Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/33471FD866EE11F09D3F3F84C4F9AE02.roa
File:                     33471FD866EE11F09D3F3F84C4F9AE02.roa (raw, json)
Hash identifier:          T5RBlYJgQs6ISkXcq1f1X0ZsCysRorxL5jI3XL7/lpI=
Subject key identifier:   0A:8C:71:A7:37:E7:39:9D:35:C2:AB:35:F0:B5:74:27:15:81:F2:80
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       02EE
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/33471FD866EE11F09D3F3F84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:28:27 +0000
ROA not before:           Tue 22 Jul 2025 11:22:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134428
IP address blocks:        103.211.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Jul 22 11:22:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44d0b-3d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:92:15:c0:21:71:46:93:2d:9a:6f:e4:84:
                    5a:9a:8e:3d:68:b2:1e:6e:3a:9a:5b:2c:d8:86:95:
                    4e:c1:16:85:ae:92:09:d0:60:3e:ea:6d:90:37:01:
                    54:1a:54:9c:03:30:c3:1d:7d:f6:a6:b2:d5:4a:4a:
                    2d:4b:f2:8b:97:b3:61:d8:a6:8e:b1:25:6a:5e:3c:
                    9c:ca:19:49:47:c2:9f:29:02:91:00:e7:9f:a5:ed:
                    ca:1d:50:d9:f5:70:0f:d5:f5:57:76:0d:74:ad:51:
                    34:d5:de:d0:ce:28:e3:58:c6:b6:aa:31:19:ac:0d:
                    a7:19:45:62:35:3c:30:83:7d:2c:74:1f:6c:62:ba:
                    86:e7:63:24:6c:f1:5c:31:66:65:dd:b9:7c:a3:da:
                    8a:bd:12:a0:a0:5a:9f:28:47:0e:da:9d:98:81:4d:
                    a5:8b:d5:c7:c5:b5:6f:0b:c6:88:8c:8f:29:26:35:
                    21:cf:9c:57:af:de:a9:5c:1e:40:d2:d9:8b:83:ef:
                    9b:72:66:cd:fa:cc:73:18:d7:43:fc:2b:45:07:3a:
                    c4:5f:a8:2f:ce:83:ab:b5:42:78:2b:c6:a2:5f:ee:
                    21:f7:c0:a1:5e:f7:c1:34:78:44:7a:b9:c3:a4:6a:
                    ee:b8:de:f1:ca:e8:63:f9:b7:30:56:29:39:73:e8:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:71:A7:37:E7:39:9D:35:C2:AB:35:F0:B5:74:27:15:81:F2:80
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/33471FD866EE11F09D3F3F84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:c3:4d:b1:b7:4b:68:34:1d:6f:d7:fa:4b:92:43:29:9a:
         14:ef:81:f8:be:95:d6:d1:ec:b6:02:55:83:8e:7b:14:32:a6:
         9f:b0:1e:b0:31:32:c0:d4:1a:99:3c:2a:dc:be:f6:0b:2d:ea:
         ca:71:57:36:7a:14:46:af:07:15:b3:0c:55:36:df:26:84:cf:
         a5:09:75:b7:10:c7:75:88:d7:e1:00:c1:83:d7:ef:17:c3:37:
         fd:7e:e4:55:a2:67:4d:7e:a3:4f:f8:70:38:be:65:5b:e2:cc:
         78:77:98:f3:32:70:6c:d9:33:7e:60:c0:62:86:f4:80:21:a0:
         de:dc:79:02:59:41:2a:ff:89:61:ff:ec:8a:ca:f5:22:7f:3e:
         1f:20:f1:71:99:d8:58:2f:8f:3b:d9:1e:da:6b:da:11:33:b7:
         47:aa:2e:2b:1d:b8:a4:b8:0c:05:76:0e:49:0e:06:da:92:6e:
         e9:01:8b:61:87:80:db:7f:ed:55:d4:74:39:5a:ac:88:b3:a5:
         a0:74:a7:ea:b5:3e:14:7d:e7:0e:ac:0e:67:a4:23:7d:46:6a:
         0e:af:59:e3:82:69:10:35:f7:46:b6:ee:d5:b3:8a:1a:ec:be:
         15:b5:82:01:46:3a:ee:31:e6:09:df:ed:20:07:50:ac:d4:b7:
         f0:4f:b3:d4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1
M0E1OEZBNjcwHhcNMjUwNzIyMTEyMjUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGQwYi0zZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqguSFcAhcUaTLZpv5IRamo49aLIebjqaWyzYhpVOwRaFrpIJ0GA+6m2QNwFU
GlScAzDDHX32prLVSkotS/KLl7Nh2KaOsSVqXjycyhlJR8KfKQKRAOefpe3KHVDZ
9XAP1fVXdg10rVE01d7QzijjWMa2qjEZrA2nGUViNTwwg30sdB9sYrqG52MkbPFc
MWZl3bl8o9qKvRKgoFqfKEcO2p2YgU2li9XHxbVvC8aIjI8pJjUhz5xXr96pXB5A
0tmLg++bcmbN+sxzGNdD/CtFBzrEX6gvzoOrtUJ4K8aiX+4h98ChXvfBNHhEernD
pGruuN7xyuhj+bcwVik5c+hyqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAqMcac3
5zmdNcKrNfC1dCcVgfKAMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3
N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzRFMzUvMEU3QUIzMzIyNzdCMTFFRDgwQTM4MzI4QzRGOUFFMDIvMzM0NzFGRDg2
NkVFMTFGMDlEM0YzRjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ9NGMA0GCSqGSIb3DQEBCwUAA4IBAQABvMNNsbdLaDQdb9f6S5JD
KZoU74H4vpXW0ey2AlWDjnsUMqafsB6wMTLA1BqZPCrcvvYLLerKcVc2ehRGrwcV
swxVNt8mhM+lCXW3EMd1iNfhAMGD1+8Xwzf9fuRVomdNfqNP+HA4vmVb4sx4d5jz
MnBs2TN+YMBihvSAIaDe3HkCWUEq/4lh/+yKyvUifz4fIPFxmdhYL4872R7aa9oR
M7dHqi4rHbikuAwFdg5JDgbakm7pAYthh4Dbf+1V1HQ5WqyIs6WgdKfqtT4UfecO
rA5npCN9RmoOr1njgmkQNfdGtu7Vs4oa7L4VtYIBRjruMeYJ3+0gB1Cs1LfwT7PU
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:09 2026 by rpki-client