Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa
File:                     18CA7386E35511EDA63D5182C4F9AE02.roa (raw, json)
Hash identifier:          YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=
Subject key identifier:   03:80:A4:65:FF:50:17:E8:35:90:A0:FC:B3:F8:72:C2:0C:CB:81:EC
Certificate issuer:       /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial:       0D00
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:40:21 +0000
ROA not before:           Fri 26 Dec 2025 18:15:14 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134437
IP address blocks:        103.77.60.0/22 maxlen: 22
                          103.77.60.0/24 maxlen: 24
                          103.77.61.0/24 maxlen: 24
                          103.77.62.0/24 maxlen: 24
                          103.77.63.0/24 maxlen: 24
                          2407:8a80::/32 maxlen: 32
                          2407:8a80::/48 maxlen: 48
                          2407:8a80:1::/48 maxlen: 48
                          2407:8a80:2::/48 maxlen: 48
                          2407:8a80:3::/48 maxlen: 48
                          2407:8a80:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
                          rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3328 (0xd00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
        Validity
            Not Before: Dec 26 18:15:14 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a44fd4-0511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:a8:40:12:fe:95:96:d7:cd:2d:e1:f1:bb:
                    39:59:b6:9b:42:6f:45:39:d6:8e:b7:e3:62:f1:73:
                    4d:5b:a8:b5:77:e6:50:c4:31:80:52:71:ac:11:c2:
                    e7:1f:62:cc:05:f3:47:0b:4f:71:4f:27:8e:a8:ca:
                    6c:21:e5:85:7d:7f:3a:7e:04:97:81:55:10:21:37:
                    84:bb:89:db:9c:ee:91:c8:86:c6:e3:72:03:31:fc:
                    bd:d8:b7:aa:b0:65:6e:f4:76:6a:29:02:95:fe:1f:
                    b7:0f:ff:d5:ab:98:80:14:cc:3a:d4:38:8c:0b:d9:
                    5f:ae:79:94:13:7c:95:95:14:f4:91:8d:df:d9:b1:
                    ab:e9:d1:4f:52:40:c0:23:4c:09:8b:4d:18:7d:21:
                    de:22:2d:70:d7:0a:11:05:d2:ed:b7:a0:48:7b:1b:
                    13:4e:c5:8b:02:b8:90:3a:62:c7:0e:b7:ee:04:11:
                    1e:d6:7b:9b:b1:40:70:cd:d7:da:75:2f:5b:ac:f3:
                    4a:5e:24:df:1b:0d:d4:f0:fa:f3:8b:c4:c9:d6:10:
                    60:38:91:90:cb:c2:dc:7d:bd:c7:55:0e:02:20:a0:
                    a4:7f:0a:93:be:7f:42:68:26:87:cf:e5:55:0b:dd:
                    af:d2:89:59:c2:61:43:ec:ab:2d:63:d0:6e:15:a9:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:80:A4:65:FF:50:17:E8:35:90:A0:FC:B3:F8:72:C2:0C:CB:81:EC
            X509v3 Authority Key Identifier:
                keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/18CA7386E35511EDA63D5182C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.60.0/22
                IPv6:
                  2407:8a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:60:5e:da:59:6b:71:fc:03:3d:4f:09:fb:1a:8e:46:c0:48:
         27:47:66:cd:c9:1d:c6:ac:f5:7f:1a:d1:b0:d7:1e:6b:a3:25:
         e3:d7:12:b9:cb:97:3e:5c:d9:0d:86:9a:12:e7:e7:60:fd:8d:
         03:7c:8d:00:a7:e8:52:36:53:0f:56:8c:1f:95:60:2a:8c:33:
         2a:8f:f5:77:4d:86:0a:94:a5:fe:45:d9:74:0c:52:6c:66:33:
         43:53:e1:d8:a6:2f:e3:f0:e1:dd:14:52:2a:96:0a:50:f4:43:
         a2:04:2e:b6:6a:7e:9c:ef:a6:9f:2e:3b:e7:c5:a0:af:78:d5:
         0a:50:f6:d1:16:2d:0f:ad:75:e0:90:c1:62:5c:b0:71:3d:59:
         b0:da:92:4b:d4:fb:d1:f6:59:f7:e9:ee:a6:d2:58:e0:43:ff:
         6a:14:56:38:b0:df:8a:6f:12:60:59:5f:17:78:81:b8:91:b1:
         82:75:7a:3d:29:86:2e:a7:82:56:e6:11:10:f4:84:95:b5:25:
         f3:e3:66:a3:47:6c:bd:ff:e9:15:2b:59:59:eb:48:6b:3b:f7:
         15:d4:2a:73:1e:7c:1c:4f:6d:96:d3:30:b1:00:b7:f9:51:07:
         62:aa:ca:03:7d:b1:be:51:f4:1b:7f:e6:4b:80:ba:c2:2c:1a:
         eb:33:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:40 2026 by rpki-client