Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/747C7164462C11ED90035452C4F9AE02.roa
File:                     747C7164462C11ED90035452C4F9AE02.roa (raw, json)
Hash identifier:          1a1oFoGFg4z9COS3sVKdT2DRynjX2oDLbF1YK4RMQfg=
Subject key identifier:   77:2D:FA:E7:AF:21:12:9F:E2:5A:2C:F1:A2:B0:6E:AE:90:D1:95:53
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       37B4
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/747C7164462C11ED90035452C4F9AE02.roa
Signing time:             Wed 20 May 2026 06:55:27 +0000
ROA not before:           Wed 20 May 2026 06:55:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     17469
IP address blocks:        175.29.124.0/22 maxlen: 24
                          175.29.140.0/22 maxlen: 24
                          175.29.144.0/22 maxlen: 24
                          175.29.160.0/20 maxlen: 24
                          175.29.176.0/20 maxlen: 24
                          175.29.192.0/21 maxlen: 24
                          202.22.192.0/20 maxlen: 24
                          203.76.144.0/21 maxlen: 24
                          203.82.192.0/20 maxlen: 24
                          2404:150::/32 maxlen: 32
                          2404:150:100::/48 maxlen: 56
                          2404:150:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14260 (0x37b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: May 20 06:55:27 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0d5adf-09e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:6f:72:95:5b:27:6e:72:63:f8:05:b9:82:
                    61:26:eb:a3:9d:be:51:5d:e6:f9:28:ee:58:8a:80:
                    df:e5:2a:ab:1e:6f:82:bd:d1:88:6c:3d:74:1a:31:
                    d5:0c:0e:5b:cd:d0:33:b1:ff:a0:b5:51:3e:0a:19:
                    a0:e4:21:43:9d:ec:be:6b:81:de:27:b7:5a:a5:70:
                    39:70:4c:4d:b3:44:df:b6:2c:41:d9:f5:e6:b6:2d:
                    81:20:e5:cf:7b:2e:5b:69:49:d5:32:c5:1a:da:9d:
                    db:a6:f1:cf:c9:e8:7c:d2:82:bc:af:81:dd:5a:2e:
                    6e:bc:35:0f:68:40:29:63:97:a2:a7:81:c6:05:6b:
                    a5:89:73:5b:d1:44:c9:30:9b:f9:ee:c3:b0:b4:7a:
                    90:02:3d:e4:9b:b0:12:38:d5:45:b8:d3:68:c1:ea:
                    19:ee:fa:77:18:95:0c:88:0c:58:05:bf:0f:dd:be:
                    19:83:19:55:3b:5c:e3:cd:c3:74:6c:c0:9a:50:f8:
                    c1:da:91:e4:eb:ca:6e:d3:75:49:9c:bc:fe:f8:76:
                    1c:37:bc:61:d6:ad:98:47:44:5e:2d:38:20:dd:f4:
                    bc:7d:61:99:74:ad:9b:f2:39:fc:50:67:e3:51:f6:
                    d8:8e:41:f8:8f:a9:9b:18:1c:2a:cf:3c:2f:0c:01:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2D:FA:E7:AF:21:12:9F:E2:5A:2C:F1:A2:B0:6E:AE:90:D1:95:53
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/747C7164462C11ED90035452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.124.0/22
                  175.29.140.0-175.29.147.255
                  175.29.160.0-175.29.199.255
                  202.22.192.0/20
                  203.76.144.0/21
                  203.82.192.0/20
                IPv6:
                  2404:150::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:f4:35:3e:3c:2d:d6:d9:e3:f6:ff:c3:90:47:cb:1f:66:46:
         92:e5:0e:55:e8:5a:a8:ae:a3:9c:a2:54:00:57:28:90:cc:1e:
         e4:9e:40:29:20:a9:51:e9:4b:4c:42:5a:0f:10:2a:ae:31:3e:
         ea:c3:dd:0a:38:26:3c:9d:96:71:c3:6b:77:5c:0d:ac:e3:e5:
         1c:fb:f8:a8:94:23:92:2e:5c:d0:3f:c9:12:37:37:2e:df:6b:
         bb:77:3f:92:1f:07:81:b2:4c:ca:59:0f:ca:f3:64:f0:12:17:
         33:cd:ce:5f:63:b4:81:10:b1:19:35:21:90:7d:ff:8e:72:32:
         3a:2c:41:d9:bf:67:49:81:97:46:60:1e:e0:00:e8:16:38:fe:
         7d:f1:e7:65:8d:7f:84:bc:b9:40:d0:8e:bb:b6:3f:12:9b:d1:
         17:51:b5:59:61:55:9c:c0:d2:31:e2:46:f8:4d:57:c7:b5:21:
         ae:12:65:18:3d:8d:cc:83:ed:ec:06:e7:20:68:f6:9a:64:6b:
         c1:c7:db:0b:20:b1:ca:83:1c:b2:bb:34:4e:51:d4:be:20:5f:
         ef:18:32:34:1a:db:be:e3:42:10:9c:f9:af:4c:11:68:0a:1a:
         9a:3d:fc:3c:f2:87:24:3e:f6:80:b7:fd:b8:a9:12:5c:a6:f3:
         76:f4:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:25 2026 by rpki-client