Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/75FC6CC2753711EC9091CB62C4F9AE02.roa
File:                     75FC6CC2753711EC9091CB62C4F9AE02.roa (raw, json)
Hash identifier:          UZnHMueWtrpb+JywnXsopY8oC5x4rGsb8m2Kk1OPC6Q=
Subject key identifier:   F6:A1:D3:98:1B:67:D3:94:6A:9D:D2:AF:63:1D:92:74:D1:7D:09:F0
Certificate issuer:       /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial:       049B
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/75FC6CC2753711EC9091CB62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:48:56 +0000
ROA not before:           Sat 11 Oct 2025 02:26:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132742
IP address blocks:        43.243.44.0/22 maxlen: 24
                          103.38.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
                          rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
        Validity
            Not Before: Oct 11 02:26:57 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45fe8-d901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:51:2d:36:29:9c:3e:67:63:8d:3f:f6:d9:
                    56:02:90:e1:1b:d6:27:10:37:d6:f4:c2:86:d4:f1:
                    34:f2:bb:4f:58:a5:ae:82:2f:e8:39:c9:cf:3c:78:
                    9e:72:30:21:c6:a2:91:d3:be:19:29:4c:52:e6:68:
                    0d:9d:4a:3a:a7:35:5e:32:13:14:ef:3b:19:49:c9:
                    c5:20:99:eb:46:51:5a:5f:e7:dc:9f:32:2a:bf:ff:
                    ce:4c:20:4d:b7:0f:61:cb:bb:64:18:b4:d5:f9:e8:
                    d5:48:62:cb:8c:4b:d1:05:22:bf:6a:98:70:ad:78:
                    96:cb:ea:28:a7:8f:a0:fc:60:21:2d:ee:15:cb:fd:
                    d7:04:03:3a:57:3e:26:c2:d4:c4:99:39:40:5f:03:
                    b3:9d:80:a5:18:d7:ea:c9:05:c4:c4:a0:2f:c8:2c:
                    94:b1:ad:6a:18:fb:59:5a:99:d8:1d:6c:92:49:4f:
                    b5:ac:69:f1:3f:21:a3:4d:e0:df:08:ae:62:bd:94:
                    09:d9:3c:e3:a1:09:38:ad:f1:c2:75:ec:5b:1a:4a:
                    22:7e:05:e1:cc:3f:be:7e:36:10:b6:c8:e4:19:1e:
                    72:2d:e4:71:f1:9d:d8:ec:25:b5:72:cb:f0:ea:39:
                    f7:c6:25:9a:a2:51:9e:49:6a:4d:15:02:53:db:4b:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A1:D3:98:1B:67:D3:94:6A:9D:D2:AF:63:1D:92:74:D1:7D:09:F0
            X509v3 Authority Key Identifier:
                keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/75FC6CC2753711EC9091CB62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.44.0/22
                  103.38.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:c4:7c:0f:e4:b9:54:d9:2a:ab:bf:63:33:fd:81:b4:df:79:
         61:fc:53:e1:a8:08:57:5f:27:c8:c0:72:6b:53:17:77:f2:6e:
         e0:88:b1:39:e8:76:e8:e8:10:c1:85:1b:56:fe:c0:5d:90:f6:
         fc:65:1b:bf:03:1d:45:26:7f:7d:c6:2d:39:64:65:e4:17:4b:
         5c:0a:48:94:98:54:35:1f:d6:36:c2:35:89:b8:91:13:3c:10:
         50:86:75:4a:18:3b:3a:46:db:c5:b1:12:15:35:71:a2:79:5f:
         6c:5c:3b:39:38:a0:4f:cd:57:dc:c5:dc:c6:2d:66:da:49:3e:
         b0:5c:6e:22:8e:5c:f3:6f:95:5b:86:75:e3:c4:9a:d0:47:60:
         8d:7e:51:ad:46:94:4a:d0:de:4e:27:d2:5d:29:65:f0:64:03:
         bf:18:49:7a:0c:59:c3:f7:14:a4:d3:5c:38:b9:f4:f1:2e:72:
         04:b6:0e:c1:db:8f:74:1c:69:d2:33:fd:49:f8:73:b7:99:88:
         8a:36:e0:06:a8:dc:cb:10:c7:75:35:13:72:8a:7c:24:17:1d:
         62:93:16:6d:32:24:65:e5:e2:2c:67:e7:74:b1:ca:68:d3:9b:
         c2:96:67:c5:77:a2:d1:95:43:f0:03:fb:41:db:96:6e:07:86:
         7b:cc:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:45 2026 by rpki-client