Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
File:                     0B33A3D45C0411EC83F9BB50C4F9AE02.roa (raw, json)
Hash identifier:          sp7JcIkEqmg/0GNiLWT28LxeWfwQE0HepHGoMtZA6Rk=
Subject key identifier:   C8:FF:E8:5B:45:EE:5B:5B:68:F3:85:01:24:87:82:61:55:04:F1:FF
Certificate issuer:       /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Certificate serial:       04DE
Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:02:10 +0000
ROA not before:           Wed 29 Oct 2025 00:13:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     10021
IP address blocks:        103.173.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
                          rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
        Validity
            Not Before: Oct 29 00:13:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a454f1-58c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:93:10:91:2e:b7:9c:0f:97:26:8a:e8:84:
                    bb:e2:44:13:dd:11:1f:d5:61:aa:a3:4c:b8:d1:0e:
                    f4:c6:fc:cb:49:11:44:35:1e:c4:3a:ab:92:f4:5d:
                    a6:d3:0e:55:b6:8a:db:41:38:be:12:d4:61:5c:f2:
                    39:a8:c6:06:4a:65:c8:7e:6e:55:d1:85:75:6c:50:
                    42:60:4d:43:0e:a2:b6:f8:1e:ec:ae:69:f0:f4:e4:
                    76:9b:a7:7b:0b:e5:50:bf:66:42:6c:be:4e:a4:15:
                    ed:c0:50:33:b4:41:78:c5:2a:19:67:6a:b5:5f:1d:
                    93:4f:98:5b:10:e6:79:40:00:42:e0:3e:45:60:42:
                    9a:47:75:c3:50:4d:ad:02:32:3d:52:8e:7b:a6:03:
                    2f:1f:38:eb:b2:da:de:44:f1:d8:c4:5f:f8:c4:84:
                    86:eb:88:a2:fd:b2:1b:a7:eb:a3:0b:f6:15:02:b4:
                    19:5d:20:fc:09:a9:03:24:07:84:2f:3c:4e:15:ee:
                    78:1a:67:83:34:ac:2e:2a:41:c5:45:33:b3:3b:58:
                    e2:6e:f0:16:e9:f2:40:e8:ba:df:b4:db:f2:19:d6:
                    f2:60:84:bc:fc:5a:93:c6:ab:a5:d4:f4:d9:19:5f:
                    df:cc:ef:ef:a2:bc:8a:c3:e0:59:c6:a6:3f:04:2d:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:E8:5B:45:EE:5B:5B:68:F3:85:01:24:87:82:61:55:04:F1:FF
            X509v3 Authority Key Identifier:
                keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:04:eb:92:9c:05:9b:9b:58:58:9b:95:aa:9e:f1:cb:6c:1e:
         90:c8:47:ae:f5:b9:d3:64:7a:04:cb:e9:8c:d5:a4:52:33:b3:
         2d:0f:e5:1c:df:44:ad:71:b9:81:ba:3e:2a:e1:1b:8a:08:41:
         6a:c6:70:22:28:82:11:9e:33:b8:36:77:12:21:6b:e2:0c:66:
         8e:4e:90:fa:1d:34:a6:48:70:12:a1:be:b8:d8:18:dd:c2:b0:
         aa:dd:57:b1:fe:f0:df:1d:aa:f6:da:d8:d0:41:3e:a2:b6:d6:
         45:fb:cb:12:c3:c6:85:09:48:ab:61:8d:95:06:b0:c7:22:b2:
         c7:64:11:2e:a7:e4:6e:7c:bb:fc:75:a1:c6:ba:88:56:0e:53:
         f0:64:05:35:f9:bb:ca:2f:f6:f8:fa:8f:2e:02:77:bb:a1:9e:
         60:3d:ae:10:f6:6c:3b:0c:72:84:31:24:23:2b:4e:82:ce:cd:
         1a:d1:8d:18:88:5d:c4:35:45:c8:05:93:a2:c1:97:e5:71:55:
         69:8c:04:09:e0:30:52:c0:bd:c6:a9:b8:b1:23:3f:ea:5f:8e:
         27:83:67:70:0d:4c:89:c2:dc:82:98:82:a2:a3:71:c7:04:fa:
         09:78:6a:b4:f8:7f:e5:a3:e2:9a:c4:a6:cd:ed:9f:ed:5d:66:
         a0:42:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:01 2026 by rpki-client