Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/7DAECCA84E9F11F182521632BE833773.roa
File:                     7DAECCA84E9F11F182521632BE833773.roa (raw, json)
Hash identifier:          jN1j556n4CYVP+ZoEJsGbkluGWovmI0vyYUYAc5AM0o=
Subject key identifier:   C2:9F:2C:E0:E3:B9:5A:DB:CB:85:C5:64:98:7D:57:5E:C9:E6:29:E6
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C2E
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/7DAECCA84E9F11F182521632BE833773.roa
Signing time:             Wed 13 May 2026 07:43:54 +0000
ROA not before:           Wed 13 May 2026 07:43:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     209883
IP address blocks:        45.115.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3118 (0xc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May 13 07:43:54 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6a042bba-a087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:c0:79:0c:df:f2:a8:89:8f:c5:e7:44:6d:
                    6e:77:21:6e:56:87:54:af:eb:3f:db:54:d5:12:55:
                    84:5d:22:ac:3d:73:c0:ee:1c:8e:25:71:c3:a1:2d:
                    73:8a:dc:50:e0:79:9f:fe:44:77:ad:fb:97:7b:3f:
                    ac:1b:7d:3e:16:e7:3c:45:dc:2a:2a:00:a1:12:a9:
                    52:c3:3c:35:a4:df:38:54:3d:43:a9:f3:a7:9c:47:
                    42:7a:33:f2:75:c6:f3:a8:8b:01:a6:5c:dd:b1:43:
                    df:1f:db:1a:e4:f2:87:6f:e2:fb:86:68:b1:1e:d1:
                    e4:fd:55:57:ec:ac:91:5b:a8:57:5b:ec:6b:fa:34:
                    18:be:53:cb:04:cf:75:d6:78:c5:6e:e9:6e:75:d7:
                    66:08:fc:32:a7:43:1e:bc:d1:90:f0:f2:f2:0e:a0:
                    2c:6b:57:0e:ae:d3:60:c6:9b:97:a1:64:5b:bf:e2:
                    e3:e5:92:97:83:69:ac:40:80:77:b2:fb:96:8b:00:
                    df:d8:53:e2:95:be:2b:44:6f:b2:0d:a4:f3:2e:6a:
                    16:dd:06:0e:50:fb:37:98:07:2c:d0:65:a4:d0:ff:
                    c8:69:25:29:23:99:83:de:93:0b:3a:bb:dc:4a:9e:
                    c3:f1:2d:34:5b:c7:c3:de:f5:fb:38:f0:93:70:39:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:2C:E0:E3:B9:5A:DB:CB:85:C5:64:98:7D:57:5E:C9:E6:29:E6
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/7DAECCA84E9F11F182521632BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d4:6a:fc:2d:5e:e9:9e:14:a3:e1:d2:60:4e:fb:6c:0b:5c:
         05:c4:f6:7c:6c:09:3b:c1:52:bf:97:c1:fe:5d:e1:47:f3:93:
         92:86:04:6e:61:e5:c6:2f:39:4d:b1:81:a0:b6:7f:54:8d:28:
         1a:d2:44:8a:3a:86:ab:b0:41:5e:1c:d5:0c:29:c4:ae:94:db:
         5d:fb:99:72:df:a1:eb:ce:45:ba:29:d5:da:1e:67:c5:1e:3e:
         e9:5b:6c:0d:db:56:32:a9:a1:4a:a9:88:ce:12:cf:82:c6:49:
         e7:c3:7a:5f:ae:28:24:90:46:ea:af:06:7e:5d:e0:dd:ad:d5:
         d7:79:23:66:76:b0:3c:25:73:af:e3:c7:65:d0:69:06:8d:67:
         9d:a1:24:d4:3d:71:65:3f:a0:d1:e9:56:a7:8a:5d:5e:ab:29:
         c0:ff:d2:7e:96:6e:6d:b5:41:b9:7b:60:c0:ca:2c:1a:2d:fa:
         70:44:98:c4:9c:98:1d:1f:16:40:af:41:d1:55:86:32:a7:d5:
         50:9c:ed:32:23:b2:4c:66:ef:28:47:49:57:1e:98:f1:25:1f:
         67:ae:8c:47:30:06:d2:4f:4c:fb:a1:17:0d:ae:0f:24:57:c3:
         c5:a0:33:a5:2a:59:76:a4:c5:45:41:87:6b:24:00:ce:52:0b:
         28:0a:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:28 2026 by rpki-client