Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
File:                     33F4955E3A3411F1992413829C833773.roa (raw, json)
Hash identifier:          xzrc0aZMkP3QUOKDSz7VwBlE/D9wG/T3IpXcxQAIOWA=
Subject key identifier:   33:F1:94:FB:4E:61:7D:69:BE:AD:30:76:CD:B8:87:AC:B6:8E:75:68
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1122
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
Signing time:             Fri 17 Apr 2026 08:07:43 +0000
ROA not before:           Fri 17 Apr 2026 08:07:43 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133478
IP address blocks:        103.95.224.0/24 maxlen: 24
                          103.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4386 (0x1122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Apr 17 08:07:43 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69e1ea4f-3a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:2c:ce:ee:9b:b3:51:53:c4:b6:8e:e3:5c:
                    23:80:cf:83:ca:34:8c:4f:52:55:40:8a:fd:31:58:
                    b4:d0:e9:af:34:9c:55:cf:b7:f1:0d:ee:6f:42:ba:
                    9e:fa:86:48:9b:f0:9a:08:34:36:a4:07:2d:68:f9:
                    98:35:86:fe:41:5e:16:1a:20:71:52:0e:17:ed:fb:
                    94:be:2b:e0:9b:91:f5:cd:c6:3b:ea:a4:bb:78:cf:
                    26:55:7d:b2:1d:19:8d:0e:cd:45:6b:09:61:51:08:
                    fe:36:f8:c3:1a:05:ce:dd:fd:26:97:5f:f9:5a:3f:
                    65:46:79:32:66:a0:01:aa:bb:54:9f:eb:03:f3:69:
                    3e:20:49:09:fb:3f:be:e1:be:79:de:62:7f:ba:ad:
                    0a:aa:84:18:73:3c:bb:43:af:e6:6c:6a:da:ed:a6:
                    55:cc:02:c3:39:93:c2:d8:f8:85:83:1a:ce:5d:2e:
                    bd:20:e3:95:18:ff:bc:63:41:72:b7:d2:fe:5a:54:
                    e9:b6:ac:af:6a:b0:5f:77:d0:02:30:8f:63:74:df:
                    c4:d1:01:40:70:0d:48:9b:24:6f:aa:e5:69:68:46:
                    a3:72:a9:9a:76:2f:e3:01:55:ba:6d:5d:8a:d7:93:
                    b5:87:c1:7a:0e:7f:af:99:0e:0f:49:db:c7:cd:b5:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:94:FB:4E:61:7D:69:BE:AD:30:76:CD:B8:87:AC:B6:8E:75:68
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:8e:e1:4f:f7:d4:80:90:4e:28:60:03:37:ca:c5:3c:43:
         94:04:81:8a:b3:cd:4f:3e:a6:f3:1e:29:3b:bc:e2:78:8d:4d:
         d7:39:e2:e1:9f:1a:5c:94:de:9d:23:78:fa:d8:35:ac:dc:f7:
         2a:ca:07:be:06:a7:3e:a7:70:8c:fd:e9:b9:ee:90:28:eb:b2:
         4c:31:70:40:e2:f8:13:c1:c0:b3:dc:85:25:43:fd:a3:fd:81:
         8b:fe:eb:78:fd:97:be:23:06:e6:62:6f:e9:9a:4c:75:ac:25:
         64:84:0f:89:ea:fc:85:67:05:c1:78:ba:3b:02:33:ec:a5:05:
         ff:0c:2b:ef:33:25:84:63:78:d3:06:85:f3:87:74:43:69:df:
         26:89:a6:22:a5:e6:e4:80:9d:54:8a:73:d3:d4:ec:c3:ee:80:
         d6:a6:b4:73:5d:ba:b9:bf:ae:dc:9b:6b:62:ec:05:27:3b:0b:
         52:18:b9:ef:3b:93:91:27:a6:a5:3e:69:d3:df:ba:f4:f1:b2:
         a5:9e:9f:d0:b2:59:79:c2:d7:77:e0:ae:00:9c:58:5c:31:0b:
         5e:1a:75:1e:d0:d4:fc:bd:4d:41:7d:a9:13:18:6d:4b:71:58:
         af:50:d8:bf:85:ef:d8:26:63:23:5d:11:a7:f5:6f:21:a2:3e:
         ae:07:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:33 2026 by rpki-client