Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/75FC6CC2753711EC9091CB62C4F9AE02.roa
File:                     75FC6CC2753711EC9091CB62C4F9AE02.roa (raw, json)
Hash identifier:          09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=
Subject key identifier:   F3:97:23:00:2C:97:88:D4:12:18:93:10:23:C1:08:33:61:96:8D:B7
Certificate issuer:       /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial:       044D
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/75FC6CC2753711EC9091CB62C4F9AE02.roa
Signing time:             Sat 11 Oct 2025 02:26:57 +0000
ROA not before:           Sat 11 Oct 2025 02:26:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.44.0/22 maxlen: 24
                          103.38.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
                          rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
        Validity
            Not Before: Oct 11 02:26:57 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e9c070-0c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:b9:23:a3:a3:25:82:46:09:b1:df:c6:b4:
                    ed:8f:67:44:44:48:6a:c1:3f:91:04:05:3d:24:90:
                    95:a4:54:46:b0:c7:92:d2:f9:30:ac:f5:f5:92:1e:
                    d9:4d:84:f2:6f:dd:78:fe:7c:1e:f0:e6:d1:1e:dc:
                    30:42:cf:d1:bf:c9:a8:12:d5:5f:35:fd:7f:1c:d3:
                    73:2e:10:c9:57:ee:60:82:1c:2e:93:ea:7f:29:c4:
                    ec:d6:3c:80:f7:8f:5c:79:56:6c:94:e0:62:b4:3c:
                    ba:11:df:bb:dc:cb:e3:73:a1:38:09:d2:a4:1c:27:
                    23:e7:87:4a:8b:fd:85:0b:7d:ca:be:a1:69:1e:7e:
                    e7:70:a2:01:d7:7a:3e:dc:b2:66:2b:4a:c1:9a:7a:
                    90:d4:d6:2c:8b:f6:a7:b2:07:27:b0:88:09:ca:91:
                    6e:77:3a:bc:f1:18:ea:30:3a:44:7c:e5:79:f6:aa:
                    2b:93:a2:4a:e9:7e:ec:a0:89:bf:3d:d7:f8:5d:8e:
                    64:da:7b:90:bd:3f:8e:be:72:5a:71:e0:be:3d:2c:
                    6f:9b:c6:b2:ce:f6:e8:b3:d4:7e:52:6c:e9:38:cd:
                    82:90:d9:1d:c9:d6:3d:60:cf:fc:97:77:2a:2e:28:
                    34:59:dd:0d:41:fe:6d:91:49:b6:93:6e:3b:a5:a5:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:23:00:2C:97:88:D4:12:18:93:10:23:C1:08:33:61:96:8D:B7
            X509v3 Authority Key Identifier:
                keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/75FC6CC2753711EC9091CB62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.44.0/22
                  103.38.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:34:30:37:78:f3:06:0b:da:ed:3d:ff:23:0f:9c:96:bf:
         2b:17:15:bb:8f:c3:4f:1b:af:aa:53:2a:49:1d:55:0b:11:4d:
         08:f4:ec:dc:8f:bc:92:5b:a2:23:d7:d6:86:bf:c5:79:12:6d:
         d1:c8:53:b3:eb:a5:8c:5c:e3:c6:1c:0b:02:49:d5:b5:b2:15:
         a7:03:b7:47:a5:96:f6:e4:44:4b:3f:e1:94:e1:55:79:2e:69:
         cc:db:4b:62:5a:e8:27:89:ad:b9:9d:3b:60:e6:9b:c6:27:46:
         0c:18:22:74:bf:11:57:bb:40:fc:d6:c6:ec:36:64:82:c6:0a:
         27:0e:3e:16:84:6c:1d:e6:7c:6a:cf:3d:f5:64:8b:7a:2c:af:
         5c:e2:8a:ee:59:29:76:35:3a:57:14:82:80:4d:93:cc:13:96:
         e2:64:2a:df:99:c8:31:7f:10:82:87:5b:8a:54:fd:ba:dc:55:
         47:f9:0f:dc:19:97:e5:f2:85:c3:66:06:ac:ed:21:c5:b6:89:
         fa:13:8e:52:d2:fe:30:7b:48:d2:86:ee:76:f7:f2:b1:c2:b6:
         44:34:27:7e:fc:3d:10:7e:1e:d0:eb:12:ce:3d:e9:76:4d:7d:
         ed:59:d7:6c:b0:f2:58:f3:cf:69:49:55:ae:f5:62:e1:b2:50:
         d1:12:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:25 2025 by rpki-client