Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77F62774963511EC8CC1A777C4F9AE02.roa
File:                     77F62774963511EC8CC1A777C4F9AE02.roa (raw, json)
Hash identifier:          cZqAFqiJtr2R4E+ZadM03Q+naiWG+muVuTjXeTgxAS0=
Subject key identifier:   80:61:3A:04:AA:49:54:EF:6F:53:28:FC:19:6D:01:3B:EB:7B:D9:A3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F302
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77F62774963511EC8CC1A777C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:12:51 +0000
ROA not before:           Mon 06 Jul 2026 17:12:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141314
IP address blocks:        103.87.104.0/22 maxlen: 24
                          2001:df5:6b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62210 (0xf302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:12:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be213-93db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:91:3b:b5:a5:01:3b:78:91:34:47:02:a1:7f:
                    9d:15:14:fe:56:b5:d8:19:2f:ac:86:70:08:5d:b8:
                    41:a5:9b:de:30:23:75:57:b6:68:8c:95:43:58:22:
                    2f:c5:14:0a:4c:45:11:fa:e7:c0:d9:eb:e8:d5:57:
                    2f:17:18:f6:50:85:c4:55:29:48:d1:35:05:cc:ac:
                    39:33:9e:a2:ff:9e:37:79:89:ba:ff:5d:7d:55:e6:
                    20:42:a7:05:e5:d7:8f:b5:7c:d8:42:68:d0:71:c6:
                    c4:c7:93:27:f2:dd:c0:4d:90:7f:93:e2:22:73:54:
                    f6:e9:67:11:76:1f:b1:62:fe:10:37:b9:1d:ed:b4:
                    e1:ee:b9:75:77:7c:62:7a:06:31:6e:82:6c:e3:c4:
                    40:99:4d:74:00:0a:5b:fa:05:5d:27:c3:65:95:65:
                    08:55:31:91:01:fb:af:57:9c:29:78:45:eb:ce:01:
                    fb:77:da:b3:da:cc:c1:7b:4b:a4:2b:b8:5d:09:15:
                    c4:ba:9a:e3:c6:69:62:45:18:64:64:2b:fd:cb:9c:
                    07:5d:9c:fe:c3:43:37:54:4c:5a:dd:6a:0e:95:8f:
                    e8:38:93:8e:32:d7:f4:de:79:90:9a:83:71:16:93:
                    b6:1f:1b:71:b0:3b:e6:9f:90:91:ed:c7:42:14:3e:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:3A:04:AA:49:54:EF:6F:53:28:FC:19:6D:01:3B:EB:7B:D9:A3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77F62774963511EC8CC1A777C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.104.0/22
                IPv6:
                  2001:df5:6b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:94:8e:6d:ee:9d:0a:a7:4d:c7:2e:e5:65:ae:43:24:a8:ad:
         7f:91:89:18:6d:80:60:8e:4b:28:02:a6:8e:ac:a0:36:19:91:
         36:04:6f:5e:e1:da:8f:ee:ad:5d:da:00:69:d3:1d:31:8a:d9:
         32:a8:4f:55:e6:9a:e8:7d:e0:18:08:fe:34:7a:2a:98:36:87:
         73:ed:87:ee:a1:59:ec:d0:2e:60:42:67:07:f8:ad:dc:11:2d:
         22:00:31:9a:fe:21:b7:fd:1b:19:6f:4d:4f:4b:c1:ee:57:3b:
         54:89:e8:92:4a:c4:fd:5e:86:16:8e:1c:a0:21:3c:6b:d6:35:
         6c:d5:37:62:4d:37:84:90:98:f1:b6:fd:db:b3:2e:cd:38:19:
         0a:00:ba:40:c9:6f:25:5b:7c:7a:9b:a5:37:2a:e8:d8:13:86:
         04:e8:82:82:5a:81:72:1c:3e:84:af:15:9a:97:c5:66:12:96:
         84:7f:97:82:99:e2:14:d9:73:e0:ae:dd:40:1c:53:9c:d8:a7:
         03:70:93:0a:33:d3:08:9d:e5:fb:34:b9:96:9e:10:59:60:85:
         f2:10:1b:2a:ba:54:83:85:b6:8f:d6:0c:db:8e:38:94:67:f8:
         02:13:4a:c8:31:69:d9:b4:81:84:a2:44:12:6f:b7:51:d5:9f:
         9e:45:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:54 2026 by rpki-client