Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/B97508ECB72711F1ACE4541F7111F970.roa
File:                     B97508ECB72711F1ACE4541F7111F970.roa (raw, json)
Hash identifier:          Ro5QdhRfDdT6Kmi1OfSSRs8khpl30ID6ftuqa1fY/6w=
Subject key identifier:   19:FA:F4:93:CA:7C:9A:BC:1B:FB:C1:16:EC:62:EE:DD:37:1F:F5:3B
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C85
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/B97508ECB72711F1ACE4541F7111F970.roa
Signing time:             Wed 23 Sep 2026 08:21:07 +0000
ROA not before:           Wed 23 Sep 2026 08:21:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     211422
IP address blocks:        45.115.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3205 (0xc85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Sep 23 08:21:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab38bf3-f499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:ab:bf:04:8e:8b:32:e0:c3:84:49:e0:e3:
                    6d:d0:2e:39:96:a5:e2:96:4c:ba:4b:de:0c:0d:72:
                    55:b1:e2:de:55:a1:bd:3c:e9:93:7c:db:bd:2f:82:
                    06:99:c1:fd:48:08:e6:1e:61:5a:63:82:6c:60:44:
                    ba:6c:e1:f1:3a:06:a5:d8:6b:28:5a:4e:53:cd:93:
                    71:d2:07:06:89:d4:6e:37:be:1d:88:7f:46:3d:07:
                    6a:ac:56:83:08:35:8b:6d:10:18:de:5c:07:6b:71:
                    3d:f3:e9:60:b2:9c:34:0a:42:d0:d2:40:91:cb:00:
                    f4:b2:3f:05:ec:c9:43:4f:01:a0:bd:4e:0d:88:65:
                    38:7b:51:b1:fc:f6:c3:0b:e5:ae:d8:e6:2e:dd:be:
                    6c:a7:86:7a:7c:5f:89:c1:1c:ec:5b:58:e9:cc:ec:
                    ab:11:ca:1a:09:95:1d:4f:75:28:d9:df:3f:d5:5f:
                    71:cc:9a:a6:94:92:80:c8:0e:ea:f4:94:65:30:9c:
                    ac:17:9e:10:76:cd:25:f1:59:b5:f6:77:ac:bc:bc:
                    52:93:b5:6d:fd:1c:cb:77:d9:68:3f:1f:2f:25:97:
                    ac:41:34:38:db:ff:62:4e:c8:ee:7b:90:34:65:1c:
                    28:b8:c4:ea:cb:62:11:ed:b4:18:5b:bd:2f:c9:ab:
                    5f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FA:F4:93:CA:7C:9A:BC:1B:FB:C1:16:EC:62:EE:DD:37:1F:F5:3B
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/B97508ECB72711F1ACE4541F7111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:05:77:c6:7b:39:d8:26:30:53:68:41:27:a6:8a:58:56:21:
         aa:8d:21:58:ab:1b:89:d3:dd:1d:f6:fc:18:60:89:b7:f5:5f:
         c3:8a:72:f6:6b:cc:24:9c:04:2b:00:39:e2:4b:3a:fe:1d:8b:
         9d:88:3b:39:93:ef:3a:e3:75:09:57:20:ad:b2:46:b6:2e:88:
         68:e8:f8:8d:5f:0b:74:11:a9:fd:4d:4c:84:4d:2c:62:12:47:
         7c:f0:0c:ff:ab:f8:04:f4:32:39:e2:35:83:27:7e:37:65:72:
         bd:c1:ef:17:95:e1:7e:de:17:9a:2c:c2:8b:7f:6f:99:6e:6f:
         9e:55:42:0a:b5:85:fc:40:64:04:49:7a:cf:bc:c3:64:0c:ff:
         72:13:49:f6:44:1f:75:d6:50:f5:63:c4:16:27:9b:ba:e3:64:
         1d:4f:a9:22:cb:75:a0:bf:c8:fe:4c:82:c2:4d:cf:43:50:fd:
         f5:85:1e:13:a4:55:44:69:22:cf:21:1c:cf:eb:ba:bb:e1:01:
         eb:db:1f:d9:db:8d:49:66:ad:d9:f9:0c:14:77:78:d7:9c:d4:
         7e:e2:af:a2:81:b0:87:76:80:79:37:68:d8:36:9e:18:20:19:
         ef:5e:9e:ee:74:7c:ae:07:11:13:1b:df:bf:ed:cb:56:00:bd:
         33:a0:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:54 2026 by rpki-client