Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/55FE0314581811F09A0AB17CC4F9AE02.roa
File:                     55FE0314581811F09A0AB17CC4F9AE02.roa (raw, json)
Hash identifier:          lINB4ZwW6CYB53sylS1MrGaiI2L/l8sq0JnVeRgKpuY=
Subject key identifier:   6A:3D:8F:44:4C:CC:7E:44:93:CC:2B:0F:BA:BB:89:90:63:01:25:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       010F
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/55FE0314581811F09A0AB17CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 09:41:14 +0000
ROA not before:           Thu 28 Aug 2025 09:41:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152723
IP address blocks:        103.54.108.0/24 maxlen: 24
                          103.54.109.0/24 maxlen: 24
                          2401:d160::/32 maxlen: 32
                          2401:d160:1000::/36 maxlen: 36
                          2401:d160:2000::/36 maxlen: 36
                          2401:d160:a000::/36 maxlen: 36
                          2401:d160:b000::/36 maxlen: 36
                          2401:d160:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Aug 28 09:41:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68b0243a-4a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:6d:b7:e2:99:96:06:8d:f9:fc:16:d8:b5:
                    7d:34:5f:ee:98:24:17:4d:ce:7f:4e:a0:41:96:48:
                    9f:0e:22:1d:1d:e0:ae:3c:b3:c3:64:02:e5:fc:0c:
                    ba:9b:52:4b:b8:58:f5:5a:96:e5:36:97:8f:c3:f3:
                    10:c0:35:6c:96:cd:b3:c8:a9:1d:ca:bd:50:8b:c8:
                    d5:57:bc:16:89:65:d3:2d:49:f5:cd:61:df:13:91:
                    72:34:7b:d9:b2:65:e3:78:36:ee:80:c1:c2:a6:a2:
                    fa:d1:6d:07:ab:ac:7e:92:44:53:38:dd:2a:64:cb:
                    52:a9:8a:ad:f6:7b:19:39:17:67:a9:27:ce:35:a6:
                    4a:a0:c7:52:27:a6:22:ea:87:29:4c:f1:5f:84:b0:
                    a0:36:64:40:f1:3a:20:b8:99:8c:42:58:e5:9f:84:
                    05:6a:55:8e:9d:67:51:49:60:aa:21:ee:47:91:1d:
                    e4:f7:55:f5:30:ef:b7:e0:f1:22:86:f8:6a:9d:62:
                    7c:7e:f3:41:c4:bb:6f:6b:aa:ca:e7:04:06:60:e0:
                    52:b1:8f:76:40:77:2a:88:35:d8:48:fb:9d:ea:2f:
                    b0:cd:47:00:82:c4:bb:0b:c3:d4:e8:6a:ae:53:fd:
                    2c:aa:c9:da:d2:af:26:d9:03:9d:19:0e:d1:d8:20:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3D:8F:44:4C:CC:7E:44:93:CC:2B:0F:BA:BB:89:90:63:01:25:3A
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/55FE0314581811F09A0AB17CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.108.0/23
                IPv6:
                  2401:d160::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:fc:b0:01:0c:ca:c5:55:c4:be:50:2c:05:09:ee:0d:8c:72:
         63:29:48:93:08:5e:d4:2c:cc:03:a4:4a:10:a7:7d:71:80:5b:
         d8:32:cc:9c:78:63:61:c2:74:32:a2:8e:b9:d4:d9:b8:94:d9:
         31:38:67:8d:f3:ce:5a:ff:ed:0c:c0:dd:39:52:da:92:6f:7d:
         51:09:90:77:a2:2d:eb:99:b6:23:89:8e:03:45:40:50:12:c8:
         ed:59:d9:16:fc:9f:21:07:32:fa:ed:27:74:1a:c3:ab:0d:0b:
         04:51:66:80:54:1a:86:48:ce:08:7c:73:0e:1e:cf:5a:e1:34:
         93:a1:aa:44:09:ed:f9:a9:8e:22:41:5d:87:f0:ad:a3:3f:36:
         6a:2b:cb:17:74:b2:6d:e5:e0:1d:44:ee:23:bb:bb:dc:2d:d3:
         6a:43:e6:51:54:46:9e:1e:fe:27:33:05:43:f3:b3:9e:e1:0e:
         a4:46:6b:5f:e7:d7:93:8c:59:37:65:58:db:56:a1:be:f9:87:
         ef:18:80:a3:de:2f:af:ce:46:bf:56:53:f4:be:a5:13:a6:69:
         04:c7:39:2b:52:00:cc:8e:17:b6:a1:e0:d9:a6:6c:4c:a8:d2:
         ab:35:2a:de:99:5b:23:34:6f:f4:c9:02:88:ff:bf:19:b5:11:
         c0:ed:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:39:31 2025 by rpki-client