Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/75576E0ED0E911F0BF43FD85C4F9AE02.roa
File:                     75576E0ED0E911F0BF43FD85C4F9AE02.roa (raw, json)
Hash identifier:          n9H3Oa87Ri4QtUGXpCdNLeaiuqAhKzQ3NEWHotM4whY=
Subject key identifier:   33:59:D5:D3:E7:35:60:8D:D0:A1:2B:0A:13:41:28:94:33:B6:A3:49
Certificate issuer:       /CN=A915F38F/serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
Certificate serial:       4C
Authority key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/75576E0ED0E911F0BF43FD85C4F9AE02.roa
Signing time:             Mon 13 Apr 2026 08:44:17 +0000
ROA not before:           Mon 13 Apr 2026 08:44:17 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     37979
IP address blocks:        218.185.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl
                          rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
        Validity
            Not Before: Apr 13 08:44:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69dcace1-61ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:45:0f:8b:10:f3:3b:06:09:a4:2a:58:a5:
                    87:fa:c6:32:77:b8:75:a8:19:26:7c:93:04:84:82:
                    49:3d:11:6a:fa:8f:eb:30:9e:aa:92:35:c2:e9:9a:
                    18:cd:3d:23:ed:00:0c:b6:60:76:af:b4:ea:48:c2:
                    67:ce:a7:08:9b:8a:fd:d2:59:d4:6e:d2:e2:99:d4:
                    6d:a4:76:7f:17:49:51:9f:0e:27:be:dc:e7:0e:fc:
                    66:69:02:84:f6:6f:2b:f8:ed:90:1a:c7:9a:bb:25:
                    b0:aa:a1:e1:12:9f:ed:f2:ca:8a:ef:9c:e7:af:66:
                    bc:3e:fe:3f:0a:0d:73:dc:8d:b1:6c:2e:b6:63:1d:
                    bb:13:91:44:96:60:23:ce:b9:64:9b:6a:b1:ed:3f:
                    b1:ba:eb:6e:60:23:9a:90:42:0a:d4:12:75:1b:85:
                    ab:8c:dd:68:15:bd:09:f6:ec:1a:6f:f0:34:04:95:
                    c7:e0:b1:0b:cc:9f:95:4f:a1:10:8b:a3:ec:9c:f2:
                    2f:b0:9c:2b:db:31:87:c3:07:9b:54:30:65:f5:e8:
                    72:19:4c:53:13:b8:65:59:7e:16:74:d7:6f:de:6d:
                    7a:07:f2:60:f9:31:4e:61:8e:c1:57:f4:f9:ab:7a:
                    cd:eb:74:9b:8b:00:93:cd:29:0b:58:07:ec:ef:1c:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:D5:D3:E7:35:60:8D:D0:A1:2B:0A:13:41:28:94:33:B6:A3:49
            X509v3 Authority Key Identifier:
                keyid:4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/75576E0ED0E911F0BF43FD85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.185.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:92:d3:15:fe:eb:92:d2:a0:87:83:10:ee:e3:8a:6e:a8:
         07:bf:cd:7b:6d:c2:08:d3:27:26:a9:ea:9b:14:49:0c:f9:6a:
         49:91:39:9b:60:73:98:d7:30:7e:3f:8d:07:e6:fa:e6:c8:03:
         a5:71:1d:24:f3:19:c0:64:c2:69:a5:95:7c:1a:25:dc:c2:9e:
         d0:3f:63:58:7d:ea:ce:0f:b6:e2:56:18:ac:77:1f:7e:28:c9:
         f3:80:fa:3f:b1:a2:cb:7b:94:44:91:81:f7:34:fc:36:7d:25:
         2b:26:8e:dd:e6:6c:6d:c9:52:0f:c9:c0:b7:86:75:37:db:a6:
         f6:49:e5:67:e6:cc:97:8a:10:ca:ad:f2:8c:e0:6c:db:6e:c9:
         16:31:81:72:87:50:a5:a5:0a:32:1e:b8:b7:2b:cf:a7:7a:23:
         19:50:92:6d:72:56:28:cb:ed:70:5d:d7:5d:b3:9a:7d:e6:9e:
         22:1d:f5:f2:59:df:b5:fb:49:7b:bd:b1:d4:00:98:7c:15:39:
         c1:f4:77:07:b1:46:48:8a:f1:0c:96:22:be:7d:0c:e8:ba:e4:
         21:b1:99:3b:6c:13:ea:cf:31:4e:a1:94:3b:bc:c3:92:66:09:
         da:10:c8:a0:7c:3d:99:d2:5c:9b:01:b9:e8:eb:62:19:1e:0f:
         5a:ab:15:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:04 2026 by rpki-client