Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/F575D65A085A11EBA6864D71C4F9AE02.roa
File:                     F575D65A085A11EBA6864D71C4F9AE02.roa (raw, json)
Hash identifier:          0tPpCFmY2RtQMNi50P1oO91h+coSEhJnlpMk0tERKfA=
Subject key identifier:   A6:00:2E:00:B7:7D:F6:19:4D:2E:56:B7:B5:EC:59:5A:E9:0A:38:14
Certificate issuer:       /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial:       082F
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/F575D65A085A11EBA6864D71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:24:07 +0000
ROA not before:           Fri 10 Oct 2025 22:51:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.75.188.0/24 maxlen: 24
                          103.75.189.0/24 maxlen: 24
                          103.75.190.0/24 maxlen: 24
                          103.75.191.0/24 maxlen: 24
                          202.59.9.0/24 maxlen: 24
                          202.59.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
                          rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
        Validity
            Not Before: Oct 10 22:51:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a42fe7-2595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:d0:a8:b7:fd:ab:86:a2:05:b4:f3:0d:81:
                    02:80:6c:e6:5d:56:63:93:98:b6:89:cf:5e:17:5e:
                    8d:44:df:61:78:9d:11:ed:a2:79:ab:e4:80:d3:23:
                    9b:41:c1:2b:3b:1c:2d:20:da:91:d3:4c:5a:69:ee:
                    0d:19:56:0e:68:b4:29:24:42:a4:e7:31:3a:fc:73:
                    6d:0c:92:7e:61:ad:8b:ae:b8:ee:44:ca:2b:85:72:
                    de:51:d3:fb:ba:e5:ea:fe:e9:3e:d3:c4:d6:71:5f:
                    9c:10:dd:8d:df:65:8a:2b:ed:b3:5f:0b:60:ff:a6:
                    5a:dd:79:0a:f4:70:f1:ce:17:5b:21:60:88:9b:f3:
                    92:f9:9e:38:11:74:60:5e:04:c1:a1:b8:50:7d:d5:
                    aa:22:ba:c5:d4:12:ce:e8:41:6f:37:bb:fc:ca:d0:
                    ab:62:b0:01:80:0e:4f:83:d7:f9:35:cf:65:b6:d0:
                    1e:10:e0:7b:f2:e1:04:07:b0:f0:36:49:87:a7:33:
                    f8:4b:bd:f9:43:2c:4d:a1:8d:83:53:77:1e:69:cc:
                    bb:fe:94:73:79:de:d8:84:e9:e5:ac:f9:30:17:2b:
                    72:a1:fe:68:28:11:02:d3:3a:0b:11:2c:96:ad:9d:
                    1c:8e:22:f4:a3:c5:e9:83:3a:56:5b:70:1b:be:8f:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:2E:00:B7:7D:F6:19:4D:2E:56:B7:B5:EC:59:5A:E9:0A:38:14
            X509v3 Authority Key Identifier:
                keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/F575D65A085A11EBA6864D71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.188.0/22
                  202.59.9.0-202.59.10.255

    Signature Algorithm: sha256WithRSAEncryption
         41:40:58:6c:19:90:9d:bb:f0:d4:e1:e6:e1:7c:49:70:f2:4d:
         69:23:41:02:e4:87:cc:bf:59:a4:6f:6b:92:77:75:3c:0c:02:
         1b:b0:3b:99:fe:a0:4a:d7:f3:ad:3c:e2:de:0c:1d:63:ca:c3:
         18:c0:46:0e:56:73:26:db:4f:ca:01:8d:f0:dd:6f:2d:8d:92:
         ed:e3:1e:30:c2:78:f7:02:75:71:67:f7:35:07:82:07:16:9e:
         13:b7:a7:16:da:5d:43:1c:62:a8:b5:7d:9c:d8:8b:52:c0:f7:
         62:37:bc:b8:a7:4e:27:a8:b7:c1:48:55:2c:76:b1:8c:42:9f:
         8b:04:25:d5:26:d9:c1:34:16:fe:58:38:97:12:79:bb:ed:ab:
         ef:91:f7:e3:34:b3:ca:6b:a3:e2:f9:6f:a9:91:cd:72:54:78:
         93:9e:ea:43:28:9a:e9:fc:8a:bf:ab:f3:09:f7:27:f5:48:53:
         db:d3:57:27:4a:59:84:91:c9:c0:02:64:47:53:f2:26:ee:76:
         18:1a:a9:da:49:24:81:2a:d4:01:37:f3:7e:86:b0:89:7b:90:
         77:26:3a:7e:34:52:8b:d6:d1:ec:e4:63:34:90:34:6a:ae:67:
         f5:4f:5e:1d:31:d5:16:b2:45:12:d9:23:09:9b:2d:de:8e:4b:
         02:0e:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:12 2026 by rpki-client