Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa
File:                     AAEECC6A6E2D11F1A887915478A30FBC.roa (raw, json)
Hash identifier:          JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=
Subject key identifier:   01:B8:51:4D:D8:13:2A:6C:94:74:0D:9B:81:C1:84:42:BF:CA:77:37
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       2F
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa
Signing time:             Mon 22 Jun 2026 11:29:45 +0000
ROA not before:           Mon 22 Jun 2026 11:29:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140900
IP address blocks:        151.123.228.0/24 maxlen: 24
                          151.123.229.0/24 maxlen: 24
                          151.123.230.0/24 maxlen: 24
                          151.123.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: Jun 22 11:29:45 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a391ca8-7709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:b1:90:1e:14:75:84:9b:cd:47:d3:ab:04:
                    8b:de:9e:cf:a9:a7:e3:ab:8a:a3:38:ea:90:7e:d9:
                    6b:16:c9:20:8c:d3:db:93:e2:bb:dd:88:77:b8:30:
                    62:1b:2f:fa:a9:fb:11:8a:29:a5:8b:8d:fa:f8:82:
                    88:16:fb:26:5c:17:ba:a9:0c:63:a7:b6:03:06:62:
                    61:4c:1b:ac:bd:e0:84:19:3a:f4:eb:3e:a1:bd:de:
                    bf:7b:28:cb:d5:8c:bc:28:25:11:62:87:cc:ea:da:
                    7a:6e:f5:c5:d4:10:45:87:f8:31:04:8a:44:cc:b8:
                    a5:de:4d:45:0c:2c:45:81:09:6a:79:70:57:ac:89:
                    b4:86:25:c7:ae:64:96:70:49:48:c5:85:e8:22:d0:
                    48:c2:e0:b7:a5:82:d5:07:cd:4f:14:93:d5:61:f8:
                    a3:62:ae:43:ef:27:ad:d3:98:cb:00:e4:dd:ce:6f:
                    5d:a0:12:0f:e3:49:69:1d:01:04:d5:27:04:70:7c:
                    db:c5:3e:2e:6b:df:b2:dc:04:17:12:ca:b7:56:b2:
                    6d:0a:d5:c6:12:6a:02:7e:3a:a7:da:05:29:3b:ff:
                    cf:0e:ed:47:4a:74:c4:74:39:86:6d:aa:8b:96:65:
                    94:c5:60:ba:0f:f8:e4:07:bb:01:be:a5:d3:b3:71:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:51:4D:D8:13:2A:6C:94:74:0D:9B:81:C1:84:42:BF:CA:77:37
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:1c:4a:4c:a5:a1:66:03:a9:8d:6c:12:69:ef:42:69:7f:
         26:94:90:9b:3e:e3:b7:1e:d0:61:40:3a:7f:31:c4:db:9a:33:
         1c:3b:e4:a1:a4:96:17:c7:9c:d5:e8:31:d4:47:e0:ce:e3:b6:
         7a:f1:8b:e3:7a:6d:86:ce:a8:e7:99:33:5e:9b:ce:cf:bd:f8:
         8a:b3:f4:e0:6e:f0:49:ae:4f:75:43:8a:83:e1:2a:e0:d4:fa:
         2c:57:e0:49:9f:58:66:fe:2a:0c:74:11:87:28:e7:11:ff:f0:
         1c:9b:e0:30:3c:fd:7b:fe:f0:88:d7:87:e3:d2:0f:1f:c4:45:
         cc:a1:18:97:ed:5d:b3:65:5f:77:40:ab:3c:4b:56:79:8f:a1:
         be:ec:32:12:85:54:b0:98:18:50:8f:97:0b:16:9e:d4:c4:f6:
         40:af:d4:5b:f9:9b:83:05:fd:ba:cd:92:8a:d4:bc:bf:3e:5d:
         35:06:69:87:c4:ee:74:0a:46:cb:b2:bb:e8:21:5a:54:16:f2:
         be:7a:11:1d:f1:8d:7b:61:b8:e8:bb:2f:10:3d:e2:65:30:6d:
         c0:f6:48:eb:67:fd:4b:89:f3:ba:76:74:83:0e:91:06:5b:a8:
         29:38:99:a3:1f:7b:cf:8d:46:7f:b0:33:e0:92:8c:d0:88:47:
         23:25:a0:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:42 2026 by rpki-client