Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
File:                     33F4955E3A3411F1992413829C833773.roa (raw, json)
Hash identifier:          y+MxYSN2YbQTW/nBvlpDXhMRWitSmGz4lCP0YF+Gkk4=
Subject key identifier:   D5:05:14:CC:27:C9:85:47:3B:B4:A4:10:DF:8F:DB:64:70:4B:3B:11
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       113A
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
Signing time:             Thu 28 May 2026 17:21:46 +0000
ROA not before:           Thu 28 May 2026 17:21:46 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133478
IP address blocks:        103.95.224.0/24 maxlen: 24
                          103.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4410 (0x113a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: May 28 17:21:46 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1879aa-bac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:61:dd:5f:d3:09:52:e5:8e:32:7c:c8:84:
                    1f:8b:36:bc:db:7f:5b:ff:c6:4d:ed:8c:73:87:6e:
                    3e:ff:cd:ab:34:99:09:af:aa:59:23:48:a1:51:21:
                    80:c5:7e:c2:cd:5c:30:a4:49:b1:30:50:12:db:a9:
                    9b:19:be:d1:31:25:13:c4:79:f7:87:33:80:8f:06:
                    c5:73:ed:2c:35:08:8d:8c:ec:4f:28:ae:b4:9a:e0:
                    a4:b7:01:c1:51:d3:01:40:a2:e1:d5:40:63:43:ca:
                    75:3e:80:ad:ec:fb:44:09:b5:92:5a:df:3b:a5:b5:
                    57:a2:1c:ae:dc:51:6d:d9:1e:ec:8d:97:c1:71:66:
                    4d:f3:c0:e5:ff:c2:51:d0:4f:ca:dd:b2:7b:4e:2b:
                    d4:b7:99:90:42:01:63:0f:e0:5a:2d:c1:3e:9b:22:
                    a3:65:5a:75:80:d9:a3:66:9d:b2:06:1a:50:8d:3f:
                    e8:73:8d:5e:6a:6a:9f:f5:1a:43:da:46:6f:25:64:
                    21:9a:48:f8:6d:80:7b:9b:7a:f1:3b:ad:5a:c7:f0:
                    f8:64:56:4d:3a:b8:88:31:25:70:ca:9b:83:ee:00:
                    64:1c:d1:35:9e:ac:94:78:8c:12:39:c4:c8:38:c4:
                    1d:1a:fd:ee:62:f8:d9:de:5d:24:3e:0a:52:de:b8:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:05:14:CC:27:C9:85:47:3B:B4:A4:10:DF:8F:DB:64:70:4B:3B:11
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:42:99:49:88:e7:8a:9b:6c:79:11:66:c5:cc:9a:98:c4:85:
         f5:52:8a:9e:a7:d3:f4:98:59:7c:72:74:f4:c7:57:6d:f7:59:
         70:f0:73:4b:92:8a:89:10:0b:f8:a2:b8:04:14:09:8c:5c:6d:
         e7:70:f4:70:69:ac:91:e4:84:99:1f:e7:6b:6b:1e:66:0f:76:
         fe:50:fb:bb:ae:42:27:6c:dd:3f:a4:1b:59:c7:a4:af:20:1f:
         a7:d8:c0:fc:50:a7:20:f3:30:a8:bf:7f:11:f3:ed:5a:3d:3b:
         7e:a3:b2:2b:d6:0b:2a:d9:57:ef:28:00:8a:44:9d:da:bc:36:
         67:5a:a7:58:26:36:7a:50:f4:06:2d:0a:f4:23:23:4c:61:50:
         f1:0c:43:59:b1:25:e0:04:7e:67:0e:2b:d3:98:46:b4:4c:75:
         44:73:cd:c5:08:db:0a:29:27:ab:2c:92:f4:1d:9f:8c:6d:aa:
         cf:14:07:19:e5:ff:60:a9:0e:0d:eb:85:45:1b:f1:dd:6a:c1:
         b1:b1:bd:ba:4d:5e:0f:1d:1f:35:4d:fa:4e:1f:97:01:0d:d0:
         6c:1d:12:87:22:bc:ef:ab:3c:50:46:2b:83:fd:8d:f4:82:ac:
         77:9c:8b:43:50:15:15:60:b5:6f:fa:6b:4f:9b:0a:f7:3c:41:
         57:35:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:11:20 2026 by rpki-client