Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3218652829E811F18CA8F3909F833773.roa
File:                     3218652829E811F18CA8F3909F833773.roa (raw, json)
Hash identifier:          nORgV5f8vbq/wvRFwsRo4Kfy6G6vV8hYtZS1XQwh+EI=
Subject key identifier:   7C:B8:E3:F7:C6:1B:53:9F:A7:D2:E7:8F:C4:17:7B:95:03:9D:E8:27
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       30
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3218652829E811F18CA8F3909F833773.roa
Signing time:             Fri 27 Mar 2026 14:21:07 +0000
ROA not before:           Fri 27 Mar 2026 14:21:07 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     42475
IP address blocks:        205.177.67.0/24 maxlen: 24
                          205.177.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 14:21:07 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c69253-2781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a9:af:5c:9a:3b:c7:e5:dc:d8:84:35:35:ba:
                    44:e9:95:09:5c:01:0d:a2:7a:44:72:95:99:04:80:
                    d8:5f:c0:69:3b:50:d7:ee:89:54:24:6f:68:ad:9d:
                    e5:42:39:c6:64:3c:9b:51:cc:4f:94:92:d2:14:c1:
                    6d:47:c6:b7:f2:6a:40:80:9c:4e:fd:5e:d7:9a:94:
                    6c:6b:cf:66:ed:68:25:54:9e:8f:0e:98:7b:1b:3d:
                    21:22:3d:1c:48:08:95:b3:0d:8a:f7:33:e4:61:22:
                    da:5e:0c:49:1c:9a:98:d3:b8:fb:f1:df:99:04:96:
                    bc:3e:e8:f6:30:9a:9c:c6:9b:8d:b2:23:9b:ee:17:
                    01:45:91:37:8c:ac:98:f8:a2:44:16:f2:e8:57:eb:
                    60:b2:e0:11:5f:78:77:87:b5:75:6c:e9:f5:0a:8f:
                    cd:d4:9e:20:99:d5:f5:18:e7:f4:5f:d8:88:46:64:
                    12:96:ea:31:12:dd:91:1d:f1:01:00:09:a9:3f:bc:
                    c2:3f:1c:15:eb:c0:5a:99:df:49:74:7e:e8:09:81:
                    cc:cb:fd:99:9b:6d:5a:d8:54:ef:e0:96:d3:19:51:
                    46:26:40:9e:2e:0a:99:c1:fe:62:e2:d1:9f:b8:06:
                    95:b0:26:b1:97:a2:19:c6:9b:c8:38:0f:aa:4a:2e:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:E3:F7:C6:1B:53:9F:A7:D2:E7:8F:C4:17:7B:95:03:9D:E8:27
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/3218652829E811F18CA8F3909F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.67.0-205.177.68.255

    Signature Algorithm: sha256WithRSAEncryption
         96:da:85:d1:b1:af:2c:b5:50:50:61:ff:bc:b5:ee:07:af:ee:
         34:da:fb:c4:40:9d:f3:08:d1:f4:51:4e:89:77:ad:cb:48:08:
         bc:1f:ec:92:f2:22:ae:0e:cd:f2:d9:b6:99:c1:71:89:ca:ba:
         49:39:77:96:bc:7d:ab:96:4e:22:fb:1f:3c:f6:86:05:7d:95:
         12:b0:f3:d5:50:75:32:40:46:39:60:53:e9:3e:e2:98:29:3a:
         37:49:a1:72:ef:00:b8:ff:12:70:4a:51:f3:9b:2b:90:5d:4b:
         74:6d:89:3a:ca:12:e6:a0:e7:94:fe:e5:56:50:64:e8:d6:07:
         ec:98:62:6b:ed:b7:d2:81:82:bb:a8:85:d6:e0:8a:74:a5:7d:
         36:b2:67:d1:45:4f:e5:7e:c1:5a:2e:cb:8a:2f:23:f9:1c:a9:
         57:3b:ce:b4:98:ca:05:7f:ab:02:76:2e:d2:95:2b:9b:bd:ca:
         dc:ab:07:f9:93:17:75:46:ef:12:f1:83:9b:c6:96:44:c6:ef:
         64:79:8b:08:5a:e0:d1:9b:7d:6d:16:7f:8f:86:a5:d5:43:46:
         25:e5:8d:9c:a0:b3:16:3d:69:39:62:28:15:47:fe:6b:2b:0d:
         69:aa:fa:0b:e7:e5:27:03:ab:f5:30:3b:5d:5a:b8:64:97:9d:
         7d:c2:54:34
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky
OTFFNjgzQTAeFw0yNjAzMjcxNDIxMDdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzY5MjUzLTI3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeqa9cmjvH5dzYhDU1ukTplQlcAQ2iekRylZkEgNhfwGk7UNfuiVQkb2itneVC
OcZkPJtRzE+UktIUwW1HxrfyakCAnE79XtealGxrz2btaCVUno8OmHsbPSEiPRxI
CJWzDYr3M+RhItpeDEkcmpjTuPvx35kElrw+6PYwmpzGm42yI5vuFwFFkTeMrJj4
okQW8uhX62Cy4BFfeHeHtXVs6fUKj83UniCZ1fUY5/Rf2IhGZBKW6jES3ZEd8QEA
Cak/vMI/HBXrwFqZ30l0fugJgczL/ZmbbVrYVO/gltMZUUYmQJ4uCpnB/mLi0Z+4
BpWwJrGXohnGm8g4D6pKLr2LAgMBAAGjggJoMIICZDAdBgNVHQ4EFgQUfLjj98Yb
U5+n0uePxBd7lQOd6CcwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0
NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8zMjE4NjUyODI5
RTgxMUYxOENBOEYzOTA5RjgzMzc3My5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE
AgABMA4wDAMEAM2xQwMEAM2xRDANBgkqhkiG9w0BAQsFAAOCAQEAltqF0bGvLLVQ
UGH/vLXuB6/uNNr7xECd8wjR9FFOiXety0gIvB/skvIirg7N8tm2mcFxicq6STl3
lrx9q5ZOIvsfPPaGBX2VErDz1VB1MkBGOWBT6T7imCk6N0mhcu8AuP8ScEpR85sr
kF1LdG2JOsoS5qDnlP7lVlBk6NYH7Jhia+230oGCu6iF1uCKdKV9NrJn0UVP5X7B
Wi7Lii8j+RypVzvOtJjKBX+rAnYu0pUrm73K3KsH+ZMXdUbvEvGDm8aWRMbvZHmL
CFrg0Zt9bRZ/j4al1UNGJeWNnKCzFj1pOWIoFUf+aysNaar6C+flJwOr9TA7XVq4
ZJedfcJUNA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:54:19 2026 by rpki-client