Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/747C7164462C11ED90035452C4F9AE02.roa
File:                     747C7164462C11ED90035452C4F9AE02.roa (raw, json)
Hash identifier:          1TjNjNaynoeguGpo1s0f/0MRVU3v88Sr31L9Jur+TtY=
Subject key identifier:   46:66:07:3E:16:87:18:AB:B9:8C:30:FD:84:51:F3:02:59:F8:4C:0D
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3762
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/747C7164462C11ED90035452C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:08:19 +0000
ROA not before:           Wed 08 Oct 2025 14:40:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     17469
IP address blocks:        175.29.124.0/22 maxlen: 24
                          175.29.140.0/22 maxlen: 24
                          175.29.144.0/22 maxlen: 24
                          175.29.160.0/20 maxlen: 24
                          175.29.176.0/20 maxlen: 24
                          175.29.192.0/21 maxlen: 24
                          202.22.192.0/20 maxlen: 24
                          203.76.144.0/21 maxlen: 24
                          203.82.192.0/20 maxlen: 24
                          2404:150::/32 maxlen: 32
                          2404:150:100::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14178 (0x3762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:44 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48ea3-dd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:95:54:8d:c1:ea:07:de:4c:15:6e:6d:c1:
                    6e:3b:6a:ae:92:61:62:c1:8b:03:46:71:f2:53:fd:
                    ef:5b:f5:1a:95:a3:ce:10:f7:ac:8f:ab:fa:77:2a:
                    fd:95:08:2f:bc:06:9d:45:b3:94:50:29:5d:c2:8c:
                    26:49:b7:65:68:40:cd:7b:e1:d3:6a:5b:b2:51:b8:
                    72:2b:a9:5c:69:ff:d2:73:39:a0:bd:d9:e0:e4:b6:
                    69:fc:2f:7c:ed:8f:0d:b6:2d:98:f2:8c:80:21:0b:
                    01:63:5b:8c:b3:6c:db:ba:ef:70:cc:ca:96:a7:e0:
                    61:d0:5b:93:0c:86:e1:0d:7e:b9:e9:5f:4a:c0:c7:
                    ef:64:b3:dc:e7:64:86:4d:0e:9b:1b:ff:81:53:c8:
                    ef:09:cb:80:65:fe:89:42:8d:26:f5:d8:83:e0:ed:
                    a0:e9:75:e0:6e:19:ed:0d:d4:ff:fa:a2:7f:50:34:
                    02:92:49:b9:a2:d5:9a:50:1e:ef:e8:5a:a4:f5:d3:
                    b5:41:34:b5:e8:22:36:d8:e9:02:94:ac:8f:d2:4d:
                    e1:0c:37:be:e0:fa:b2:b3:a3:c1:0d:5b:0c:ab:be:
                    01:1d:45:13:d4:44:80:4d:2a:1d:39:d8:37:91:df:
                    61:2b:8f:25:b8:b2:78:5f:77:b5:7b:b6:e1:b2:9f:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:66:07:3E:16:87:18:AB:B9:8C:30:FD:84:51:F3:02:59:F8:4C:0D
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/747C7164462C11ED90035452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.124.0/22
                  175.29.140.0-175.29.147.255
                  175.29.160.0-175.29.199.255
                  202.22.192.0/20
                  203.76.144.0/21
                  203.82.192.0/20
                IPv6:
                  2404:150::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:d3:cc:7e:31:6e:64:e7:17:4d:de:d8:a8:88:9b:cf:b3:
         7b:bd:90:17:59:4c:60:a1:79:04:6d:26:f6:ff:af:c7:45:df:
         f3:25:94:93:c1:dc:98:cd:d1:e0:67:af:c8:af:34:15:58:98:
         26:e8:b4:b1:27:4c:31:ad:e7:f4:be:02:65:4b:a7:58:77:6c:
         27:cb:a3:49:f3:e4:21:0e:55:b3:86:4f:9f:09:a6:48:46:fa:
         90:58:7f:46:79:57:48:01:66:76:a4:b3:ba:0c:32:91:4b:a5:
         f4:6a:c9:49:0d:8c:26:51:e2:27:32:95:0d:f7:cd:6d:09:48:
         10:ad:b7:fc:dc:22:b0:e8:c1:81:16:a5:aa:c8:c8:10:ba:84:
         c8:f3:1c:0f:57:16:d1:30:aa:b4:df:56:9e:23:1e:b3:4d:61:
         17:60:83:b6:94:3b:42:a0:dd:c1:4e:ec:81:a8:ee:7e:5b:c7:
         05:d0:09:3f:34:10:74:10:1d:a0:1b:ea:2a:40:4d:5d:b5:22:
         c9:c5:d3:e1:50:bb:c8:9d:a3:ea:04:eb:e1:82:f2:30:5f:77:
         56:68:f2:19:71:84:ef:3c:cf:85:21:e2:b9:83:ba:f5:5c:be:
         07:91:71:48:68:ee:2c:50:46:2b:b0:0c:c6:8c:8b:5b:6a:98:
         72:7c:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:02 2026 by rpki-client