Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/33EA4CE055AE11EBA5EFA876C4F9AE02.roa
File:                     33EA4CE055AE11EBA5EFA876C4F9AE02.roa (raw, json)
Hash identifier:          /z2DGv7fYaarpOtsTpCTZorjAYHFMh4lTVORf3xDc3s=
Subject key identifier:   35:18:EA:1B:55:6B:D7:CC:80:12:09:C5:1C:8C:3E:3B:9F:2E:AC:13
Certificate issuer:       /CN=A91838AE/serialNumber=749427218111D2F2F5A570B99517CA08E5773724
Certificate serial:       076F
Authority key identifier: 74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/33EA4CE055AE11EBA5EFA876C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:28:06 +0000
ROA not before:           Mon 02 Mar 2026 22:28:06 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133084
IP address blocks:        103.233.180.0/23 maxlen: 24
                          2401:1680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl
                          rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91838AE, serialNumber=749427218111D2F2F5A570B99517CA08E5773724
        Validity
            Not Before: Mar  2 22:28:06 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a60ef5-0f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:e2:67:d8:f1:bc:0a:e0:85:1e:8c:6e:48:
                    44:68:f1:ec:82:74:87:f0:ee:18:d4:2b:6d:f2:44:
                    4e:00:7a:41:9d:2e:ef:af:3e:b3:be:42:6e:71:75:
                    43:22:c0:44:d4:bc:33:a8:af:ac:10:98:2a:c6:6c:
                    a3:25:14:8b:9f:75:cd:b4:2f:1a:48:3a:52:5b:7d:
                    65:55:34:b5:0e:5d:8c:a7:98:ed:28:3f:bd:6c:8b:
                    89:df:1f:de:8d:f8:2c:7e:f2:77:c5:dd:87:f8:39:
                    16:c3:ad:8f:68:e6:a1:78:95:39:dd:fb:9c:b1:5f:
                    dc:0f:a7:07:46:b6:ef:97:c2:d7:48:50:46:67:08:
                    e9:53:1e:11:71:fb:89:4d:47:e7:56:fd:44:7d:1f:
                    14:66:2f:ad:f0:0d:7d:9c:89:19:57:6a:6f:7f:cc:
                    75:ea:d2:80:68:93:f3:ad:b7:ef:76:d0:57:d0:64:
                    8f:51:a5:76:8f:73:5b:21:8c:ed:7a:a4:67:55:96:
                    37:98:a4:db:10:6a:25:52:7d:19:c0:a2:b9:91:7a:
                    30:40:32:4d:93:41:c0:1d:5e:2f:a0:c5:ef:4e:fd:
                    bc:f0:92:52:81:7e:e3:97:3b:cf:ca:fc:ae:25:98:
                    83:31:ea:2c:c4:9b:ce:69:14:7f:31:9e:94:6e:9f:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:18:EA:1B:55:6B:D7:CC:80:12:09:C5:1C:8C:3E:3B:9F:2E:AC:13
            X509v3 Authority Key Identifier:
                keyid:74:94:27:21:81:11:D2:F2:F5:A5:70:B9:95:17:CA:08:E5:77:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/dJQnIYER0vL1pXC5lRfKCOV3NyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJQnIYER0vL1pXC5lRfKCOV3NyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91838AE/7070A0F0559B11EBBA117137C4F9AE02/33EA4CE055AE11EBA5EFA876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.180.0/23
                IPv6:
                  2401:1680::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:28:f2:6a:fd:2d:22:4b:83:11:3a:1a:19:38:f0:0a:51:a4:
         90:05:1d:9a:90:03:43:ad:14:8c:df:24:79:5c:9b:35:19:1c:
         46:4f:23:2a:38:2e:0a:66:d0:f0:e1:12:3a:9c:b0:61:ae:3a:
         cc:0d:ba:f8:6e:00:ea:17:ba:40:04:d9:a6:33:46:1e:da:af:
         35:78:e1:e9:5d:1b:ed:b1:0f:e4:9a:c1:3b:ec:95:93:bd:53:
         0e:cf:4b:3d:76:91:90:a5:35:16:e4:fe:a3:32:59:13:76:21:
         6b:ed:84:6d:6f:71:7e:77:30:86:d1:3a:47:61:85:95:7c:10:
         cb:a0:a9:39:e5:96:e0:44:15:97:b1:24:97:2b:3f:68:af:e7:
         db:b8:10:c0:c9:55:50:fb:b5:73:3a:4c:38:5a:c4:60:83:26:
         75:df:69:3d:0c:ac:10:42:8a:25:81:76:83:8d:75:73:f9:4b:
         f9:c1:cd:3c:34:1c:da:f4:0a:8e:ef:ac:f5:5a:5e:87:2e:5b:
         dc:5e:6c:cb:bb:7b:e6:e4:6b:52:c1:5a:7d:60:f8:9d:86:5a:
         e8:31:78:51:0d:40:2a:07:12:16:35:7b:36:bc:e0:f0:bb:0d:
         dd:88:18:42:6f:44:74:99:3c:26:be:af:ee:9a:09:c6:cd:a3:
         38:b7:08:d4
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4QUUxMTAvBgNVBAUTKDc0OTQyNzIxODExMUQyRjJGNUE1NzBCOTk1MTdDQTA4
RTU3NzM3MjQwHhcNMjYwMzAyMjIyODA2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGVmNS0wZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1t7iZ9jxvArghR6MbkhEaPHsgnSH8O4Y1Ctt8kROAHpBnS7vrz6zvkJucXVD
IsBE1LwzqK+sEJgqxmyjJRSLn3XNtC8aSDpSW31lVTS1Dl2Mp5jtKD+9bIuJ3x/e
jfgsfvJ3xd2H+DkWw62PaOaheJU53fucsV/cD6cHRrbvl8LXSFBGZwjpUx4RcfuJ
TUfnVv1EfR8UZi+t8A19nIkZV2pvf8x16tKAaJPzrbfvdtBX0GSPUaV2j3NbIYzt
eqRnVZY3mKTbEGolUn0ZwKK5kXowQDJNk0HAHV4voMXvTv288JJSgX7jlzvPyvyu
JZiDMeosxJvOaRR/MZ6Ubp+OcwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDUY6htV
a9fMgBIJxRyMPjufLqwTMB8GA1UdIwQYMBaAFHSUJyGBEdLy9aVwuZUXygjldzck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzhBRS83MDcwQTBGMDU1
OUIxMUVCQkExMTcxMzdDNEY5QUUwMi9kSlFuSVlFUjB2TDFwWEM1bFJmS0NPVjNO
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RKUW5JWUVSMHZMMXBYQzVsUmZLQ09WM055US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODM4QUUvNzA3MEEwRjA1NTlCMTFFQkJBMTE3MTM3QzRGOUFFMDIvMzNFQTRDRTA1
NUFFMTFFQkE1RUZBODc2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ+m0MA0EAgACMAcDBQAkARaAMA0GCSqGSIb3DQEBCwUAA4IBAQBk
KPJq/S0iS4MROhoZOPAKUaSQBR2akANDrRSM3yR5XJs1GRxGTyMqOC4KZtDw4RI6
nLBhrjrMDbr4bgDqF7pABNmmM0Ye2q81eOHpXRvtsQ/kmsE77JWTvVMOz0s9dpGQ
pTUW5P6jMlkTdiFr7YRtb3F+dzCG0TpHYYWVfBDLoKk55ZbgRBWXsSSXKz9or+fb
uBDAyVVQ+7VzOkw4WsRggyZ132k9DKwQQoolgXaDjXVz+Uv5wc08NBza9AqO76z1
Wl6HLlvcXmzLu3vm5GtSwVp9YPidhlroMXhRDUAqBxIWNXs2vODwuw3diBhCb0R0
mTwmvq/umgnGzaM4twjU
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:47 2026 by rpki-client