Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/077EBED88C4B11F0893B6C21C4F9AE02.roa
File:                     077EBED88C4B11F0893B6C21C4F9AE02.roa (raw, json)
Hash identifier:          ikKAL1g9TZvzW/4joDJKNVTbvcnB4SQHt2lX/sKVv4U=
Subject key identifier:   60:98:A0:B5:4F:A7:0C:66:72:90:7C:AA:82:EB:B1:29:8B:8C:C6:30
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DD3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/077EBED88C4B11F0893B6C21C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:12:55 +0000
ROA not before:           Thu 06 Aug 2026 15:12:55 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9770
IP address blocks:        113.52.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15827 (0x3dd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:12:55 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a477-e7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:ee:9a:b6:3b:20:af:8e:dc:ad:c4:ea:ef:
                    4c:4e:22:a8:81:1d:77:a4:28:ce:33:b9:91:b7:a2:
                    8f:2e:f1:c3:92:c1:4d:66:23:4e:45:ad:99:7d:3e:
                    d8:ea:38:61:fe:da:d1:1d:da:91:e1:2a:ad:5c:35:
                    61:27:d8:6a:47:24:c6:eb:9a:d5:6f:8a:c3:89:d6:
                    be:cd:d0:e3:c4:66:77:8c:31:f8:06:a2:e4:b9:62:
                    7c:a4:2e:49:f3:e8:0a:65:d5:75:27:3f:7c:70:ce:
                    b7:45:df:d8:68:ef:9d:ca:22:99:fa:15:6a:76:7a:
                    e6:74:63:3a:64:19:b8:28:98:08:40:b9:9c:a7:e0:
                    68:d4:be:f9:1a:61:98:1d:fe:fd:ce:93:ff:2f:2a:
                    cd:f0:13:a6:8c:9b:dc:96:ba:d5:90:28:0d:57:4c:
                    81:e8:ad:9f:df:86:63:58:6b:e4:be:6f:70:99:50:
                    58:92:cb:c8:ab:7e:69:a4:3b:5a:c4:fe:73:13:6d:
                    27:40:3d:df:f3:2b:76:f2:21:7b:a8:27:e4:c0:ed:
                    3d:5e:2b:3b:9a:64:e9:01:2a:f9:82:09:c7:b9:ee:
                    6e:58:96:e6:e4:1a:13:cd:8e:97:25:90:e6:39:49:
                    3f:50:67:93:54:ff:44:49:29:09:ad:f7:38:e7:1a:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:A0:B5:4F:A7:0C:66:72:90:7C:AA:82:EB:B1:29:8B:8C:C6:30
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/077EBED88C4B11F0893B6C21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.52.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:f3:08:fb:3e:64:6d:1e:a3:fe:13:76:4b:2b:55:da:ee:
         7b:c0:5d:cd:f8:86:43:9b:97:a2:7c:3c:f9:6b:cb:5e:b8:68:
         39:56:91:8d:65:c6:df:c9:92:bd:53:27:e4:68:52:d5:26:e3:
         ac:b1:9b:20:8f:91:92:a7:f7:9d:7c:8c:8e:f0:08:7e:66:5e:
         0c:f7:e5:ba:1a:f7:0b:ed:1a:76:91:f2:33:c4:fa:90:8e:3f:
         91:77:3c:92:8f:8b:9a:76:cf:ba:8e:eb:28:04:09:01:37:20:
         27:ef:17:af:62:1c:a8:d0:7f:1e:f8:c4:55:64:9e:78:2c:80:
         72:4e:e7:c8:63:09:8c:8a:13:de:86:d2:5f:c7:ea:62:67:dd:
         b6:f5:31:e6:04:79:82:4f:bb:75:f3:12:75:31:a0:3a:d2:3f:
         a5:31:14:bd:a0:16:17:e2:b7:53:0e:d4:da:d5:08:57:eb:05:
         05:bb:da:8f:2f:86:9e:29:28:14:0e:87:26:e2:87:58:8c:1f:
         26:64:94:d3:38:fb:1c:ba:1a:b8:8e:89:88:c4:81:cf:44:eb:
         89:f3:d4:4f:6c:5d:74:4c:74:4f:aa:d6:da:64:83:da:83:24:
         3b:8d:38:7f:e7:6c:db:aa:c0:cd:b3:b8:b2:a3:72:bd:0c:55:
         19:be:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:37 2026 by rpki-client