Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
File:                     573BE4DE3D0811EF84157B26C4F9AE02.roa (raw, json)
Hash identifier:          8qsCKXW1PnkeYNlCGo4/GnAMha9Fa7HghDmajg38QjM=
Subject key identifier:   0D:93:88:23:D1:F9:C8:F4:3F:58:F5:F7:38:5C:A5:53:46:E5:7A:2A
Certificate issuer:       /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial:       0142
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:06:54 +0000
ROA not before:           Wed 11 Jun 2025 05:45:25 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     27385
IP address blocks:        103.75.172.0/23 maxlen: 23
                          103.75.172.0/24 maxlen: 24
                          103.75.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
        Validity
            Not Before: Jun 11 05:45:25 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5997d-f4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:0f:e2:c7:9b:c4:19:bb:a1:4b:f2:6a:95:
                    04:5b:23:75:38:ac:0e:59:ec:7e:39:1f:1d:e3:f3:
                    e8:69:5c:eb:2c:13:6f:24:61:5f:9c:11:2f:41:d0:
                    3a:25:e1:a8:ef:83:e4:2c:78:a9:bb:be:02:43:9f:
                    4a:16:27:89:bf:56:ca:b1:7c:65:af:5d:bf:ad:c2:
                    91:cb:7c:90:a9:32:25:6d:e3:27:6b:3c:21:e4:57:
                    5d:ac:55:f0:f3:96:ce:b4:8b:b3:a6:66:90:37:f0:
                    4e:06:0b:8f:ae:88:cc:12:0d:50:6d:4e:03:39:48:
                    ec:e4:6a:a9:44:12:86:d0:da:8c:5e:7d:b1:83:4e:
                    51:89:0f:80:32:87:28:26:65:6c:3d:56:28:21:1c:
                    87:f8:66:85:59:7c:ba:40:dc:65:a4:88:30:b5:0e:
                    9e:5d:8f:bd:37:eb:62:75:00:8f:12:0e:09:d4:f3:
                    e9:6f:f2:c3:03:7a:29:73:32:6d:21:9b:e1:50:ea:
                    d3:cc:11:04:9e:9f:76:1a:f7:dd:50:fa:c8:63:9c:
                    8b:7a:f8:1e:93:0f:e3:5a:f5:4d:c3:db:fb:3c:e0:
                    db:df:d7:6f:eb:4f:c5:af:f9:99:ad:f1:f8:34:d2:
                    7a:c7:12:b6:c0:61:fb:dc:4a:16:48:6b:75:10:60:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:88:23:D1:F9:C8:F4:3F:58:F5:F7:38:5C:A5:53:46:E5:7A:2A
            X509v3 Authority Key Identifier:
                keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:28:22:ef:93:c8:2e:3a:78:e1:15:e6:ea:f9:a6:6f:37:b6:
         54:f1:6b:bf:61:af:fa:db:fc:cd:c9:96:b8:a1:dc:84:a4:a6:
         0b:c5:8f:b5:b4:2d:f4:8a:07:74:da:d9:1b:86:af:be:43:25:
         ab:d4:04:cd:ea:3c:06:70:50:a6:f7:57:a7:d1:20:51:2e:b1:
         7a:c3:c4:e1:41:63:ff:7f:e3:98:d3:73:07:46:0e:e4:4c:cf:
         35:5f:7b:09:81:97:d0:e5:f5:08:c6:1a:de:6b:46:fb:91:8a:
         75:99:43:53:60:4f:da:a9:97:d3:fd:fd:87:2c:a9:42:f0:f5:
         51:1d:d1:f8:33:85:b2:c9:a0:ae:c4:40:f1:1d:79:67:82:dd:
         eb:a5:e4:de:07:f8:25:47:9a:90:82:13:7c:93:48:ec:93:a7:
         9b:c9:2e:30:a4:e6:c0:c7:73:19:ba:32:c8:00:c0:70:02:12:
         ca:95:34:86:81:fd:1c:be:47:1f:14:15:ba:ab:e8:52:f3:5b:
         91:2a:e8:f3:c3:b0:38:16:5f:75:51:52:03:06:08:d7:8e:1e:
         66:70:56:47:6d:16:22:77:df:ec:ee:19:34:53:3b:21:43:3d:
         f8:b4:bc:11:93:2e:4c:e9:fb:8f:9a:01:f7:29:dc:77:f7:c1:
         75:1a:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:23 2026 by rpki-client