Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/98CC300CAC1911F1A1742B943311F970.roa
File:                     98CC300CAC1911F1A1742B943311F970.roa (raw, json)
Hash identifier:          z7lRynpgGucAwEiOBLOuzKRJrnXkZ29Vadeizu7jo+I=
Subject key identifier:   2C:A2:BC:B6:3B:86:BC:14:FC:3A:DB:97:DC:60:87:EF:96:FA:54:2E
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C7A
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/98CC300CAC1911F1A1742B943311F970.roa
Signing time:             Wed 09 Sep 2026 06:42:16 +0000
ROA not before:           Wed 09 Sep 2026 06:42:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     208185
IP address blocks:        45.115.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3194 (0xc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Sep  9 06:42:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6aa0ffc8-0f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:a1:4b:98:09:ba:c2:36:6c:8e:c5:b6:10:
                    af:99:9a:d3:cd:55:b1:8c:0e:41:24:14:9e:8d:ce:
                    3e:09:26:51:77:24:5f:de:bf:6b:6c:14:58:98:f0:
                    ae:23:67:73:27:3e:ed:9d:fe:fb:b4:73:3e:f9:60:
                    8d:d8:76:69:f4:7c:ba:97:6d:7a:54:6e:12:53:32:
                    c8:d2:30:1d:f8:4a:59:c4:ac:75:7b:f2:63:6a:f0:
                    78:9e:09:85:9b:5d:7d:20:e9:be:ec:1d:65:db:e9:
                    1f:03:ea:15:2c:f0:05:b4:b7:80:11:52:dc:f1:5b:
                    e9:93:66:1f:1d:a3:07:27:7e:9e:56:ac:f7:da:d4:
                    7b:40:b8:23:fb:c6:3a:9e:e5:49:3b:2c:f1:bd:37:
                    66:52:63:53:0e:11:03:de:59:9a:bf:8a:89:d9:93:
                    81:f3:42:0c:b8:1d:99:67:61:8b:c0:e9:a9:4f:d0:
                    62:22:ad:a5:74:e7:e4:c2:14:d9:14:d7:72:49:16:
                    4b:7d:b0:91:33:e1:2d:7a:18:3b:f6:14:84:cd:44:
                    5e:d1:0f:09:b7:b0:40:a4:ef:b7:0d:98:72:e0:ff:
                    41:39:af:af:7b:0a:d0:e2:9f:26:c2:6f:22:45:a0:
                    7a:eb:87:fb:97:3b:f7:f3:dd:b3:e2:9c:87:b9:df:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A2:BC:B6:3B:86:BC:14:FC:3A:DB:97:DC:60:87:EF:96:FA:54:2E
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/98CC300CAC1911F1A1742B943311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:4e:c9:46:9b:cb:17:bf:34:3a:f9:24:cf:12:f4:68:22:
         02:42:c3:c9:c9:81:93:e3:ab:93:17:76:52:8d:cc:59:2f:d3:
         37:fe:43:17:5e:ab:15:86:13:b0:02:71:47:b7:ad:c7:8b:eb:
         19:a7:79:37:97:68:48:c0:6b:1d:42:f9:20:55:68:55:1b:0a:
         63:5f:25:b8:12:b0:f7:e4:b8:68:f6:8b:92:bb:70:fb:8c:fc:
         17:37:87:e6:33:c2:70:dd:16:61:0e:2d:86:83:a1:b3:b1:22:
         c4:af:43:5d:b1:fe:04:86:31:0b:c0:d5:9f:84:b1:9d:82:aa:
         0d:ff:61:3d:9d:8e:05:88:21:d7:09:3d:12:7d:d8:be:18:f4:
         f8:9a:ce:38:67:60:7d:03:02:99:8f:88:0a:38:39:8a:d9:0c:
         23:3d:55:17:9d:ad:0f:7d:2d:3a:52:42:a5:bd:0c:96:f0:b3:
         fa:f4:17:8c:ab:dc:d8:ce:f5:50:df:f6:68:cf:1a:75:05:a4:
         be:de:76:ce:a8:b2:e3:14:fe:2c:ae:65:54:15:6c:e1:47:d5:
         00:ef:f7:68:db:98:99:39:19:62:b9:f9:d4:1f:5d:37:b2:38:
         a1:59:3d:0a:74:38:73:d9:a8:69:8f:7a:0d:b0:a1:a9:36:12:
         97:f2:47:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:19 2026 by rpki-client