Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/75B1806CFF1D11F0B68D691B85EE528E.roa
File:                     75B1806CFF1D11F0B68D691B85EE528E.roa (raw, json)
Hash identifier:          d0r5NiLNFy5DfeT8LQ0NlD5J218bC85OEWtBo6DHqPE=
Subject key identifier:   25:33:EA:B9:AC:F9:B8:AB:EB:2C:66:53:65:A4:71:94:D9:99:41:67
Certificate issuer:       /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
Certificate serial:       01A6
Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/75B1806CFF1D11F0B68D691B85EE528E.roa
Signing time:             Sun 01 Mar 2026 16:53:47 +0000
ROA not before:           Tue 03 Feb 2026 04:22:42 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     152140
IP address blocks:        210.87.126.0/23 maxlen: 23
                          210.87.126.0/24 maxlen: 24
                          210.87.127.0/24 maxlen: 24
                          2001:df3:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl
                          rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
        Validity
            Not Before: Feb  3 04:22:42 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a46f1b-7af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:58:0b:69:ed:91:61:77:d0:7e:0f:93:e5:
                    52:ac:32:65:c3:a5:94:0b:09:32:02:18:66:33:b9:
                    ba:80:3a:6f:63:5c:be:13:e8:c6:3b:08:1c:5a:1e:
                    46:dc:9f:ea:dc:4f:16:a9:a1:1b:a6:cb:aa:2c:2c:
                    7f:d6:23:a5:93:dc:b6:ff:88:e2:9a:ba:8a:39:78:
                    cf:60:d2:c3:23:ea:68:15:e0:b8:3e:25:aa:bd:b4:
                    7f:6c:f4:22:b2:21:a5:13:a7:79:f2:04:83:aa:b2:
                    f1:74:d2:8f:41:14:35:21:1c:95:cc:fd:64:8b:be:
                    41:9d:b5:8b:84:2e:50:b6:de:63:0e:07:0a:69:e3:
                    71:65:44:e4:bf:9b:ed:73:3a:61:78:a3:c6:fa:3a:
                    8e:2b:4a:a5:31:03:93:a2:9b:46:8b:4c:11:cb:9c:
                    ae:07:13:67:6f:9e:98:31:5d:c1:00:63:b3:8d:f1:
                    86:83:c5:02:a9:e8:22:82:6f:bf:25:58:f1:b7:9d:
                    6b:19:94:eb:25:09:35:17:b8:e2:9e:ce:74:8e:71:
                    b7:e1:87:2a:b6:74:1a:d9:3f:8e:a1:37:19:a7:d9:
                    66:44:7a:00:d3:17:b7:3e:ad:8c:5e:d9:be:c4:ef:
                    a8:02:82:d1:5e:db:c0:e4:57:74:7d:8e:44:ad:10:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:EA:B9:AC:F9:B8:AB:EB:2C:66:53:65:A4:71:94:D9:99:41:67
            X509v3 Authority Key Identifier:
                keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/75B1806CFF1D11F0B68D691B85EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.126.0/23
                IPv6:
                  2001:df3:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:1f:0c:b9:c7:33:e8:5b:54:78:02:b1:98:bf:21:d4:a0:2c:
         3e:40:5d:64:1a:ef:d8:05:3c:be:e4:fa:ef:e0:6d:94:9c:45:
         52:d7:ba:af:13:7c:4b:94:e7:80:8c:d5:91:ad:51:bb:e3:e8:
         02:ac:38:f2:15:32:f6:10:69:73:07:f3:eb:70:e3:17:94:24:
         d1:a9:fe:e8:4a:a0:9f:dc:94:05:b4:5e:68:18:60:52:95:95:
         0c:b2:1d:45:45:66:9a:d8:fb:45:8d:5f:e0:77:bd:fe:3c:2c:
         ae:d1:04:b1:c8:db:b9:2e:b2:c7:92:9d:dd:fe:b4:0a:09:44:
         e9:63:93:f6:a2:d5:cf:40:42:a0:1e:6b:6d:59:fd:99:e6:42:
         33:c0:0a:d4:0e:0a:3a:91:4c:81:0e:da:16:04:26:36:ab:71:
         eb:aa:b2:e8:db:b6:d8:8e:62:7a:db:7d:f8:3e:91:43:fe:3f:
         31:54:d5:3e:b9:89:71:65:82:42:27:10:1c:7b:6d:6b:5c:48:
         19:a1:e2:34:3f:22:e1:8b:8e:2b:6c:6a:26:cf:ad:28:ed:43:
         df:d2:42:99:72:c1:7d:22:25:0b:34:a9:68:e8:a3:91:0a:80:
         7e:bf:69:13:25:79:16:96:ae:bf:e5:bb:76:8d:00:28:3c:ab:
         24:10:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:41 2026 by rpki-client