Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/33392DE2059011F1A8DF17AA3E3D8C67.roa
File:                     33392DE2059011F1A8DF17AA3E3D8C67.roa (raw, json)
Hash identifier:          q1rBnMxJ+DzQAHD3yWNtFqN06AdWDOlKoKntvnfHolI=
Subject key identifier:   E5:F2:33:92:6F:ED:8D:72:4B:B3:7C:D9:D4:72:F0:3F:B2:9D:0F:61
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       0644
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/33392DE2059011F1A8DF17AA3E3D8C67.roa
Signing time:             Mon 20 Apr 2026 23:29:19 +0000
ROA not before:           Mon 20 Apr 2026 23:29:19 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        103.112.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Apr 20 23:29:19 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e6b6cf-dc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:02:e8:4d:28:86:72:8b:16:ed:42:96:60:
                    6b:66:3b:bc:92:af:a0:22:bd:40:d7:a3:64:2e:64:
                    2c:86:01:74:84:50:a6:98:ee:ac:07:75:ed:df:6a:
                    d9:e0:10:5f:f1:f9:fc:37:71:9d:9b:f6:aa:7c:65:
                    09:2c:c6:70:88:d5:08:2c:e4:fc:6d:d1:f4:0b:cf:
                    e2:1d:f3:54:d3:37:83:be:2b:84:98:ce:ae:d9:1d:
                    aa:ba:15:ba:8d:a6:6a:f1:7a:5c:f5:67:87:71:ba:
                    31:23:22:82:5a:0c:d8:82:95:c2:ad:d6:3e:5a:81:
                    25:5e:f7:31:72:a8:b8:ad:4c:72:b0:05:a4:cf:e4:
                    7a:95:36:dd:83:cf:28:fc:eb:ab:3d:20:17:46:61:
                    fc:75:1b:1c:fe:6e:b3:30:01:02:f2:1c:57:80:0d:
                    c5:f4:41:1d:aa:ac:c0:d5:ea:82:4b:37:f3:0b:f0:
                    cb:ad:38:98:32:ee:a8:95:89:09:dc:f8:92:59:17:
                    1d:67:d5:73:54:8a:65:c4:bb:df:5f:ff:3e:53:4b:
                    43:e3:cc:78:df:01:25:c8:aa:59:94:43:91:26:24:
                    00:97:36:1f:75:75:c7:43:37:bc:f8:bd:5c:eb:73:
                    92:e1:42:f9:b5:db:7b:4c:23:28:fd:04:95:5a:83:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F2:33:92:6F:ED:8D:72:4B:B3:7C:D9:D4:72:F0:3F:B2:9D:0F:61
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/33392DE2059011F1A8DF17AA3E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:29:44:96:d0:49:6f:98:87:54:d9:a5:df:3e:4c:6c:36:
         7f:37:2e:e9:75:5b:50:66:4a:4f:60:1c:e0:b1:c0:a5:91:52:
         e7:cf:60:7f:a1:dc:f2:91:42:87:4d:5b:4e:57:09:2c:6e:cc:
         80:ba:09:ef:b2:9b:df:2b:5e:37:59:42:1f:40:c6:2d:3c:54:
         dc:21:c7:a3:86:e3:11:74:88:e1:76:4c:13:22:39:2b:77:32:
         be:35:10:d5:31:98:cc:3d:49:7e:f2:8b:26:59:74:56:0d:f9:
         34:7f:e2:52:40:5e:2a:dc:1a:96:aa:e8:18:f2:d9:c1:9a:06:
         02:12:4c:70:ac:b8:cb:88:4b:26:34:59:36:cb:31:79:5c:7b:
         2d:c2:f4:ed:c9:b5:b1:63:71:04:d8:ed:eb:18:7f:1b:56:3a:
         5e:69:8c:b5:5f:7d:4b:89:23:a2:e5:6a:7a:3a:be:e6:a6:9f:
         69:2d:c9:02:cc:55:21:83:24:1c:55:0b:9c:ea:ab:13:b6:a2:
         be:6e:5e:c2:55:de:d2:19:49:2a:7f:6e:ac:48:93:af:f2:c1:
         c8:bf:6a:84:3e:38:af:50:41:60:8a:e3:63:d8:ce:77:d9:7b:
         45:8b:80:6a:23:7d:fd:d9:52:5b:02:c8:09:ef:bf:e7:fe:10:
         68:3c:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:16 2026 by rpki-client