Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa
File:                     2DAB7B74BE4211EE970F4140C4F9AE02.roa (raw, json)
Hash identifier:          Zp+vDxjgp9IBMQisqTAyGrA6N1rfRNHRmhhuRUlKotI=
Subject key identifier:   0C:FD:15:43:23:9F:CC:24:B6:CE:DA:92:80:F1:6E:A0:1B:43:EE:B0
Certificate issuer:       /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial:       01A0
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:42:22 +0000
ROA not before:           Sat 31 May 2025 05:15:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45442
IP address blocks:        164.75.64.0/20 maxlen: 20
                          164.75.96.0/20 maxlen: 20
                          164.75.112.0/20 maxlen: 20
                          164.75.128.0/24 maxlen: 24
                          164.75.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
        Validity
            Not Before: May 31 05:15:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3edde-010b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:d5:3c:ee:06:2d:9f:fa:44:b2:5b:97:11:
                    4c:e9:d7:fa:f4:c3:ae:3e:90:90:50:cd:1e:3c:a7:
                    60:31:60:25:fa:0c:d6:a0:6e:9a:bc:56:df:be:6d:
                    74:f5:18:5e:5f:8a:6f:d8:dd:4a:69:07:f6:38:ca:
                    5f:81:8d:54:43:87:bd:41:8a:88:d9:22:3b:a9:39:
                    29:4a:21:14:36:84:68:14:ce:83:08:58:90:bc:e7:
                    0a:f5:75:50:f2:6f:52:be:6c:4f:f9:cf:c7:dc:92:
                    41:4e:de:15:fd:43:65:d4:91:7f:10:54:ce:e1:95:
                    49:83:57:20:cf:c3:be:e9:fa:07:17:88:6a:d7:e6:
                    58:4a:e2:ad:95:99:ac:91:49:52:1f:ea:ac:82:a2:
                    92:7b:7b:e2:32:f2:a7:b9:f3:fe:6c:09:47:f1:f4:
                    68:38:a9:fe:f8:de:fe:8b:24:ff:da:02:6c:4f:94:
                    90:05:52:95:ff:20:b9:6e:7c:46:e8:9b:ac:72:d2:
                    2a:c5:db:17:4e:e5:ef:96:e1:f9:1b:f8:99:23:25:
                    88:85:2b:d6:72:bf:f1:a8:bb:00:c9:71:b2:32:43:
                    26:64:b2:f7:d7:06:c7:e9:e8:b6:8d:c8:8b:01:46:
                    e1:38:ad:f9:15:58:39:4b:74:58:b6:7f:8b:c2:78:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FD:15:43:23:9F:CC:24:B6:CE:DA:92:80:F1:6E:A0:1B:43:EE:B0
            X509v3 Authority Key Identifier:
                keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/2DAB7B74BE4211EE970F4140C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.75.64.0/20
                  164.75.96.0-164.75.128.255
                  164.75.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:fe:9d:68:e4:0d:42:0c:ad:be:4c:df:8c:b8:dc:5e:57:
         bd:db:a1:f9:f7:b9:71:55:d8:61:6a:00:01:34:3e:4a:dc:d5:
         eb:4a:ab:04:96:2e:0f:5c:e4:c8:91:ce:99:c3:53:65:ba:4d:
         e2:b6:c1:2c:55:31:ba:08:59:7d:c3:ed:da:de:e3:d8:8a:a0:
         15:bc:6d:e6:d6:96:14:88:0b:76:de:b9:80:b9:66:c5:30:9f:
         5d:92:75:cb:5e:8b:f8:3a:36:8e:56:59:63:56:67:9a:ef:d1:
         08:71:d9:c7:4c:93:f0:d2:f7:ae:48:be:1c:7a:b6:7e:f0:f9:
         8a:02:5e:05:b4:41:46:75:76:b3:7a:91:1f:f8:7c:8b:48:32:
         76:c5:27:66:d0:9b:8d:09:08:95:08:dc:16:fe:a3:8d:40:30:
         31:79:b1:9c:2b:c9:3c:34:fb:8c:5a:28:1a:a1:42:bf:3f:d0:
         c8:36:79:b8:c9:75:f7:88:f6:47:d1:49:55:e5:aa:47:e3:09:
         ad:0f:c8:8a:8f:4d:60:25:d6:e8:09:c9:c2:42:03:8c:b3:49:
         06:67:84:bb:01:05:96:d3:6f:c0:55:7f:f4:4f:60:83:17:e5:
         a8:fc:27:aa:46:ce:3b:cb:01:e0:1a:ba:6b:3d:b2:2e:5a:50:
         f0:6f:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:19 2026 by rpki-client