Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/133A934C693111F0A51E5767C4F9AE02.roa
File:                     133A934C693111F0A51E5767C4F9AE02.roa (raw, json)
Hash identifier:          nSQXNi2ZjVcTfBYdL/JBUUsl+LZUNi12cbTDHTeZACg=
Subject key identifier:   BC:A3:13:CA:04:4E:47:2A:B8:3C:D6:37:2F:86:FF:9F:A4:FA:93:5E
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       022D
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/133A934C693111F0A51E5767C4F9AE02.roa
Signing time:             Wed 13 May 2026 03:34:52 +0000
ROA not before:           Wed 13 May 2026 03:34:52 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7480
IP address blocks:        103.69.92.0/24 maxlen: 24
                          2001:df2:5740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: May 13 03:34:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a03f15c-e24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:dd:52:93:6e:04:17:66:f9:d8:33:25:73:
                    57:a5:36:e8:2e:7d:d6:ac:c0:98:c5:d5:f5:61:ed:
                    d5:bc:84:62:ec:da:a6:98:1c:7e:b4:14:ef:ab:af:
                    94:28:fc:57:df:5b:ce:66:c1:79:fd:95:86:7b:82:
                    d5:ea:21:f4:b6:6c:8c:12:fb:40:85:01:bc:37:d7:
                    98:75:1d:4a:b7:8a:14:a3:ea:02:12:c6:68:5d:bd:
                    cf:32:aa:5d:2e:41:bc:86:0f:66:c5:62:e6:a0:26:
                    e1:ab:0a:56:85:aa:35:e3:bf:d3:f7:f9:82:15:60:
                    2f:00:d7:31:e0:66:04:71:45:28:8f:57:f5:f6:53:
                    17:5d:b0:e6:30:2a:70:cc:5b:f9:fc:0e:ba:8c:72:
                    52:b6:ac:d2:cc:93:c6:8f:97:b0:cc:dc:ac:c0:e6:
                    45:b7:a6:a2:e2:16:ae:7b:2c:00:5d:b5:c4:77:8b:
                    91:07:64:26:ae:5e:d2:90:65:f7:90:48:b8:54:f0:
                    df:43:d8:88:67:9f:46:12:ff:45:74:b5:ed:4d:f8:
                    f4:45:e9:56:a4:46:86:19:e7:45:ba:95:3c:78:78:
                    29:bc:81:9a:86:0a:71:d4:7e:79:77:5a:f5:0b:51:
                    90:b6:4a:90:05:95:29:71:cf:1a:f4:7c:d7:52:d5:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A3:13:CA:04:4E:47:2A:B8:3C:D6:37:2F:86:FF:9F:A4:FA:93:5E
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/133A934C693111F0A51E5767C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.92.0/24
                IPv6:
                  2001:df2:5740::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:a2:75:af:ae:ee:bd:27:bc:3e:0d:b7:94:29:1f:4c:44:e3:
         b7:4b:86:f4:0f:fb:bb:df:7c:8e:eb:4f:42:4f:bb:5c:9e:15:
         88:f1:4c:ba:9f:d6:39:e3:f3:3e:aa:a2:18:2f:e3:d7:50:bf:
         3a:8c:b6:40:44:a5:41:82:50:8d:9e:79:ef:e3:1a:db:6a:4f:
         8f:9b:42:39:f7:7d:75:49:ee:a2:ab:ed:a6:cc:59:e3:25:4b:
         d9:ea:23:b4:b2:71:82:a2:49:24:c4:4b:bc:05:5f:87:e6:35:
         ac:21:12:36:81:02:48:4c:71:43:95:62:56:56:eb:9f:d5:e4:
         36:ea:f4:06:3d:2c:e4:56:52:74:ed:2a:e1:7f:9f:6b:8d:31:
         b4:a9:59:01:4a:89:28:ee:c0:e5:17:68:99:d9:40:52:d6:11:
         47:27:06:3e:c7:65:1c:9f:ed:14:33:73:b8:8f:19:4a:ac:a6:
         ba:f8:b4:3c:f9:4f:07:fe:cb:50:e5:db:bf:67:8c:aa:cb:09:
         80:2e:3c:6d:21:ab:6d:30:91:94:d5:0b:d9:27:a4:23:e1:53:
         80:ae:22:48:45:d6:e0:3f:be:ee:23:85:85:4b:de:7e:5b:47:
         c0:d2:8e:dd:97:48:5e:f3:8d:1c:7d:47:78:62:8a:c5:41:b8:
         00:85:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:41 2026 by rpki-client