Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/C8424AA84AB511F185B0E11DBA833773.roa
File:                     C8424AA84AB511F185B0E11DBA833773.roa (raw, json)
Hash identifier:          fJf2y9d4stc3nMqOeASEOcsdUJQoVrVnG2FIkJvfGpI=
Subject key identifier:   6F:71:51:D6:D9:33:4D:3E:34:DC:6C:4A:0E:65:E7:E2:5F:57:B5:16
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0C25
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/C8424AA84AB511F185B0E11DBA833773.roa
Signing time:             Fri 08 May 2026 08:13:24 +0000
ROA not before:           Fri 08 May 2026 08:13:24 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     208185
IP address blocks:        45.115.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3109 (0xc25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B, serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: May  8 08:13:24 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69fd9b23-4760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:ac:8b:fb:3b:6c:e3:76:db:1c:21:07:6e:
                    ce:32:ee:81:fd:00:5b:d8:2b:1b:8d:99:1a:5a:41:
                    7e:b1:e3:35:58:82:3f:74:b3:7d:e5:66:06:51:be:
                    56:13:db:2f:88:bb:13:a0:87:b3:1a:16:02:3a:dc:
                    f9:05:86:5c:06:a1:01:3a:fb:80:fa:1d:bb:6e:8e:
                    ef:68:7f:28:58:00:9f:7c:17:ba:1a:93:15:84:be:
                    8a:69:bc:65:48:33:c9:69:0e:26:4a:93:a3:0a:b4:
                    d3:af:f6:e9:c3:8f:47:32:79:7b:15:3d:da:12:78:
                    5f:30:aa:42:ab:c6:a0:71:86:69:95:81:ac:a4:49:
                    ae:30:f2:15:17:fe:c7:92:61:76:85:9d:4a:40:42:
                    44:15:42:5d:cb:18:65:78:57:a2:3e:76:fc:47:bb:
                    b9:c3:b4:b3:3c:48:d6:b2:ec:ea:43:7d:8e:d7:bf:
                    a8:59:55:0a:d3:25:8c:24:3a:80:b1:24:7d:5f:a1:
                    29:7e:8a:2f:b8:a8:99:03:5e:61:56:d4:40:cf:c5:
                    77:5f:c9:f9:c2:5c:b7:45:8b:74:93:d5:3d:22:7c:
                    59:61:7f:01:c9:aa:0d:02:1b:da:f7:4b:8a:33:4f:
                    6d:3d:ec:0e:60:af:19:8c:6d:1e:ce:72:97:a4:20:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:71:51:D6:D9:33:4D:3E:34:DC:6C:4A:0E:65:E7:E2:5F:57:B5:16
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/C8424AA84AB511F185B0E11DBA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:1a:d7:c6:ed:0b:a3:f8:1c:71:98:a4:7f:57:05:25:9e:21:
         e1:b4:2c:cb:f2:49:96:05:95:a2:ad:a9:f9:5e:d7:b4:4f:f8:
         59:84:b9:7d:a5:0c:65:40:af:c7:99:fb:de:a3:bc:0b:20:a3:
         c3:35:c3:bc:b5:c2:10:aa:02:2c:4b:27:63:75:40:e7:15:21:
         5b:db:2d:30:05:de:37:51:ae:f1:ec:cf:d5:b9:ab:f8:eb:ae:
         4f:dc:1e:bf:d8:8c:1f:49:f3:d1:67:45:82:a4:e1:a4:43:ee:
         56:ad:1d:62:45:f6:d8:52:22:24:b5:81:57:f9:77:21:27:ef:
         2f:4f:27:9c:2a:28:26:b8:fc:eb:34:52:3e:5d:d7:11:c1:c4:
         43:c3:85:e3:55:b9:71:ff:40:22:0f:1d:37:07:d1:c3:de:7a:
         ad:49:c3:65:4a:b3:b9:7c:43:b5:bb:e6:44:5f:17:ed:27:38:
         fd:be:0d:a7:67:04:7d:3a:10:bd:72:70:0a:3f:9c:fa:20:5b:
         a3:97:b2:52:f4:8d:f7:69:8e:b1:86:ae:b1:6b:a0:fa:ca:99:
         f5:e3:a3:a8:a0:7a:48:fc:59:23:b5:12:ed:4d:66:d8:5d:cf:
         1b:3e:43:a7:14:70:10:b1:0f:cc:cd:81:9b:5c:c4:d1:49:ab:
         d9:b8:8d:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhCMkIxMTAvBgNVBAUTKDIwMjA3OUQ2QzlGRTA3QkYxODYyMjFEMUE5OTgyN0NC
RjZCMTIyQUUwHhcNMjYwNTA4MDgxMzI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZkOWIyMy00NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6Jasi/s7bON22xwhB27OMu6B/QBb2CsbjZkaWkF+seM1WII/dLN95WYGUb5W
E9sviLsToIezGhYCOtz5BYZcBqEBOvuA+h27bo7vaH8oWACffBe6GpMVhL6Kabxl
SDPJaQ4mSpOjCrTTr/bpw49HMnl7FT3aEnhfMKpCq8agcYZplYGspEmuMPIVF/7H
kmF2hZ1KQEJEFUJdyxhleFeiPnb8R7u5w7SzPEjWsuzqQ32O17+oWVUK0yWMJDqA
sSR9X6EpfoovuKiZA15hVtRAz8V3X8n5wly3RYt0k9U9InxZYX8ByaoNAhva90uK
M09tPewOYK8ZjG0eznKXpCD2swIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG9xUdbZ
M00+NNxsSg5l5+JfV7UWMB8GA1UdIwQYMBaAFCAgedbJ/ge/GGIh0amYJ8v2sSKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEIyQi9CRkREMjIyRTND
NDQxMUVBQUVFNkY3MEFDNEY5QUUwMi9JQ0I1MXNuLUI3OFlZaUhScVpnbnlfYXhJ
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lDQjUxc24tQjc4WVlpSFJxWmdueV9heElxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhCMkIvQkZERDIyMkUzQzQ0MTFFQUFFRTZGNzBBQzRGOUFFMDIvQzg0MjRBQTg0
QUI1MTFGMTg1QjBFMTFEQkE4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQALXMYMA0GCSqGSIb3DQEBCwUAA4IBAQAAGtfG7Quj+BxxmKR/VwUl
niHhtCzL8kmWBZWiran5Xte0T/hZhLl9pQxlQK/Hmfveo7wLIKPDNcO8tcIQqgIs
SydjdUDnFSFb2y0wBd43Ua7x7M/Vuav4665P3B6/2IwfSfPRZ0WCpOGkQ+5WrR1i
RfbYUiIktYFX+XchJ+8vTyecKigmuPzrNFI+XdcRwcRDw4XjVblx/0AiDx03B9HD
3nqtScNlSrO5fEO1u+ZEXxftJzj9vg2nZwR9OhC9cnAKP5z6IFujl7JS9I33aY6x
hq6xa6D6ypn146OooHpI/FkjtRLtTWbYXc8bPkOnFHAQsQ/MzYGbXMTRSavZuI1F
-----END CERTIFICATE-----
Generated at Wed May 13 02:11:45 2026 by rpki-client