Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/75534C305C0711F1A597E21490833773.roa
File:                     75534C305C0711F1A597E21490833773.roa (raw, json)
Hash identifier:          RFKKlvZhy25qYZW79NlVmY7KEdDx+ghvxGALa02QZRE=
Subject key identifier:   79:C8:A1:06:1F:4B:40:FB:9C:82:4F:1D:31:27:38:A0:70:0D:F8:9B
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C39
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/75534C305C0711F1A597E21490833773.roa
Signing time:             Sat 30 May 2026 09:10:53 +0000
ROA not before:           Sat 30 May 2026 09:10:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     206560
IP address blocks:        45.115.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 18:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May 30 09:10:53 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6a1aa99d-d55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:2f:77:80:5a:f0:94:b4:ec:a6:73:ab:4d:
                    9a:dd:f7:a7:fb:20:7f:8c:bd:3a:ab:48:ba:13:02:
                    07:83:38:81:3a:f3:c1:3c:b5:30:7f:c2:59:de:4a:
                    cc:73:aa:30:21:9a:2c:90:63:0d:32:93:fd:38:88:
                    64:b6:1b:62:ad:7a:83:d9:c5:a7:94:ab:b5:fc:1c:
                    61:d5:dd:ad:30:75:e7:55:5b:71:02:ec:ab:c2:ea:
                    17:67:30:61:2c:86:63:31:90:89:ce:da:59:54:84:
                    4f:1f:7a:6b:82:f1:9a:35:be:c3:08:05:4f:34:5c:
                    a8:75:3d:d0:c5:83:99:f7:32:35:fb:18:f6:35:cc:
                    ed:a0:70:9c:b5:1a:57:cc:7e:7d:42:17:80:0d:78:
                    10:9c:4d:33:f6:fc:3c:3f:7d:21:80:6d:74:9d:42:
                    8b:a9:2f:c7:07:06:1f:7c:b9:29:65:e6:45:85:35:
                    9c:7f:b2:52:a1:7d:c5:41:ea:b0:5b:e7:62:ef:42:
                    70:7d:80:61:94:9d:99:48:c0:19:a7:e0:e2:dc:37:
                    59:95:d9:ee:24:8c:0a:a4:3c:36:f0:67:6e:ca:fd:
                    ed:b7:82:66:10:f5:e5:67:1b:05:57:b4:2b:a0:55:
                    3c:04:73:3c:72:77:d3:1e:02:98:3f:5f:ac:27:5f:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:A1:06:1F:4B:40:FB:9C:82:4F:1D:31:27:38:A0:70:0D:F8:9B
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/75534C305C0711F1A597E21490833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:98:2f:a1:50:e3:3b:4c:6a:26:34:60:16:69:80:da:3a:
         2a:08:02:00:93:94:81:97:d5:ea:57:f4:2a:4e:a4:5e:71:bf:
         10:db:f3:4c:fb:95:90:3a:db:d8:60:44:01:92:23:bf:e0:76:
         83:b0:5e:aa:54:02:d5:3d:d9:d7:76:96:71:a4:1b:79:0d:14:
         cd:f5:18:e1:73:b7:5d:73:88:09:fe:f5:b0:47:10:7b:00:66:
         77:e7:06:23:55:a2:76:21:53:d4:67:30:9c:65:e2:5a:50:3e:
         b9:b9:3d:13:b0:05:85:6b:14:63:74:6c:22:ec:80:cb:72:96:
         09:bc:05:cd:15:16:e1:49:2e:34:a7:87:ff:f0:bf:2b:73:df:
         1c:8d:19:65:48:02:4e:d5:94:d0:a3:72:fc:09:a1:be:be:b6:
         59:df:53:2a:8b:1c:97:1a:52:db:7b:fd:09:f6:27:46:9b:75:
         fb:89:01:84:fc:ed:20:2f:36:60:8a:8a:f6:d0:67:e2:e9:c4:
         62:3a:65:f0:0a:24:5d:98:e9:f7:81:e8:3e:ef:bb:e3:7f:f1:
         ca:08:cb:4b:26:9b:45:da:cf:69:d2:00:c7:f9:b1:b4:a6:b4:
         d9:cc:b9:aa:c0:cb:3e:bb:62:e6:c1:27:b5:21:4f:68:96:7d:
         f2:1f:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:43 2026 by rpki-client