Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/75125118FE5F11F0956342DD516F56BC.roa
File:                     75125118FE5F11F0956342DD516F56BC.roa (raw, json)
Hash identifier:          pOY87ee02JxjD/56+c16KvPHi3TX1tmU66d6XqMwaRU=
Subject key identifier:   92:4B:EC:54:8C:03:93:5D:64:16:DB:6B:6F:B0:5B:58:06:CC:71:F7
Certificate issuer:       /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial:       0614
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/75125118FE5F11F0956342DD516F56BC.roa
Signing time:             Mon 09 Feb 2026 01:38:45 +0000
ROA not before:           Mon 09 Feb 2026 01:38:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     10031
IP address blocks:        202.170.72.0/24 maxlen: 24
                          202.170.73.0/24 maxlen: 24
                          202.170.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
        Validity
            Not Before: Feb  9 01:38:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69893aa5-0902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:23:bf:5b:a2:68:78:20:57:ac:fd:79:54:
                    ac:bc:b8:4e:f3:6b:09:f9:39:e0:37:d8:67:e0:e9:
                    05:43:c1:e5:07:ae:80:44:ea:d2:32:5c:3a:67:c7:
                    ee:29:79:d2:09:47:66:c7:c8:b3:88:3b:7c:ae:29:
                    78:af:11:fb:10:a2:98:67:31:af:12:57:4f:20:5c:
                    2c:17:da:5e:ca:1a:3d:11:7f:31:73:74:c5:25:45:
                    c8:62:a9:98:99:1e:73:a2:17:45:e5:8a:95:5d:fe:
                    35:2e:64:ff:6b:e5:d1:25:09:40:a2:04:b6:69:68:
                    4f:1d:7e:3f:7f:3e:72:d7:d0:11:f4:d2:a0:06:c3:
                    5d:a3:8f:b2:ca:94:64:d9:e7:da:16:82:0a:03:21:
                    46:6e:ce:77:40:15:65:03:45:bf:7b:b3:32:46:c6:
                    e2:c0:16:b5:2a:e0:63:bc:1e:cd:37:94:4b:33:63:
                    b8:58:de:4a:cb:49:73:45:67:8b:e6:be:bd:a4:78:
                    be:cf:bb:21:1c:04:7a:8e:b5:13:ef:4a:15:d1:3d:
                    da:40:c9:77:12:d9:6a:f1:5c:40:cd:43:37:c5:7e:
                    76:1e:1e:d1:82:06:a5:4d:e7:29:0e:7f:99:a2:2d:
                    e9:60:3c:d8:0c:5d:de:74:6c:a9:73:ea:b5:ee:6f:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:EC:54:8C:03:93:5D:64:16:DB:6B:6F:B0:5B:58:06:CC:71:F7
            X509v3 Authority Key Identifier:
                keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/75125118FE5F11F0956342DD516F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.72.0/23
                  202.170.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:75:d4:34:d1:37:fd:29:68:72:1b:50:f0:15:45:36:a4:4a:
         03:90:f0:93:7e:d9:18:23:f6:35:4d:86:db:b4:7a:ad:bb:c0:
         7c:78:62:1f:50:9f:67:d5:1d:5c:f1:c9:24:ad:b1:ac:18:df:
         35:3d:16:51:38:73:9f:ac:b8:b9:a7:2a:27:c2:3b:15:01:23:
         78:e0:7d:f8:b5:8f:c5:1d:d9:c7:57:37:16:c2:fd:b3:5d:76:
         0c:4f:58:60:01:b1:6a:e1:21:6a:f8:58:d9:b3:12:93:b2:cc:
         7a:2c:2f:3f:c4:3d:bb:14:33:01:de:6a:43:3d:1a:67:2a:56:
         ca:ff:03:39:b8:94:5c:0e:5b:b0:a6:27:fc:58:79:40:08:79:
         ed:5b:c7:cb:8a:51:1f:c7:a2:3a:2e:ca:bd:b7:be:38:a0:27:
         eb:ec:bf:d2:42:fb:3d:a2:1e:0e:66:5d:de:3a:a7:e0:92:ff:
         57:5c:54:89:35:67:f5:36:be:f4:30:94:69:84:0c:83:ea:ed:
         93:f4:3e:31:2b:f0:7f:85:e2:08:c1:a5:ed:99:0e:25:6c:24:
         48:bd:92:e8:ac:71:3e:b5:85:cc:d2:04:96:94:44:ee:a1:27:
         f0:c9:be:da:3d:1a:0d:37:a0:59:9a:1f:dc:3f:29:bd:26:04:
         f9:f8:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:41 2026 by rpki-client