Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/375F7DAA0C3911EB828BDC25C4F9AE02.roa
File:                     375F7DAA0C3911EB828BDC25C4F9AE02.roa (raw, json)
Hash identifier:          hCv4wxJX5+ETdeFNVL5GtKS1rPvCsBD6zv5q8RT353s=
Subject key identifier:   1E:00:C5:50:8C:45:69:EA:C7:E3:A3:1E:95:32:E2:FE:71:CE:7C:9C
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       0827
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/375F7DAA0C3911EB828BDC25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:38:49 +0000
ROA not before:           Mon 31 Mar 2025 21:51:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     24572
IP address blocks:        103.2.72.0/22 maxlen: 22
                          114.110.48.0/20 maxlen: 20
                          114.111.64.0/18 maxlen: 18
                          124.83.128.0/17 maxlen: 17
                          183.79.0.0/16 maxlen: 16
                          2400:7e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
                          rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: Mar 31 21:51:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fb19-f27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:03:31:8e:d6:be:ae:b1:21:18:4b:49:36:
                    85:82:0f:fe:af:35:76:eb:27:25:cc:5b:3a:70:51:
                    9e:61:fa:ea:3a:8f:cb:7d:9e:75:6d:b3:bf:e8:89:
                    02:11:97:d1:cd:23:1f:5c:43:8b:af:c0:0d:18:a5:
                    4b:d6:ac:ea:bd:a6:43:af:dd:bf:69:05:3a:f1:81:
                    ad:32:0c:4c:90:59:bc:68:e2:c5:d6:d0:02:dd:74:
                    76:e7:30:4e:1e:d8:3f:80:cc:8e:ee:01:3e:e1:c4:
                    00:e9:2f:e6:14:1e:81:17:e5:28:f7:33:8d:e0:af:
                    af:67:5b:78:08:ea:d5:7d:9c:88:57:a4:76:6b:c9:
                    96:81:07:b9:ba:66:36:95:da:ed:81:e6:1b:6e:38:
                    d9:a9:98:f8:a2:b1:3c:f4:fb:0a:ac:20:d4:e0:13:
                    c9:e8:64:ad:e5:4d:b2:aa:1c:55:6d:b8:02:13:1c:
                    a0:f7:a8:ee:9a:72:2d:d8:33:21:3f:41:fc:c7:62:
                    29:8d:9f:64:b2:71:04:09:da:22:10:25:5c:b5:7c:
                    46:61:79:4d:45:ba:02:b0:37:9f:e1:06:27:54:dd:
                    a3:3a:ef:7a:24:59:b6:e0:a0:82:52:e5:0f:b3:2d:
                    75:c1:24:3c:19:40:15:00:8c:24:89:0e:2a:96:90:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:C5:50:8C:45:69:EA:C7:E3:A3:1E:95:32:E2:FE:71:CE:7C:9C
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/375F7DAA0C3911EB828BDC25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.72.0/22
                  114.110.48.0/20
                  114.111.64.0/18
                  124.83.128.0/17
                  183.79.0.0/16
                IPv6:
                  2400:7e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:43:cd:93:1f:84:e8:ab:a5:af:cf:d4:1a:7e:a0:fc:d6:
         b0:aa:ad:35:b3:44:c1:82:28:1a:b5:02:24:42:8b:67:c1:73:
         63:04:b3:1f:e0:24:08:b3:7a:0e:de:db:ab:33:9a:0b:46:89:
         c9:0e:cf:a7:92:74:65:55:c6:31:91:e5:e4:e2:18:b1:9f:dc:
         9b:8b:14:c9:27:58:f8:04:2e:12:06:7a:7a:6f:d0:71:d1:af:
         d5:1c:d7:e4:32:4c:f0:8c:02:7b:ae:b4:10:41:6c:1e:ea:f1:
         c6:73:d5:d5:81:28:d9:58:82:2f:de:95:0d:a5:2a:e5:e8:63:
         a1:1f:19:c0:d0:db:3c:5c:86:93:85:15:04:00:df:fc:d2:11:
         f7:3d:b9:90:e0:b5:2b:81:8f:db:cf:82:54:a1:dd:ba:22:3b:
         3b:dd:12:10:db:26:ae:5d:4d:67:ba:76:75:51:23:0c:35:96:
         84:97:a6:15:71:aa:80:de:ce:79:7b:8d:d3:47:72:46:8f:1a:
         35:08:8c:d3:d8:a5:09:49:aa:58:47:50:e0:da:a9:07:db:90:
         15:2a:7e:ed:eb:19:9a:36:b0:4f:61:2c:b4:d7:ef:d5:6d:1c:
         b2:8c:7e:12:76:5c:12:47:dc:2e:6c:d7:03:31:53:0c:0f:82:
         c9:7c:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:45 2026 by rpki-client