Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77C416DE993E11F08259193FC4F9AE02.roa
File:                     77C416DE993E11F08259193FC4F9AE02.roa (raw, json)
Hash identifier:          7IQ5CVSqfd+trgkzolNbhPjPpjd6i1flgWjmxfOB77A=
Subject key identifier:   68:CD:36:38:91:98:06:51:75:EF:76:D3:0C:1A:04:84:9A:6B:D7:BA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C57A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77C416DE993E11F08259193FC4F9AE02.roa
Signing time:             Wed 24 Sep 2025 12:03:23 +0000
ROA not before:           Wed 24 Sep 2025 12:03:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134026
IP address blocks:        45.115.104.0/22 maxlen: 24
                          103.55.88.0/22 maxlen: 24
                          103.70.200.0/22 maxlen: 24
                          103.92.112.0/24 maxlen: 24
                          103.131.27.0/24 maxlen: 24
                          103.140.219.0/24 maxlen: 24
                          103.177.174.0/24 maxlen: 24
                          103.184.70.0/23 maxlen: 24
                          2405:5c0::/32 maxlen: 32
                          2405:80c0::/32 maxlen: 32
                          2407:c8c0::/32 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50554 (0xc57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 24 12:03:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68d3de0a-6c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:c4:f6:6b:f2:b0:59:90:06:b3:57:71:b4:
                    2e:f9:97:36:24:ee:e5:80:b4:27:70:47:a5:fa:ab:
                    ac:e2:d4:c1:26:9b:64:ad:6a:c1:ac:6f:49:9f:17:
                    fb:3f:a0:98:5e:53:10:65:95:4a:60:cc:43:49:59:
                    e8:6c:e6:23:2e:b5:6a:8a:3b:83:a7:b9:f4:34:d8:
                    38:39:0d:7d:a1:9e:26:fb:60:ff:de:5b:24:47:b6:
                    6e:a3:1d:53:8c:85:78:26:8c:b7:27:c0:9a:8c:96:
                    2d:1c:ac:f9:b3:b2:ae:fe:fc:31:b7:a6:25:9d:80:
                    99:bf:2b:b9:e8:a5:50:5e:10:f3:08:54:ac:72:bd:
                    1f:b7:00:4d:b9:97:81:0d:b7:28:d6:25:63:28:f2:
                    18:7b:74:d1:40:40:e3:dd:1c:e6:bb:45:da:ca:e8:
                    16:cf:d2:bf:db:b6:23:76:da:77:06:ce:a3:ba:b6:
                    4f:12:34:aa:91:a5:6d:ad:1a:29:d3:ca:21:ce:24:
                    8b:84:21:d5:01:5e:93:fc:d9:eb:80:b4:df:a3:b4:
                    9b:22:86:fd:9b:9a:07:0a:eb:18:bc:1a:21:06:cf:
                    e0:a7:64:a0:4c:03:65:b5:19:be:87:02:5d:58:eb:
                    5b:9e:50:9c:6a:eb:65:27:28:d8:c7:f3:86:89:ba:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CD:36:38:91:98:06:51:75:EF:76:D3:0C:1A:04:84:9A:6B:D7:BA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77C416DE993E11F08259193FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.104.0/22
                  103.55.88.0/22
                  103.70.200.0/22
                  103.92.112.0/24
                  103.131.27.0/24
                  103.140.219.0/24
                  103.177.174.0/24
                  103.184.70.0/23
                IPv6:
                  2405:5c0::/32
                  2405:80c0::/32
                  2407:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:9a:89:4f:a7:83:8d:9a:46:49:13:97:16:4c:10:c1:95:
         66:c2:38:a5:0d:41:a3:b0:7b:5f:25:b0:c5:cf:9a:f4:22:40:
         e5:db:3a:7a:c1:8d:f8:44:c9:8e:09:c1:d1:70:2a:72:4a:9e:
         82:d0:69:db:f3:b6:a0:f6:7e:06:71:40:77:41:f7:58:d8:6c:
         0b:e7:2d:1d:9f:d0:e6:9c:ef:7d:d6:c7:c1:82:bb:e4:8b:5b:
         56:67:46:aa:33:a3:a6:7e:8b:1d:d6:db:1a:5a:2a:38:33:62:
         b9:5c:de:10:6c:de:fc:df:07:cf:ef:69:cb:b3:fd:7a:d2:65:
         e0:67:33:26:e0:90:0d:55:19:ff:5b:19:94:17:9d:17:b9:68:
         f1:bb:1b:ac:bc:74:21:74:70:49:2d:a8:23:03:a8:3c:bb:aa:
         7e:31:93:04:c9:70:31:d3:46:5c:d4:21:b6:60:52:e1:25:cc:
         d1:05:f8:0c:16:38:a8:02:7a:39:d1:ad:3b:ce:52:26:49:7e:
         3b:9e:52:91:9e:ee:2f:50:59:53:4d:89:0e:e8:d7:17:53:c4:
         1d:a1:ad:28:df:32:32:ba:cb:65:4d:10:1e:40:8a:bf:68:02:
         7c:94:cd:9d:ff:98:1a:29:08:02:b4:23:aa:dd:16:9d:71:df:
         bd:35:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:54 2025 by rpki-client