Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/7599519C42F811EEBCBA9981C4F9AE02.roa
File:                     7599519C42F811EEBCBA9981C4F9AE02.roa (raw, json)
Hash identifier:          I5QliwvYU+6XY3uLDux2ljdugQkjPvN8suXRu5XZZMM=
Subject key identifier:   2D:53:EA:04:37:E8:67:4B:F6:B8:86:E8:4C:90:26:E5:0A:FE:12:31
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       01F7
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/7599519C42F811EEBCBA9981C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:02:11 +0000
ROA not before:           Wed 03 Sep 2025 04:23:04 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17794
IP address blocks:        203.145.71.0/24 maxlen: 24
                          203.145.72.0/24 maxlen: 24
                          203.145.73.0/24 maxlen: 24
                          203.145.74.0/24 maxlen: 24
                          203.145.76.0/24 maxlen: 24
                          203.145.77.0/24 maxlen: 24
                          203.145.78.0/24 maxlen: 24
                          203.145.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Sep  3 04:23:04 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a438d2-d97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8d:3e:96:a8:61:40:8a:60:04:24:36:d5:4a:
                    b0:6e:ba:52:44:ef:36:79:97:c1:d0:9a:e9:2c:34:
                    a2:63:a3:5a:60:03:53:ee:40:b9:d3:a5:4f:10:34:
                    5d:22:29:1c:39:59:19:87:1f:98:36:8b:76:e0:04:
                    f6:3f:5a:e5:7b:67:bd:79:e0:ee:a6:41:13:26:bc:
                    0b:4c:1a:6f:13:15:da:a7:23:16:42:ef:b0:ba:26:
                    14:e2:ed:d4:ad:b5:a1:91:2b:38:d8:be:5b:e8:60:
                    8a:05:03:e8:d0:f0:ee:90:6d:98:de:85:99:0e:3e:
                    83:ca:59:c9:3a:f6:80:28:02:5e:ba:ea:85:00:56:
                    52:37:e8:4a:89:31:79:83:ae:34:89:b0:54:b3:fb:
                    f1:3f:ed:d3:7f:72:0a:d4:c6:39:73:06:fa:41:ec:
                    52:92:a2:8e:33:16:61:58:f8:f6:90:dc:98:0d:7f:
                    cd:ed:08:e2:2f:0d:04:22:cc:b6:26:41:06:c1:eb:
                    c0:7f:2b:b1:8b:b8:a0:d2:61:59:e1:6c:ea:ca:fb:
                    a7:18:5b:01:ba:33:5c:ac:d9:d1:c8:95:a8:83:a2:
                    1a:98:15:d8:57:81:a4:80:98:61:05:8c:de:d6:fe:
                    06:e7:b0:3c:a4:53:1a:b9:1e:5b:8c:01:fa:16:99:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:EA:04:37:E8:67:4B:F6:B8:86:E8:4C:90:26:E5:0A:FE:12:31
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/7599519C42F811EEBCBA9981C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.71.0-203.145.74.255
                  203.145.76.0-203.145.78.255
                  203.145.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:97:07:47:e4:fc:6e:87:7d:09:b2:11:bb:35:2f:33:9d:
         fc:9b:d1:dc:42:aa:77:e3:d0:d1:a1:74:d1:52:4d:85:b5:bf:
         81:7a:36:68:2e:e8:36:5c:22:c1:ef:15:2d:a5:e7:c0:29:a2:
         4c:8e:c9:92:6c:bd:e2:3b:74:17:13:52:6b:36:a4:0f:6c:4b:
         46:40:26:b0:b1:bf:e6:f2:d9:76:97:49:85:62:ea:7e:16:ef:
         8f:ad:49:d1:ab:d1:a8:f1:14:4a:e9:ca:bc:7d:4e:00:f4:cd:
         5e:ff:60:a4:35:d7:3a:30:4a:39:f8:d7:63:1f:e3:a7:ce:21:
         ac:40:c5:ce:6f:36:a5:47:b0:60:e3:30:52:dc:d3:2f:ca:d8:
         fd:b1:38:e2:9d:b1:70:7b:c0:d8:cd:1e:64:bb:58:fe:5a:34:
         d8:15:d8:15:a2:ab:b9:c4:1a:e4:38:f4:82:49:27:75:40:0e:
         d7:b0:29:6e:2c:4c:86:cd:f1:09:f9:5c:05:af:ab:b6:ec:20:
         30:7a:78:7a:2b:61:35:23:cc:72:a6:84:5b:57:55:a4:07:ca:
         70:da:32:a7:40:67:bc:f8:b8:b3:51:8b:f0:c2:65:d7:9d:2c:
         6f:37:59:ee:c6:9f:4d:e1:c6:e9:a0:bb:8c:39:2b:9d:79:fc:
         f5:1c:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:26 2026 by rpki-client