Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/77EDB752588311EA98A7C452C4F9AE02.roa
File:                     77EDB752588311EA98A7C452C4F9AE02.roa (raw, json)
Hash identifier:          eLp4LMqTQQ7wQVmCxd5TEfP0lAEMCR6K3GMmHN2veeg=
Subject key identifier:   2F:CA:85:0F:CE:71:30:9D:50:2E:5B:3C:DA:B3:4C:82:2F:B5:6E:2F
Certificate issuer:       /CN=A914CD2D/serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
Certificate serial:       0ADB
Authority key identifier: 32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/77EDB752588311EA98A7C452C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 20:00:45 +0000
ROA not before:           Fri 04 Jul 2025 20:00:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132826
IP address blocks:        103.19.32.0/24 maxlen: 24
                          103.19.33.0/24 maxlen: 24
                          103.19.34.0/24 maxlen: 24
                          103.19.35.0/24 maxlen: 24
                          110.92.24.0/24 maxlen: 24
                          110.92.28.0/24 maxlen: 24
                          110.92.29.0/24 maxlen: 24
                          110.92.30.0/24 maxlen: 24
                          203.55.67.0/24 maxlen: 24
                          203.171.6.0/24 maxlen: 24
                          203.171.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl
                          rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 19:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CD2D, serialNumber=32952EA461956356D377EBDD4BFA1872A8E1E443
        Validity
            Not Before: Jul  4 20:00:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686832ed-0364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:42:1a:c3:96:2c:54:ec:66:3f:05:4a:77:
                    25:9a:b3:1c:41:11:43:eb:e9:8c:cd:58:8d:17:5f:
                    86:a8:47:5f:10:1b:54:22:26:33:32:18:27:c1:04:
                    00:82:4a:11:fa:a7:21:c1:2e:38:62:a9:5a:92:13:
                    0c:41:73:3d:af:b1:19:50:ef:3f:71:19:ae:c2:a4:
                    4b:bc:37:ce:e6:ec:e1:af:1a:3d:f9:75:4a:4b:6c:
                    fc:a2:2c:2d:ca:1c:33:0f:13:e2:0c:3e:66:0c:8b:
                    6e:ed:68:93:a8:a1:07:b8:77:ff:e6:bd:7f:71:64:
                    a7:5d:a8:aa:9c:03:4d:81:75:a1:be:a8:02:e3:54:
                    16:e1:8a:3a:3b:4a:a8:da:bb:76:a4:00:2f:ef:d7:
                    e6:a3:04:65:4c:aa:c8:98:16:3f:b7:3c:42:12:71:
                    a0:d1:77:ec:89:5c:d8:35:b5:c9:ee:de:2a:e5:6f:
                    46:02:47:94:69:c5:fd:80:e8:4a:e6:d3:a6:a9:a1:
                    57:ef:44:ca:1d:92:e4:53:2f:dc:7c:96:b2:9d:bc:
                    07:bc:06:1d:d8:93:53:cc:1e:fd:96:d1:59:38:9b:
                    60:e9:45:25:9f:84:2b:f7:fc:9f:8b:78:4d:7a:2f:
                    60:0a:8d:bf:91:2c:58:88:f1:22:97:b4:dd:b7:84:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:85:0F:CE:71:30:9D:50:2E:5B:3C:DA:B3:4C:82:2F:B5:6E:2F
            X509v3 Authority Key Identifier:
                keyid:32:95:2E:A4:61:95:63:56:D3:77:EB:DD:4B:FA:18:72:A8:E1:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/MpUupGGVY1bTd-vdS_oYcqjh5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MpUupGGVY1bTd-vdS_oYcqjh5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CD2D/94FF1FBC588211EA95B47F51C4F9AE02/77EDB752588311EA98A7C452C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.32.0/22
                  110.92.24.0/24
                  110.92.28.0-110.92.30.255
                  203.55.67.0/24
                  203.171.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:78:d0:ab:37:a0:f5:e3:8f:8d:33:94:c3:b2:c7:29:ef:24:
         47:d7:b6:5c:e3:5f:46:52:b8:cc:80:92:ed:d0:b8:60:4e:6e:
         24:51:01:48:e7:01:9f:61:5c:15:fb:36:49:68:9f:41:cc:60:
         5e:dc:c7:95:94:57:62:81:3f:a9:d7:e3:42:45:eb:d7:8d:0b:
         ca:00:dd:4a:0a:69:51:97:99:c0:57:56:cf:83:fe:e8:49:4d:
         a3:e6:94:58:01:65:ab:0d:d2:29:a1:50:13:f0:e0:62:56:de:
         7b:d6:f2:b8:8d:a3:9e:7f:c3:70:c0:4e:15:60:cf:bc:69:34:
         dc:99:7b:d1:ca:5a:46:62:fa:ec:02:ca:aa:4b:c0:c7:5d:d3:
         5b:f0:6a:a7:d1:38:eb:6b:0a:c8:bb:d2:fe:a0:c5:49:6a:c0:
         8e:b1:3c:3b:f7:63:c0:2f:b5:97:1a:e2:51:9f:cd:6f:dd:b6:
         79:c8:66:dc:98:52:cc:ae:82:ec:c6:3a:70:0f:ca:30:34:02:
         53:a8:7e:b1:52:c0:d0:26:f1:b4:15:a4:71:84:e1:6a:63:b4:
         c9:21:2d:11:57:75:2e:67:a7:a9:17:a2:a8:11:75:63:7b:4e:
         85:49:a5:41:4b:2a:b9:a3:54:ea:6d:df:c1:3d:ec:20:80:83:
         94:99:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:51:38 2025 by rpki-client