Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/F7E17D64188911F19EAE4D133C3D8C67.roa
File:                     F7E17D64188911F19EAE4D133C3D8C67.roa (raw, json)
Hash identifier:          1WfZBNb22aKiZTNlA93yMn4A+pWq9UPoX3zV087CDjU=
Subject key identifier:   50:0A:43:F7:75:70:B7:B1:26:B8:63:10:76:59:7B:01:28:8F:B7:AA
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C00
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/F7E17D64188911F19EAE4D133C3D8C67.roa
Signing time:             Thu 05 Mar 2026 11:54:14 +0000
ROA not before:           Thu 05 Mar 2026 11:54:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     208185
IP address blocks:        45.115.26.0/24 maxlen: 24
                          45.115.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 18:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3072 (0xc00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Mar  5 11:54:14 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a96ee6-1f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:14:e8:e3:07:ba:61:38:08:dd:ec:16:ed:
                    e9:23:1e:65:44:9b:1e:80:fe:e5:7d:21:19:d4:dd:
                    ab:45:a4:07:b4:cb:fe:48:e2:01:18:fc:9e:c7:bf:
                    d7:94:c9:b1:fe:c8:87:7f:0c:30:cb:8f:8e:5f:8e:
                    1a:88:3c:2d:20:8b:4b:2d:67:5e:12:46:76:a7:2b:
                    e7:e6:5e:2f:ed:1f:f1:89:ff:a7:58:90:f5:73:0a:
                    d7:1d:5c:69:45:d5:81:21:67:20:ba:15:bc:dd:14:
                    1d:0f:5b:d0:47:11:e3:3c:d6:f4:7d:7a:27:0b:b0:
                    62:b5:d4:44:8d:8c:83:ff:87:90:d7:b4:af:03:cb:
                    29:35:d5:eb:b8:71:48:63:a9:18:28:db:b1:0d:1e:
                    f6:a2:8b:5f:11:86:f9:00:25:7e:e1:40:0f:d6:4a:
                    8c:44:7d:a0:5c:58:95:8a:80:5b:d0:16:33:4b:2f:
                    9f:80:c1:95:3a:04:d9:bb:c2:6b:ee:1e:f3:ca:9f:
                    94:d5:85:64:93:9d:52:5f:9c:3d:9f:96:db:37:9d:
                    72:97:ab:a2:f3:a7:56:cf:cb:02:f1:e7:84:bb:79:
                    0f:3a:ea:59:b2:c1:6e:97:f4:52:2c:a7:eb:d9:7c:
                    b0:fe:79:69:f8:d9:5a:72:b5:72:9a:c8:a2:ad:19:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:43:F7:75:70:B7:B1:26:B8:63:10:76:59:7B:01:28:8F:B7:AA
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/F7E17D64188911F19EAE4D133C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:07:26:fb:68:2d:bd:ae:6b:9f:93:3a:93:50:25:22:11:3e:
         50:b7:0e:17:6c:77:b5:fa:45:d7:4f:e4:77:c3:6a:4c:de:e0:
         ea:e0:4c:3d:97:d4:9f:58:c3:55:e1:85:33:42:73:d6:81:e4:
         f1:99:9b:3b:36:72:a2:92:b5:6a:e9:c6:c4:b2:43:b6:61:f3:
         a5:eb:97:79:7d:42:7f:42:16:e4:22:94:38:a9:f7:41:2b:b7:
         82:51:33:d8:55:55:29:c9:67:68:61:89:95:28:26:3f:50:b5:
         a1:dc:da:a8:a6:0e:8b:fe:3f:8d:a7:34:35:8b:00:83:0c:00:
         47:89:5c:b1:b7:af:c2:d9:3f:64:92:8e:65:23:a9:d7:c7:f7:
         ff:40:60:01:b0:de:92:fa:79:44:98:cd:26:ae:16:32:86:e2:
         98:8d:bb:62:93:87:65:fa:66:fa:88:e5:f5:c8:f2:2e:41:b3:
         4c:51:c0:f8:82:02:b5:18:cc:7f:64:81:b3:c2:74:3a:14:f5:
         67:91:09:b6:2e:2e:8d:43:21:ff:ca:da:4b:55:98:92:0a:09:
         c8:ab:49:dd:85:15:7b:86:64:f8:35:f5:72:8d:fc:bd:96:33:
         59:14:59:84:52:a1:22:7d:7c:ac:a3:10:0a:60:81:87:d2:e3:
         45:c7:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:17:08 2026 by rpki-client