Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/AE77A386F80211EAAA7CE76CC4F9AE02.roa
File:                     AE77A386F80211EAAA7CE76CC4F9AE02.roa (raw, json)
Hash identifier:          0ojJDIYY7Ljbue1YPhwXYECi7fRGiXUa6NJsXDnky+4=
Subject key identifier:   D0:85:A9:B0:10:76:BD:88:54:EA:BA:82:9F:34:2C:44:1D:05:7E:2E
Certificate issuer:       /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
Certificate serial:       089F
Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/AE77A386F80211EAAA7CE76CC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 21:41:48 +0000
ROA not before:           Fri 24 Jul 2026 21:41:48 +0000
ROA not after:            Tue 31 Oct 2028 00:00:00 +0000
asID:                     140887
IP address blocks:        103.152.228.0/23 maxlen: 23
                          103.152.228.0/24 maxlen: 24
                          103.152.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl
                          rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A
        Validity
            Not Before: Jul 24 21:41:48 2026 GMT
            Not After : Oct 31 00:00:00 2028 GMT
        Subject: CN=6a63dc1c-ac90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:2c:5d:b2:f2:21:9e:dc:4f:03:29:65:ba:
                    2a:8b:44:ca:73:b2:a5:08:ec:40:aa:57:19:44:0f:
                    58:cc:41:6b:0d:4e:9c:bb:25:00:5a:54:c7:96:02:
                    8d:a3:ac:45:c7:a3:9d:8a:37:0f:20:1f:8b:0a:ac:
                    73:83:fe:8d:12:3c:0d:46:89:a9:bb:d4:1c:7e:fc:
                    d9:d6:08:c9:75:74:3e:93:73:59:94:0a:d6:6d:7f:
                    d3:ec:bd:4b:ab:5d:34:0a:54:72:eb:9d:3c:06:78:
                    2a:81:c9:af:a7:f7:00:42:2f:d4:39:d5:86:7e:0e:
                    50:19:37:76:24:0a:6c:7c:27:93:33:2d:b7:f1:20:
                    60:39:9f:4b:e2:a2:be:29:2c:d8:3e:eb:a2:a3:51:
                    0d:3f:0c:86:9e:ff:b1:02:82:73:be:f7:ac:5b:ab:
                    d7:9a:32:f6:cc:d4:43:94:a6:fc:98:51:44:23:40:
                    2b:92:4d:67:eb:86:23:72:a2:81:10:fa:85:e2:51:
                    63:e7:4a:49:57:65:c9:d9:ee:94:f3:7d:b8:4e:e9:
                    c5:3f:84:6b:83:9c:89:4c:1e:22:39:72:1c:66:d3:
                    9d:58:7c:22:98:9c:ce:02:f8:5c:27:5d:4b:8c:82:
                    79:81:5b:b3:94:96:6d:70:b0:94:5f:8f:83:9f:22:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:85:A9:B0:10:76:BD:88:54:EA:BA:82:9F:34:2C:44:1D:05:7E:2E
            X509v3 Authority Key Identifier:
                keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/AE77A386F80211EAAA7CE76CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:89:8d:fb:a4:57:a3:d4:3e:b0:6b:e4:00:0c:ec:72:4b:78:
         44:e5:2f:bc:b0:03:4f:6f:8b:fc:93:23:22:a2:6d:fd:2d:12:
         c3:c1:d4:01:e0:4d:a9:47:cc:a8:5d:4c:a5:78:8c:63:89:a3:
         8e:97:ca:7a:3b:90:bf:32:0d:6c:7c:95:d7:ca:87:ae:f1:98:
         54:89:c1:e2:23:43:62:66:c2:14:c1:70:d4:24:be:5a:eb:5a:
         a9:3d:a9:f4:2a:cc:d8:08:b9:f8:32:85:1e:f9:f2:a8:ec:bf:
         93:47:f1:eb:f1:29:74:e9:f9:86:fb:5f:64:eb:bd:c1:45:53:
         d3:cc:97:eb:74:ba:9e:f9:8d:6a:97:89:aa:4a:38:9f:49:33:
         5c:7a:5a:58:37:8d:5c:9e:5a:db:d8:01:b5:fa:06:48:94:98:
         f4:97:ad:3f:0c:ef:ec:1d:ac:c1:2d:43:3b:95:b6:f3:de:2b:
         ab:3b:2e:f1:3b:f3:75:a7:90:d3:54:46:b2:bc:0f:e9:93:97:
         64:5b:f5:fe:32:f8:51:fc:d9:6c:ac:18:81:34:f4:4a:7c:a2:
         a9:89:84:30:d5:99:07:6d:a9:62:89:7c:5d:f5:ba:11:4d:0e:
         ca:ff:a5:82:75:cf:0a:69:9b:d1:be:22:e0:5b:38:73:c9:ab:
         49:0b:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:34 2026 by rpki-client