Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
File:                     77465F12874511EEBEA58225C4F9AE02.roa (raw, json)
Hash identifier:          1ktz58oPWK1mWnJ0GHBN9F0h7QAHs8E9Qdcft66l0eQ=
Subject key identifier:   1A:7A:08:CF:E1:75:01:11:BF:6E:3D:66:67:AE:5C:22:BC:C1:4F:79
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       0574
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 00:17:12 +0000
ROA not before:           Sun 31 Aug 2025 00:17:12 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     1299
IP address blocks:        103.168.34.0/24 maxlen: 24
                          103.168.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D, serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
        Validity
            Not Before: Aug 31 00:17:12 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b39488-38d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c0:56:36:af:40:8f:32:b6:26:aa:a0:bc:70:
                    0e:70:2e:0e:9e:c6:93:77:24:ea:1a:36:74:99:c0:
                    40:3e:f4:cf:90:79:8f:18:02:da:82:30:01:4e:c8:
                    83:3a:43:e2:be:f5:0b:ce:2e:26:0b:44:17:66:21:
                    9e:d6:d1:82:23:c1:96:c8:cb:52:08:f1:61:f0:e2:
                    3e:ee:09:29:e9:43:04:d7:d2:55:5c:96:25:5a:75:
                    46:22:ed:ec:c1:77:cd:bb:97:70:0b:a4:1a:8f:99:
                    7d:04:4c:b6:bc:d4:a9:8e:2c:f0:bc:c1:3d:09:9b:
                    eb:52:4a:f3:95:ce:19:eb:95:66:b5:76:7d:6b:04:
                    61:5f:41:f6:7e:02:57:0a:8f:1c:a6:c3:60:51:5a:
                    dc:92:52:76:9f:50:78:20:62:d0:10:b5:65:a6:ea:
                    83:3f:ef:cc:40:49:f9:76:0d:b4:fa:c4:f5:e9:6c:
                    6a:ae:d7:b3:9e:7e:56:ba:e0:51:2d:59:ac:b5:28:
                    c8:36:c1:3e:ee:2c:66:94:37:69:4c:f8:0a:a7:bc:
                    f2:a3:1f:ed:13:f5:76:07:f7:61:ec:d9:27:f0:2c:
                    7a:c0:6b:ab:13:85:16:46:24:ca:91:2d:a1:65:38:
                    d2:a9:da:fe:e6:17:a8:fb:d5:53:a9:b0:f2:87:a8:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:08:CF:E1:75:01:11:BF:6E:3D:66:67:AE:5C:22:BC:C1:4F:79
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:82:d8:24:0a:13:4c:b5:64:30:df:26:69:04:3d:a2:e6:95:
         7e:f8:4a:c7:a7:eb:66:f9:58:d1:43:b9:91:8d:30:9a:ab:4e:
         29:13:e1:78:89:f5:bf:e7:90:32:6f:83:5c:e2:9b:73:88:0b:
         e7:28:cb:1b:ee:db:d5:48:52:fe:cb:c5:6e:53:65:5e:a0:77:
         2e:f6:f6:35:45:75:50:3a:1c:dc:e4:cd:d2:81:53:8e:75:37:
         63:44:99:2b:dd:eb:f1:88:94:65:30:30:bc:a2:e8:0a:57:4d:
         71:0a:34:a3:ff:59:86:03:53:7e:54:6d:f0:57:ca:c0:0f:e1:
         66:59:9a:48:49:ee:07:92:ae:31:b0:68:a2:ca:d5:d2:c0:b8:
         f3:43:81:4d:b9:25:4a:c6:1d:8a:fd:a2:b1:f3:15:ad:26:40:
         38:bc:1b:c4:14:a7:3a:99:ea:d6:f9:1c:1a:de:69:b0:38:12:
         99:39:7b:e8:b4:5f:af:a0:89:2b:ba:c7:57:70:ce:29:f3:98:
         3d:65:eb:e9:a2:85:c0:1e:eb:13:6e:f8:20:60:6f:6c:7d:b2:
         00:46:fd:cb:9c:ea:b7:b0:4c:78:35:2b:68:c8:76:c6:e3:59:
         23:94:1b:16:65:08:3a:d2:24:53:6e:e7:c3:04:08:fc:0e:1e:
         1b:50:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:28:36 2025 by rpki-client