Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
File:                     68894B22402811EB91B49250C4F9AE02.roa (raw, json)
Hash identifier:          liLPy91xdDc1pdMOxAhLDDGEhSWylfhoV6UNE1PovoQ=
Subject key identifier:   00:2C:33:20:F3:E8:A5:A0:71:31:AE:2E:2B:2F:7B:E3:09:F2:6A:46
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       07AC
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:54:33 +0000
ROA not before:           Sat 06 Dec 2025 21:03:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24068
IP address blocks:        202.133.81.0/24 maxlen: 24
                          202.133.82.0/24 maxlen: 24
                          202.133.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Dec  6 21:03:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45329-6343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:c8:49:19:f4:8d:a6:3f:2f:8f:6a:62:1c:
                    90:9e:9d:7e:61:68:24:c6:86:46:ee:75:57:5c:35:
                    61:9e:bb:8e:c7:35:fd:a0:93:54:75:33:7a:ae:de:
                    2d:f4:8a:b2:67:4a:e5:c5:e8:c9:50:24:39:6a:be:
                    80:b1:3a:ba:ec:45:aa:15:13:a1:e1:20:a0:38:15:
                    75:37:ba:3b:2f:17:0f:c0:a5:04:eb:15:3a:59:c1:
                    38:c7:2f:2e:3e:57:8a:69:dc:0a:09:d0:18:e4:87:
                    6a:4d:27:e3:7a:51:46:6e:93:4e:b1:d2:d8:be:03:
                    39:ae:39:7c:a7:68:58:a3:13:45:7b:51:71:a6:87:
                    3a:ce:a2:82:80:d8:78:bc:b4:c2:03:8e:be:34:da:
                    d5:52:ff:eb:1f:9a:75:f9:e6:38:36:b6:83:f8:f1:
                    08:d8:92:9e:db:44:22:de:98:9c:60:7c:25:eb:8e:
                    c4:68:95:55:cb:cd:ca:ce:e6:7d:df:2a:48:7c:78:
                    76:fa:dc:36:c9:81:ab:b3:d2:91:e1:ca:c6:5b:f4:
                    6e:53:5c:79:54:c9:e2:0e:d5:07:c0:d0:0e:d5:41:
                    16:4c:16:d8:2a:c8:b0:7f:8d:eb:18:c8:fa:7c:49:
                    5d:ee:65:ef:9d:e0:8d:be:85:1d:55:66:dc:03:33:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2C:33:20:F3:E8:A5:A0:71:31:AE:2E:2B:2F:7B:E3:09:F2:6A:46
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.81.0-202.133.83.255

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:63:b4:d9:c2:2f:a7:a6:0c:c5:24:fa:97:e9:d9:59:6b:
         1e:c0:d2:5b:45:e2:1b:a1:21:99:76:16:75:61:e1:88:4e:8d:
         c6:db:23:1a:9c:9e:6f:52:9d:d5:a9:64:60:f3:24:8d:4e:ec:
         66:87:1a:c7:2b:59:19:87:cd:06:63:32:15:be:fb:a5:35:ad:
         b4:a5:d6:78:91:72:77:0f:d6:41:8e:04:db:e0:0f:3a:3a:01:
         4a:b7:40:25:60:54:58:d0:74:4e:36:68:6e:09:f4:7a:69:66:
         64:cf:00:08:b2:68:15:f3:72:8f:5e:f7:ca:a2:d6:3c:60:00:
         1b:26:8c:91:d3:1f:af:4b:2b:e3:8e:58:51:61:00:c7:ac:e9:
         2b:6b:d4:17:c6:87:d8:2d:70:af:f7:c4:fe:bb:e8:92:80:fb:
         03:0c:37:dd:ce:0a:9f:c2:2f:dd:c6:ce:da:60:3c:13:25:99:
         f2:8e:54:be:19:a9:be:c5:e4:89:a8:ef:d4:c4:0c:5b:d5:11:
         3a:59:16:81:0d:ff:06:0e:90:11:25:59:aa:29:e2:69:e6:69:
         96:f5:14:be:9c:6d:e9:ae:c4:44:cd:fd:ad:8a:c5:57:dd:93:
         3f:ed:48:7e:cc:70:b0:8b:41:f1:46:20:16:74:36:7a:e2:eb:
         bc:57:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:19 2026 by rpki-client