Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/A4C5164E8FD411EE85082822C4F9AE02.roa
File:                     A4C5164E8FD411EE85082822C4F9AE02.roa (raw, json)
Hash identifier:          00LuaUNmIyPdgmkhjWdXCJt4yLwtEm0sc7JiqhVSo/4=
Subject key identifier:   DE:48:46:5F:6E:FA:58:FF:08:29:40:9E:AA:88:70:EA:8C:4C:A3:E6
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       01A9
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/A4C5164E8FD411EE85082822C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:26:54 +0000
ROA not before:           Sat 25 Oct 2025 07:47:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7575
IP address blocks:        203.25.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: Oct 25 07:47:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4146e-d7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:c1:76:47:77:5d:f5:15:6b:87:2d:17:47:
                    a1:6b:59:a2:e5:26:6f:03:07:dd:89:a3:7c:f8:b2:
                    3a:3e:c1:23:ca:75:15:cb:2c:dc:10:a0:dc:19:ef:
                    03:a8:13:22:ce:82:fb:a7:e8:a1:60:c4:dd:c3:47:
                    b0:83:81:05:ed:b7:71:d0:f1:a5:ee:82:11:41:f1:
                    3e:dc:c5:47:eb:84:98:e4:c1:1e:ae:b7:15:2a:35:
                    f7:e9:cd:e0:fc:c5:38:18:af:12:ae:85:d0:79:ce:
                    50:27:a2:f5:e9:6d:00:30:08:df:56:1e:f4:83:b9:
                    64:b8:ad:96:fe:c8:07:6e:a0:91:73:07:ce:9b:56:
                    d6:bb:0a:b5:50:9f:9b:ec:42:5f:63:5a:57:91:98:
                    9a:70:f0:de:8f:a6:84:63:91:c3:39:6a:c8:5c:1a:
                    dd:39:fb:43:14:fe:e7:1a:50:bd:c8:66:4a:ac:b9:
                    a4:53:61:c5:6e:2d:ca:85:62:6a:41:63:2a:55:18:
                    a1:9b:22:0f:8a:f9:e6:4e:30:05:d2:cc:1d:2b:52:
                    6b:77:fe:20:79:3e:6e:4c:58:e7:f9:2c:e5:d9:cd:
                    14:ab:f6:aa:c1:a9:c9:3d:87:1c:33:d7:e7:1b:c5:
                    91:e0:4c:30:db:b5:5d:01:23:05:ee:22:44:57:b6:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:48:46:5F:6E:FA:58:FF:08:29:40:9E:AA:88:70:EA:8C:4C:A3:E6
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/A4C5164E8FD411EE85082822C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:a9:a0:64:00:b0:91:8f:49:5f:be:97:32:9a:7a:45:d5:
         90:2f:b9:bb:7e:c8:57:d5:1d:b6:da:9f:a9:98:46:18:05:ea:
         8e:b7:fc:16:4a:45:93:0a:7a:ca:4f:0e:bf:a7:19:13:e8:6f:
         78:7a:f3:e8:4e:d8:5c:c4:8f:26:b1:42:04:40:cd:02:f6:af:
         4a:f5:3b:c2:12:54:69:8d:c8:44:d6:1b:53:4e:30:95:35:81:
         16:fb:cb:a4:07:6c:fd:75:5a:51:c7:1a:5f:09:ad:3b:7b:38:
         66:69:c8:d1:5e:99:ef:74:2b:87:47:25:e0:26:db:31:ea:4b:
         91:e6:35:7d:ac:23:b6:13:a9:f1:65:23:c0:25:cf:35:b0:e1:
         12:53:55:4b:95:14:30:ed:5e:67:ce:e0:9c:8f:3f:84:10:5a:
         f9:80:e4:c7:e9:72:95:7f:f0:6d:aa:20:bb:fc:92:ae:cc:36:
         b2:4b:3c:c1:72:ed:59:6e:0a:46:4f:31:86:59:cd:ce:02:9c:
         10:3e:56:02:c8:c3:3f:f1:e5:82:8b:f7:91:4f:71:81:85:bc:
         ae:26:08:1d:f2:70:47:8b:0f:19:15:03:df:d7:ef:77:bc:ee:
         bb:fa:1f:e1:2e:25:b8:85:d9:6e:84:1a:ea:b0:0e:fe:13:4a:
         20:1f:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:47 2026 by rpki-client