Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/177E82C884B211F0BC4C5E79C4F9AE02.roa
File:                     177E82C884B211F0BC4C5E79C4F9AE02.roa (raw, json)
Hash identifier:          FR6aYWkLCYQNBfnXMLQXknGesvRShyM8s823+eOxW1M=
Subject key identifier:   A8:E1:D0:D8:D0:D9:AA:D9:54:A1:69:51:82:50:11:6F:8F:13:68:08
Certificate issuer:       /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
Certificate serial:       36
Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/177E82C884B211F0BC4C5E79C4F9AE02.roa
Signing time:             Fri 29 Aug 2025 08:28:08 +0000
ROA not before:           Fri 29 Aug 2025 08:28:08 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     133182
IP address blocks:        2001:df4:c5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 08:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9
        Validity
            Not Before: Aug 29 08:28:08 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68b16498-26ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:85:a6:0e:ef:53:de:79:71:33:3a:18:5a:34:
                    d3:d2:02:79:ba:0c:ac:97:e5:6c:ee:66:4e:ef:b4:
                    5d:e2:02:99:29:67:3c:81:f1:0f:67:18:52:a2:77:
                    40:9c:c3:65:4a:b1:10:b3:ef:39:88:d7:df:bd:04:
                    de:33:a5:92:78:02:45:2a:e3:34:04:8a:bd:a8:05:
                    de:c0:23:d9:64:b6:8e:f3:3b:61:ce:2d:34:83:f2:
                    b1:50:dd:7e:98:d4:ca:27:c1:9c:73:e8:92:0e:ab:
                    12:e6:4f:8f:ed:bf:b3:ed:92:a6:58:2a:2b:68:aa:
                    97:56:8c:11:33:8e:d7:eb:e4:71:a6:1d:b2:77:7d:
                    51:bf:ce:7f:49:46:f5:a3:f7:22:d7:d7:f8:11:48:
                    ed:e6:db:d3:da:b0:eb:df:b5:0f:32:cd:d5:67:e6:
                    2a:82:83:f7:e2:f9:49:d2:55:a4:60:3c:42:63:6b:
                    e0:eb:e0:64:f8:d6:b7:f0:03:9b:10:15:44:d0:d5:
                    01:27:9c:bf:51:fc:e2:4b:60:cc:06:90:75:0e:ba:
                    f7:1d:fb:57:78:1e:db:52:b4:58:8a:a8:7c:15:7d:
                    3d:5d:4a:0d:90:ac:93:6d:5a:a7:58:57:36:bd:65:
                    1b:a2:a4:cf:9a:4a:d3:ec:a1:5f:1a:08:80:de:8f:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E1:D0:D8:D0:D9:AA:D9:54:A1:69:51:82:50:11:6F:8F:13:68:08
            X509v3 Authority Key Identifier:
                keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/177E82C884B211F0BC4C5E79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:c5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:a1:07:56:0e:cc:13:02:73:33:8b:48:54:4a:9c:79:26:e6:
         73:b8:d7:7a:da:d8:67:e0:fd:88:8d:ae:90:6e:a6:a5:57:34:
         6e:44:e8:e2:ab:15:f7:42:e0:03:c3:f4:09:41:12:69:20:f3:
         61:ca:8e:7a:ad:c4:db:ee:cb:b4:63:fa:e9:7f:5b:59:d9:a9:
         22:49:24:34:71:73:e7:bd:50:79:65:b1:27:2b:1a:b6:60:f7:
         5d:f9:69:14:24:7f:2b:08:f5:80:9e:d4:d6:f6:67:e9:cb:5a:
         9d:c3:08:0c:b7:84:8b:b4:20:dd:a9:3c:20:c4:71:64:bd:9d:
         26:62:4c:46:f6:ed:24:8d:42:4d:99:f6:03:d5:d2:ea:7c:d2:
         1d:0c:2e:9b:48:cf:7e:af:e4:61:30:05:97:98:3a:4c:07:46:
         1e:1d:50:ff:b3:02:e3:18:54:d0:8f:dc:84:77:78:3e:c8:bb:
         8e:c8:e6:35:c8:d7:7a:90:09:2c:bc:1d:56:4d:ca:17:c6:c4:
         68:56:2e:7d:c2:d5:52:c5:ac:75:0a:38:7c:3d:2f:e8:01:37:
         8d:c1:d9:a9:3e:6c:de:70:e5:e6:b7:63:35:2c:9a:2d:d0:aa:
         4b:c3:d9:78:f2:89:f8:db:72:fc:10:fd:be:9c:44:aa:a5:5e:
         44:6a:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:26:03 2025 by rpki-client