Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/34705B9E59E211F1AE176CAE90833773.roa
File:                     34705B9E59E211F1AE176CAE90833773.roa (raw, json)
Hash identifier:          Y4FSjq6NpDU11XP5lRGViEc77fMM4dZ5RI+rwrWvqxw=
Subject key identifier:   4F:63:B1:64:2E:C9:CE:0C:C0:83:18:BF:B3:FA:2F:85:BA:FC:C1:8E
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       96
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/34705B9E59E211F1AE176CAE90833773.roa
Signing time:             Wed 27 May 2026 15:39:10 +0000
ROA not before:           Wed 27 May 2026 15:39:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     65403
IP address blocks:        177.0.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: May 27 15:39:10 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a17101e-6b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:db:ac:5c:bc:a4:12:0b:91:29:21:55:9c:
                    7d:b2:d7:42:d1:c8:1c:57:0c:51:a1:de:00:10:50:
                    cb:cf:bd:80:3d:4e:4a:80:a1:77:85:0a:f2:73:db:
                    81:ec:a2:e8:d7:7d:cb:ff:45:9b:49:12:85:6f:87:
                    29:59:9f:b9:48:db:57:c2:db:71:f8:19:0e:74:b9:
                    11:92:1d:a7:8b:7d:8b:dc:60:55:66:43:3c:3e:f4:
                    7c:21:13:fd:05:3c:7b:aa:8d:69:9b:30:2b:f7:38:
                    28:d0:ca:3e:a8:00:00:5e:fe:41:b5:eb:6d:b5:1b:
                    be:f8:b3:7d:74:16:e1:16:37:ab:10:aa:dd:22:38:
                    38:74:0a:4a:c6:3c:87:ad:2f:ec:ab:68:4b:59:cf:
                    2d:8a:20:c6:d1:19:67:4b:b9:9d:3f:79:bc:e5:45:
                    b3:63:b4:04:50:42:df:0e:35:dd:06:f5:a8:73:30:
                    03:02:96:19:16:17:a7:c2:78:fe:be:df:de:b7:9b:
                    82:7f:15:d4:61:70:01:46:87:87:b6:90:f7:12:29:
                    f2:91:53:bc:21:80:5e:72:42:05:48:a9:4b:1a:ea:
                    de:71:58:fe:e7:db:06:26:9e:e3:7b:78:0e:63:af:
                    cb:15:95:54:7a:07:45:a1:f7:f0:df:83:32:8c:ba:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:B1:64:2E:C9:CE:0C:C0:83:18:BF:B3:FA:2F:85:BA:FC:C1:8E
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/34705B9E59E211F1AE176CAE90833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.0.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:92:20:d2:78:2a:6e:4f:83:eb:62:d9:0b:bd:27:b7:99:
         ad:62:7e:e0:04:a0:89:2c:c1:7f:7c:ca:8b:7f:17:11:76:26:
         66:0c:f8:b6:c8:be:a7:d5:6a:32:fd:66:ee:e2:be:2c:9e:f2:
         32:54:2f:f6:53:a3:70:a3:e9:6f:6c:f8:a7:25:8e:73:f7:0e:
         ee:de:37:79:8b:bd:de:a7:ee:3f:bd:1f:f2:09:50:21:c6:04:
         ad:e5:25:f2:ec:58:e9:99:ce:f5:d5:50:db:ae:8d:5d:b0:65:
         33:57:37:99:90:8a:ee:da:2a:67:81:95:ed:f6:93:f3:93:40:
         a3:4c:ae:80:04:51:23:9b:eb:0a:96:70:80:2e:17:8e:f9:6b:
         c7:18:c8:f1:2a:03:3a:a1:2e:46:5f:39:5e:1a:c8:e8:ef:36:
         ae:7f:03:34:d6:95:ab:87:da:ac:39:87:d0:c1:43:c8:34:8c:
         37:ca:ab:a5:dd:8b:11:2d:59:31:c7:11:81:1e:40:11:e5:66:
         36:bd:e5:d5:56:a3:5e:5a:64:4d:52:56:a8:2d:84:bc:31:80:
         72:0d:fe:61:b7:38:40:d0:79:71:a4:ef:6d:03:9d:26:de:55:
         8e:eb:c7:e9:2f:ac:7b:ce:a2:18:14:0a:23:38:19:4c:f6:e7:
         63:b7:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:42 2026 by rpki-client