a:47:61:c6:6f:
                    3c:c9:70:7c:0f:ad:55:be:39:a3:3e:4d:4e:ae:0b:
                    97:cd:f6:9f:73:a4:fb:07:1f:ba:9e:bb:02:71:af:
                    88:77:b5:13:f1:44:f0:54:fa:69:31:a2:5b:c1:ca:
                    5a:3a:ff:be:96:65:5a:b4:5c:56:14:ac:09:79:c2:
                    40:ad:da:bd:c9:6f:9a:6d:e9:86:1f:91:4e:a4:55:
                    6b:ec:1b:4c:b7:9f:60:2c:fa:bf:8b:ad:0f:7d:6c:
                    a7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A5:5F:FC:80:98:64:82:5F:EA:CB:A9:0E:58:2E:D2:40:B7:7C:AB
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/54CD674C002811F182264655466F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/24
                  45.115.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:30:39:e1:ec:81:07:ac:8c:e8:07:d3:29:f5:e6:f3:f1:78:
         e9:c8:df:47:ee:db:95:24:e5:92:83:fa:17:88:32:7e:22:d9:
         f5:4e:ad:b4:cb:ab:f0:5b:12:52:df:32:a9:f6:d3:96:ea:74:
         81:99:f1:49:7a:c8:c0:39:65:2b:96:c3:1b:2d:1d:f9:67:67:
         cd:31:95:71:9e:c1:6f:90:29:05:e7:4b:57:79:61:f1:29:47:
         22:76:95:11:8a:a5:4e:c8:4b:19:a5:ba:55:ed:c8:f6:43:86:
         22:5b:14:d7:c4:ac:d7:b3:7c:57:73:52:30:9f:c0:31:de:ec:
         25:0e:21:c1:5a:f9:55:b9:99:07:c0:fa:29:a7:be:3d:84:a9:
         12:8d:03:f0:84:ac:6a:10:45:63:e7:92:0b:a9:c5:ec:af:aa:
         ac:a0:59:b0:58:96:a5:b6:2b:68:ba:4b:f8:7c:af:c2:63:ab:
         94:0c:0c:35:d5:20:0e:13:b1:58:86:76:73:c6:85:a8:a5:46:
         90:53:40:82:b6:73:1c:c9:41:ec:c3:40:64:1e:af:62:3a:c4:
         44:6d:25:a9:e2:7a:31:8b:5f:9f:5f:58:2a:1a:a6:3e:34:63:
         38:e3:1b:d0:94:5a:d4:90:f4:37:62:54:86:fa:cf:bc:72:f8:
         e0:4d:47:01
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICC9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjYwMjAyMTExNDI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgwODcxMC0yZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPs+y62jTDW/FfWGKtUeq5E8P6i4bJi0O5vc20VW8K645zGEd/O7sQks6zFX
Dc5pgjBvxug+3D7n9f2tN9EEbOazfVbn9j0IYVNhEemvzagvrQPEaQP52SEIf4t9
zKgX0ayovrzC4EZ+ph7nRsvcxegtvxI5ZwDRNfdkKuQ+dG/IwOQ9qxkxV8qRGTBy
9F9c1n9+jLMaUMliB9Loh3ibakdhxm88yXB8D61VvjmjPk1OrguXzfafc6T7Bx+6
nrsCca+Id7UT8UTwVPppMaJbwcpaOv++lmVatFxWFKwJecJArdq9yW+abemGH5FO
pFVr7BtMt59gLPq/i60PfWynFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCelX/yA
mGSCX+rLqQ5YLtJAt3yrMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhCMkIvQkZERDIyMkUzQzQ0MTFFQUFFRTZGNzBBQzRGOUFFMDIvNTRDRDY3NEMw
MDI4MTFGMTgyMjY0NjU1NDY2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAtcxgDBAAtcxswDQYJKoZIhvcNAQELBQADggEBABUwOeHs
gQesjOgH0yn15vPxeOnI30fu25Uk5ZKD+heIMn4i2fVOrbTLq/BbElLfMqn205bq
dIGZ8Ul6yMA5ZSuWwxstHflnZ80xlXGewW+QKQXnS1d5YfEpRyJ2lRGKpU7ISxml
ulXtyPZDhiJbFNfErNezfFdzUjCfwDHe7CUOIcFa+VW5mQfA+imnvj2EqRKNA/CE
rGoQRWPnkgupxeyvqqygWbBYlqW2K2i6S/h8r8Jjq5QMDDXVIA4TsViGdnPGhail
RpBTQIK2cxzJQezDQGQer2I6xERtJaniejGLX59fWCoapj40YzjjG9CUWtSQ9Ddi
VIb6z7xy+OBNRwE=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:18 2026 by rpki-client