Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/C75B642268F211EFB7A6A06EC4F9AE02.roa
File:                     C75B642268F211EFB7A6A06EC4F9AE02.roa (raw, json)
Hash identifier:          cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=
Subject key identifier:   FA:FF:8F:08:D8:C9:69:4B:3B:33:27:15:48:F6:28:FE:41:00:2E:CE
Certificate issuer:       /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial:       0206
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/C75B642268F211EFB7A6A06EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:59:00 +0000
ROA not before:           Sat 03 Jan 2026 03:25:52 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4785
IP address blocks:        36.50.84.0/23 maxlen: 23
                          103.47.186.0/24 maxlen: 24
                          103.53.80.0/23 maxlen: 23
                          103.99.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
                          rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
        Validity
            Not Before: Jan  3 03:25:52 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47e64-690d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:d3:c3:22:ef:76:88:96:a3:ea:88:93:55:
                    bd:54:25:16:b0:02:0b:cd:4d:dc:7a:5d:42:d8:99:
                    81:6d:3d:ca:c8:53:fe:3c:bc:06:08:23:3c:bc:8f:
                    e3:64:5b:6b:3b:6c:96:a2:34:b4:ad:3f:f3:02:f9:
                    23:6b:0f:14:c2:06:fa:d9:b0:d7:d3:3d:d5:cc:ab:
                    f5:19:53:20:27:79:73:59:dd:c4:cd:9c:93:81:0d:
                    d1:09:f8:33:38:14:53:62:26:60:b1:7f:c0:b9:6b:
                    38:97:e3:f2:1a:56:65:63:f5:17:a8:00:a0:cb:0d:
                    38:a1:ac:b2:c5:45:58:21:80:7f:52:db:66:f9:a7:
                    f3:b8:c8:90:87:fb:6e:60:ac:91:dc:6c:a0:2f:3f:
                    39:ab:fe:e3:63:53:c5:bb:b1:4a:a0:1d:78:74:47:
                    73:c8:3e:d4:95:93:f6:ac:14:e6:0f:83:62:b9:38:
                    86:f9:a4:2e:1a:50:25:32:37:4b:3c:f8:a3:e3:4b:
                    48:31:e5:2c:18:0d:f0:09:01:a9:44:61:e4:29:67:
                    d5:6b:97:76:f4:a9:de:1c:b1:31:3d:3e:cf:58:77:
                    17:49:35:a9:fa:7b:80:66:f8:6b:27:49:3d:f9:56:
                    4d:7f:41:d0:99:d8:3c:b9:4d:a0:09:e0:09:68:82:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FF:8F:08:D8:C9:69:4B:3B:33:27:15:48:F6:28:FE:41:00:2E:CE
            X509v3 Authority Key Identifier:
                keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/C75B642268F211EFB7A6A06EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.84.0/23
                  103.47.186.0/24
                  103.53.80.0/23
                  103.99.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:48:f5:5e:8b:be:13:a7:11:bb:68:2d:bd:0e:f4:4f:44:d4:
         7e:6f:49:b6:97:69:3d:e9:1f:58:cc:54:66:db:7d:cc:e4:9d:
         42:f5:b9:4f:50:c7:9d:a2:72:48:d6:6b:8f:42:d1:4e:88:23:
         26:5a:5e:49:e1:d9:4b:d7:5c:aa:08:01:ef:23:92:4d:39:66:
         6c:7c:8a:ae:ea:8e:27:c3:fd:47:96:08:c9:b0:d3:d7:64:1d:
         f9:36:10:b3:54:6a:a0:4d:61:b6:ec:9d:ad:5d:16:c8:9a:a4:
         79:ff:9d:16:02:13:8a:ed:82:72:77:a4:13:ef:5d:85:d2:61:
         4a:90:6d:93:d3:07:9d:16:0a:24:ae:d4:c7:6a:18:d0:a4:30:
         4c:18:c6:18:6f:cd:2b:7a:61:2b:32:51:04:b9:b3:c4:af:94:
         a1:9b:63:ec:9c:f9:1a:fc:08:a0:dd:72:07:ed:cc:8a:3f:10:
         a3:21:0d:6d:ec:aa:cd:ff:4e:c9:71:f4:73:93:4b:6c:a8:8f:
         2b:15:16:67:0d:79:c4:65:e3:69:3c:c4:8d:a4:57:45:b9:8b:
         92:ce:3f:37:b7:4e:66:b7:9d:6f:62:06:9a:c3:40:6a:93:29:
         2c:f4:79:1f:c1:58:fe:0d:f7:77:41:cc:74:b4:7a:df:a7:b0:
         3e:46:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:47:34 2026 by rpki-client