Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2D7A0C2A08D811EF8DFDE781C4F9AE02.roa
File:                     2D7A0C2A08D811EF8DFDE781C4F9AE02.roa (raw, json)
Hash identifier:          cz4Ylmr4Kv9n4Y7QqxrwtG+najuucUzZTc2q4HUpfpg=
Subject key identifier:   97:D3:91:96:B1:63:4C:CF:CC:80:08:CA:EB:B8:47:E6:07:2D:23:72
Certificate issuer:       /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
Certificate serial:       01C3
Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2D7A0C2A08D811EF8DFDE781C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:25:06 +0000
ROA not before:           Fri 27 Feb 2026 03:22:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        167.179.24.0/24 maxlen: 24
                          204.145.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF
        Validity
            Not Before: Feb 27 03:22:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a61c52-b736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:3c:a8:32:3c:3b:5b:b2:4b:a2:ff:3e:ea:
                    f3:7f:c7:76:63:51:fc:48:29:1c:c2:f1:e7:f1:59:
                    1f:e1:4c:f9:3e:2d:5b:64:a0:06:70:08:05:c1:d5:
                    d2:9a:bc:37:29:a3:44:28:33:e3:56:54:25:d0:34:
                    3f:7c:35:b5:e8:e4:21:1c:70:31:d6:19:32:9c:4c:
                    8e:d1:95:0c:68:c5:33:a6:3a:76:46:39:4e:83:70:
                    e5:4b:09:c9:ca:8c:c4:36:dc:35:34:9b:11:ad:37:
                    4c:06:10:85:f3:ad:a8:b3:58:d8:38:f1:a8:76:2c:
                    8a:ba:b3:53:68:45:71:7c:5b:1a:24:ee:2d:24:91:
                    47:29:02:55:be:b1:5d:dd:96:9b:6b:32:67:2b:f7:
                    10:46:cc:25:28:60:4a:76:3f:59:7d:76:44:9d:19:
                    1a:66:46:16:49:e0:14:47:31:59:47:c5:33:23:b7:
                    cb:0e:c6:33:05:2a:ac:c4:57:00:06:58:f6:a2:95:
                    22:4d:07:59:8a:f9:ba:08:6a:28:31:40:1d:50:22:
                    35:8a:c2:7c:cd:71:29:56:3c:e7:3c:ba:cb:8b:70:
                    46:cf:d1:a6:5a:73:dc:2c:e9:79:fd:b2:a9:7b:90:
                    0f:25:4c:fb:ff:65:d9:3e:c4:d3:4c:44:a4:d0:b2:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D3:91:96:B1:63:4C:CF:CC:80:08:CA:EB:B8:47:E6:07:2D:23:72
            X509v3 Authority Key Identifier:
                keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2D7A0C2A08D811EF8DFDE781C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.24.0/24
                  204.145.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:26:e2:1a:27:ca:29:3b:b4:27:44:a7:89:fe:19:9b:a6:
         fd:35:66:f3:f4:b7:66:42:97:11:69:77:71:c8:f9:b1:4d:b9:
         e8:90:dc:52:b3:27:3a:32:7c:f3:be:2c:9d:47:69:d5:a8:71:
         3e:18:8c:19:11:6e:73:9f:0d:52:63:50:18:8d:a4:14:f1:83:
         ab:6d:0c:ea:35:47:9d:cc:aa:e3:d4:bd:9a:81:fe:af:21:cd:
         3a:63:68:81:69:8f:34:b5:e3:99:cf:5e:34:8e:cb:36:2a:56:
         5f:31:0e:fa:d1:5a:1d:56:69:b2:03:78:97:0d:fc:ed:1f:b2:
         ea:4f:02:91:63:3f:be:60:dc:41:8d:25:0b:8f:fa:d0:58:5b:
         a9:3e:d2:ef:51:fd:75:b1:5c:ea:aa:e5:71:3e:d8:1c:a2:fe:
         e3:d8:f2:48:86:29:69:1c:48:01:02:b7:c4:b2:bb:32:38:f2:
         46:53:4a:22:70:d1:d9:97:fd:34:7b:14:b3:ae:6d:fb:76:c1:
         d9:22:b8:4f:55:67:91:af:9e:67:a1:af:2e:2a:a5:92:1c:8e:
         d2:46:91:a2:c7:78:23:5c:36:93:2d:54:09:9a:da:68:a4:c6:
         0e:a1:ec:5e:d6:8e:aa:ad:95:25:9a:02:bb:91:6b:92:59:d9:
         50:2e:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:15 2026 by rpki-client