Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/33471FD866EE11F09D3F3F84C4F9AE02.roa
File:                     33471FD866EE11F09D3F3F84C4F9AE02.roa (raw, json)
Hash identifier:          0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=
Subject key identifier:   FF:67:59:C6:45:85:97:F7:3D:EF:7E:70:76:3B:63:13:8D:EE:9C:E4
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       0265
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/33471FD866EE11F09D3F3F84C4F9AE02.roa
Signing time:             Tue 22 Jul 2025 11:22:50 +0000
ROA not before:           Tue 22 Jul 2025 11:22:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134428
IP address blocks:        103.211.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Jul 22 11:22:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=687f7489-4e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:1b:98:4d:da:97:64:ec:23:d4:a7:c2:9e:
                    b9:53:86:37:3a:33:b2:64:8f:c7:99:f5:51:11:aa:
                    de:ee:fc:9c:d5:e5:a1:16:35:37:e9:36:2c:a3:29:
                    fe:81:bd:a2:8f:33:9e:87:aa:35:06:32:1a:2b:83:
                    3d:75:e9:3f:0f:5d:2d:5d:62:d7:c8:0f:3c:3a:9b:
                    bb:ee:97:2c:4d:1c:8f:0f:a1:cb:88:53:14:8f:1b:
                    47:a7:b1:f0:10:b6:4c:b1:39:d3:33:f0:fb:d9:0a:
                    a5:62:df:8f:73:f5:e7:d9:39:41:eb:12:e1:c2:14:
                    da:b1:69:72:9a:2f:8c:ee:6b:a6:44:02:2e:6a:95:
                    4e:7b:af:27:b3:e9:b8:02:72:9d:7c:46:18:d3:52:
                    09:9a:f2:eb:c2:4e:76:f9:2f:07:f3:f2:3e:7b:30:
                    46:f0:f1:73:ae:db:e6:5f:69:65:83:4f:e1:b5:c6:
                    da:2b:7f:c5:4a:88:0a:37:21:e4:7a:a5:11:11:8c:
                    62:40:95:d3:3b:28:7b:b8:9c:1e:10:98:c9:20:df:
                    fa:b8:00:e8:60:e3:17:37:8f:97:84:a5:a4:a0:ed:
                    71:31:a9:80:6c:a6:44:5c:fb:fd:e8:49:73:52:b1:
                    54:b6:27:f2:e1:d7:a7:4c:49:11:9a:21:5a:31:7e:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:59:C6:45:85:97:F7:3D:EF:7E:70:76:3B:63:13:8D:EE:9C:E4
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/33471FD866EE11F09D3F3F84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:45:29:fa:1a:5f:78:da:4c:b0:e5:05:b7:09:b2:4e:db:bd:
         cc:3a:41:fc:e8:ab:ec:39:a0:88:9d:91:d0:cb:b9:02:18:9d:
         a5:13:ab:fb:40:75:d3:c0:36:fc:84:d2:60:df:a1:9a:3b:58:
         c2:b9:3d:14:4e:1d:bc:be:9a:a8:64:8c:17:ce:86:22:5e:26:
         22:78:da:04:21:e3:09:37:17:03:ad:38:51:4a:ba:25:b1:0a:
         40:5a:38:76:98:2f:85:89:43:d9:de:2d:53:b2:6d:70:eb:75:
         b8:a7:5b:6c:0c:60:d9:43:5c:07:3a:f6:69:ad:d9:47:7f:2f:
         8c:12:76:5c:59:55:18:9c:db:74:1e:eb:7c:1d:ee:99:3e:b0:
         7d:bb:b6:f5:09:ea:24:ef:89:e8:39:ad:82:a2:5b:d5:48:a0:
         1f:7a:e8:c8:63:d0:67:fc:c2:1c:87:d1:60:3f:4f:f7:cd:ce:
         c8:0c:50:b6:75:5d:76:e9:f1:15:46:20:c1:df:b0:3c:c0:d7:
         69:04:6f:3d:4c:d0:82:3e:1d:cb:e4:e6:ba:00:19:d6:ea:35:
         56:93:0b:51:d8:fa:40:75:1e:92:35:ad:bf:db:3a:52:64:31:
         f5:0e:a5:f2:35:1f:32:42:b2:62:7e:cd:fe:38:60:d0:0b:d8:
         49:fd:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:32:04 2025 by rpki-client