Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/75C18F96305811EB94E3192FC4F9AE02.roa
File:                     75C18F96305811EB94E3192FC4F9AE02.roa (raw, json)
Hash identifier:          JLGn76090XO49GxPAgwtd2MTIbWpDSO85D1g5CnOfe8=
Subject key identifier:   F0:F4:51:9D:A6:8F:14:A1:FF:E6:84:4D:33:93:13:59:1B:27:94:77
Certificate issuer:       /CN=A91C5D81/serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
Certificate serial:       3528
Authority key identifier: B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/75C18F96305811EB94E3192FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:30:23 +0000
ROA not before:           Tue 24 Feb 2026 15:10:06 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45630
IP address blocks:        103.38.60.0/22 maxlen: 22
                          103.38.60.0/24 maxlen: 24
                          103.38.61.0/24 maxlen: 24
                          103.38.62.0/24 maxlen: 24
                          103.38.63.0/24 maxlen: 24
                          203.201.184.0/22 maxlen: 22
                          2401:880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13608 (0x3528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D81, serialNumber=B8B473D36DA5260825CD0BBF62F6EC190D340218
        Validity
            Not Before: Feb 24 15:10:06 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44d7f-e987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:4e:9d:56:2a:a0:26:8a:a1:8b:40:20:6f:
                    31:7c:f3:35:db:18:3c:0c:e1:a6:f9:dc:19:d4:1e:
                    ef:24:9d:ce:d4:03:c4:dd:cc:cb:93:df:a2:15:ad:
                    91:e2:23:f0:c3:a6:86:01:e9:c7:0e:83:f5:63:d4:
                    15:c2:7b:69:e8:93:18:ef:3e:2b:52:e4:f0:8f:9f:
                    03:a2:d7:5b:23:19:44:1c:bd:b0:69:79:a3:6a:6d:
                    9f:93:98:9a:68:2b:4b:45:d7:68:90:72:ff:e4:12:
                    4a:5e:79:53:2c:3c:4a:29:8a:dd:60:11:b9:ca:00:
                    33:c7:43:04:ca:98:1a:b0:a7:5e:34:ad:74:24:8b:
                    a6:33:a9:8c:05:6d:0a:4b:28:16:8f:e5:af:99:1c:
                    2a:8f:29:64:82:15:3e:1d:65:cc:ee:b7:66:7c:5a:
                    11:e0:53:e3:34:c5:aa:50:1c:fc:a0:ef:77:3b:9c:
                    28:65:cc:3b:53:44:08:96:8a:79:f2:a4:1d:6f:e0:
                    23:82:c9:70:c1:bc:80:ff:45:ea:25:7c:4e:1d:a2:
                    f6:8f:64:75:0c:d6:56:aa:71:7f:9b:fe:3f:98:1a:
                    e3:4f:e5:98:b5:ad:69:a2:51:f5:2d:ff:1c:7f:03:
                    35:75:eb:47:eb:74:d9:59:da:b4:24:86:c9:e0:d1:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F4:51:9D:A6:8F:14:A1:FF:E6:84:4D:33:93:13:59:1B:27:94:77
            X509v3 Authority Key Identifier:
                keyid:B8:B4:73:D3:6D:A5:26:08:25:CD:0B:BF:62:F6:EC:19:0D:34:02:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/uLRz022lJgglzQu_YvbsGQ00Ahg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLRz022lJgglzQu_YvbsGQ00Ahg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D81/47059DD81D6E11E29B76AAAF08B02CD2/75C18F96305811EB94E3192FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.60.0/22
                  203.201.184.0/22
                IPv6:
                  2401:880::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:b3:2d:af:13:68:f7:b3:72:e2:c8:03:f6:03:80:cd:9c:f7:
         34:3e:49:03:31:31:0e:c3:63:28:f0:f4:de:bb:69:01:7c:ed:
         01:3c:05:8d:9e:3d:63:25:a4:1f:96:7f:a5:a2:52:ef:26:dc:
         62:56:d0:45:76:f9:06:35:0c:05:f5:79:4a:32:0b:01:ec:c5:
         f6:b9:ee:b7:9d:46:b9:35:7d:56:5d:52:f2:46:87:86:32:15:
         8b:87:c0:12:6c:77:ca:cc:ab:c3:7f:f9:7a:71:de:98:47:a2:
         cb:ad:ae:35:57:c0:11:6b:21:34:8c:06:d8:2b:c9:7e:24:49:
         fa:81:7d:f2:46:4b:7b:cc:c0:40:5f:a1:b1:e7:84:62:be:6c:
         79:78:40:75:a6:82:94:5f:88:ae:23:49:bb:59:44:94:54:71:
         54:31:00:33:80:47:70:ea:2c:d2:0c:82:42:be:e0:cf:24:15:
         2f:a3:95:50:c1:cd:d9:bf:c8:c6:5f:fe:47:12:db:b4:57:b2:
         c7:9a:02:ef:07:26:0f:e5:3d:7f:87:24:44:87:12:8a:ad:84:
         c1:25:62:d1:26:a2:d7:87:81:3e:3e:05:25:19:1d:79:2a:88:
         ec:bf:e7:6d:ce:8a:9e:cf:ca:b4:14:ee:04:6e:79:ce:90:a2:
         68:f7:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:28 2026 by rpki-client