Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/33074190145C11F0B91D7C47C4F9AE02.roa
File:                     33074190145C11F0B91D7C47C4F9AE02.roa (raw, json)
Hash identifier:          MKjhR4piWDvUAuWp9pWEKUBXNQ2JX0nzoNNUeCqPGFU=
Subject key identifier:   CE:F3:86:28:8F:36:5E:A5:F9:DC:1B:55:96:A5:AA:AC:D5:96:B3:44
Certificate issuer:       /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial:       032B
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/33074190145C11F0B91D7C47C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:43:49 +0000
ROA not before:           Fri 05 Dec 2025 00:08:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137453
IP address blocks:        103.176.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
                          rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
        Validity
            Not Before: Dec  5 00:08:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58605-2051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:b6:e4:c0:26:b5:e9:cf:aa:79:af:96:fb:
                    4e:f8:30:69:9a:af:5a:c3:a1:cb:bb:d3:bd:ab:38:
                    67:9d:9e:de:da:6b:22:c7:00:92:3c:3d:96:36:11:
                    3a:b7:c0:b7:9b:a3:f0:be:d5:44:b7:fe:41:1a:7d:
                    16:f7:84:8b:34:78:27:eb:d9:60:45:37:0b:22:73:
                    25:91:48:f2:51:63:8b:b5:fe:ec:e2:38:32:42:54:
                    5f:d6:a0:38:6d:12:2e:4e:4b:d7:b4:3c:e0:ff:c5:
                    04:54:7f:37:20:59:21:76:cd:e2:6b:3a:3b:22:47:
                    52:a3:67:46:fb:1f:48:22:dc:30:83:36:99:9d:f1:
                    03:ea:9c:d3:ad:bf:37:c6:1a:23:58:b7:5c:ff:52:
                    09:70:fe:2b:c9:fa:6d:1a:7d:e7:fd:96:92:46:96:
                    7c:ac:9b:b6:15:a2:da:e0:ae:76:11:79:69:cb:6f:
                    1f:96:e2:dd:e8:9d:9c:c5:25:aa:f9:60:d8:0e:bd:
                    20:08:ad:2f:81:99:b6:4a:a1:5b:c3:d9:36:23:4c:
                    8b:5c:80:b3:08:2a:49:33:89:d9:1a:97:43:ef:84:
                    6a:d7:6f:b8:dd:4e:e8:bd:bb:b3:5a:8e:c7:90:7b:
                    4a:26:4a:8b:33:fb:53:85:b7:fb:c9:15:4f:2a:a5:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:86:28:8F:36:5E:A5:F9:DC:1B:55:96:A5:AA:AC:D5:96:B3:44
            X509v3 Authority Key Identifier:
                keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/33074190145C11F0B91D7C47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:09:98:95:1f:1b:9b:93:f7:5a:1c:49:cd:5b:2f:1f:a9:d4:
         29:a7:8c:e3:09:62:5d:63:07:ac:66:3b:db:f0:10:2a:01:c0:
         25:d3:ca:6d:eb:2a:dd:79:e4:a3:f0:4e:4a:56:cf:97:4b:f7:
         8f:e2:14:47:fa:3d:84:2c:e1:4f:27:94:69:9a:28:52:58:81:
         a2:bb:9c:70:06:7c:91:b0:41:39:94:84:b4:94:2c:0e:21:d4:
         52:6d:d5:d6:5e:52:73:6e:b9:33:39:ea:3c:eb:e3:c3:72:62:
         5e:c1:16:9a:27:35:55:d1:71:9a:2c:c1:8a:19:e9:20:c5:1f:
         08:33:53:2f:f9:44:a0:f2:c9:f0:35:f1:05:a5:56:95:93:29:
         d5:9f:86:10:70:3d:73:e9:09:64:d9:d9:06:07:e0:e0:8e:a9:
         ca:31:7f:c6:bb:17:98:fe:4e:0e:1b:1f:4f:7c:11:38:6b:d5:
         2b:ab:bc:a8:0d:a8:dc:88:04:07:ea:b6:2e:0d:c9:f8:ba:98:
         7f:67:93:79:a4:45:39:46:a0:10:e2:03:90:26:79:6c:11:07:
         2d:ea:81:a4:13:66:f1:18:c8:ec:eb:8c:6b:89:6f:f6:93:01:
         6e:82:5b:4c:5b:95:07:5f:b5:60:ff:ce:91:b7:19:7f:60:47:
         c9:50:f2:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0RDQ0MEFBMzBF
REEwODdFMkMwHhcNMjUxMjA1MDAwODM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODYwNS0yMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0c625MAmtenPqnmvlvtO+DBpmq9aw6HLu9O9qzhnnZ7e2msixwCSPD2WNhE6
t8C3m6PwvtVEt/5BGn0W94SLNHgn69lgRTcLInMlkUjyUWOLtf7s4jgyQlRf1qA4
bRIuTkvXtDzg/8UEVH83IFkhds3iazo7IkdSo2dG+x9IItwwgzaZnfED6pzTrb83
xhojWLdc/1IJcP4ryfptGn3n/ZaSRpZ8rJu2FaLa4K52EXlpy28fluLd6J2cxSWq
+WDYDr0gCK0vgZm2SqFbw9k2I0yLXICzCCpJM4nZGpdD74Rq12+43U7ovbuzWo7H
kHtKJkqLM/tThbf7yRVPKqXY3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM7zhiiP
Nl6l+dwbVZalqqzVlrNEMB8GA1UdIwQYMBaAFPPyc/PvzlUe4zyETUQKow7aCH4s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFGMS80RkVCRjI0QTA5
REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZSN2pQSVJOUkFxakR0b0lm
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfSno4LV9PVlI3alBJUk5SQXFqRHRvSWZpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEUxRjEvNEZFQkYyNEEwOURBMTFFREEwM0M5ODE3QzRGOUFFMDIvMzMwNzQxOTAx
NDVDMTFGMEI5MUQ3QzQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7ATMA0GCSqGSIb3DQEBCwUAA4IBAQAUCZiVHxubk/daHEnNWy8f
qdQpp4zjCWJdYwesZjvb8BAqAcAl08pt6yrdeeSj8E5KVs+XS/eP4hRH+j2ELOFP
J5RpmihSWIGiu5xwBnyRsEE5lIS0lCwOIdRSbdXWXlJzbrkzOeo86+PDcmJewRaa
JzVV0XGaLMGKGekgxR8IM1Mv+USg8snwNfEFpVaVkynVn4YQcD1z6Qlk2dkGB+Dg
jqnKMX/GuxeY/k4OGx9PfBE4a9Urq7yoDajciAQH6rYuDcn4uph/Z5N5pEU5RqAQ
4gOQJnlsEQct6oGkE2bxGMjs64xriW/2kwFugltMW5UHX7Vg/86Rtxl/YEfJUPIU
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:07 2026 by rpki-client