Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/133A934C693111F0A51E5767C4F9AE02.roa
File:                     133A934C693111F0A51E5767C4F9AE02.roa (raw, json)
Hash identifier:          l/0T2BsqMpYHNb99BtwYJXwOCZfICpcu+3uO0zv0gmw=
Subject key identifier:   F9:2F:7C:E7:54:A2:B0:D6:D5:9A:B1:56:3A:3D:D8:67:A2:14:7D:03
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       0203
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/133A934C693111F0A51E5767C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:36:13 +0000
ROA not before:           Fri 25 Jul 2025 08:27:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7480
IP address blocks:        103.69.92.0/24 maxlen: 24
                          2001:df2:5740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Jul 25 08:27:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3ec6d-9bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:74:76:93:82:f5:e9:b6:75:d7:42:27:60:
                    5b:5e:27:40:36:21:5d:85:3e:9b:c2:d4:ff:aa:62:
                    86:ee:3e:84:5a:91:41:a3:bd:fb:21:75:31:24:6e:
                    c4:d1:b8:b8:13:64:17:f8:44:fd:cd:c3:5b:23:47:
                    19:89:0b:ae:bf:2c:99:78:2e:76:30:bd:5f:c1:60:
                    e8:42:24:86:a8:e7:63:28:27:b9:e8:bf:5b:c2:23:
                    fd:1f:7e:42:94:9b:62:fe:26:fe:22:dc:09:6f:32:
                    07:e0:ef:88:7e:39:c8:c5:5e:e7:c0:e6:a7:be:af:
                    73:7d:9e:da:70:9a:63:ba:23:0e:d2:2d:d4:43:83:
                    49:39:0f:33:c4:dc:c9:2e:e4:8a:8d:b3:0a:23:6f:
                    92:97:00:e0:2d:6e:41:ac:0a:3f:5a:56:de:7b:9c:
                    ea:38:9c:79:10:81:1d:6e:89:4a:b2:ca:e3:ba:ca:
                    c0:cc:3f:bd:4d:9b:85:f0:c1:5a:57:23:22:83:93:
                    3a:a8:53:4d:b6:34:ed:b6:8c:05:03:15:26:5b:3d:
                    f6:24:b8:4b:32:44:c0:70:12:83:39:b4:ed:cd:81:
                    2b:97:c1:d5:a6:53:ea:2b:b1:60:56:2c:eb:a1:cc:
                    a4:45:b1:13:a9:04:82:b0:a4:fc:60:3f:1f:1e:4d:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:7C:E7:54:A2:B0:D6:D5:9A:B1:56:3A:3D:D8:67:A2:14:7D:03
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/133A934C693111F0A51E5767C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.92.0/24
                IPv6:
                  2001:df2:5740::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:8e:cd:55:6c:63:23:a7:d1:70:18:d7:f2:9f:23:23:4a:26:
         87:8f:ab:04:fc:5e:95:40:40:a0:a3:ad:b3:5e:ea:c6:4b:ae:
         54:96:88:8e:7b:e1:00:be:5c:9e:ed:71:6a:32:36:b1:a1:5f:
         11:b3:f2:fd:93:5b:b9:7b:8b:4f:48:54:a7:78:73:be:43:e6:
         6e:92:fc:7e:e1:4b:70:1a:b7:18:92:78:b5:43:86:e2:9a:be:
         d5:35:83:35:f9:1f:cc:74:6c:71:ab:8b:8b:88:04:d3:86:fc:
         d8:4d:75:b0:6f:db:24:f4:f4:b4:0d:79:52:61:dc:b3:27:e4:
         6a:3b:a5:7e:27:0e:8c:b5:fc:13:7d:67:ed:8c:b5:9b:00:ab:
         cd:1a:de:ac:b0:17:37:a6:3c:85:fe:4e:01:2c:32:dd:92:21:
         25:cc:52:c0:4f:44:f4:95:4b:66:f4:b0:c3:48:9a:68:d9:fd:
         e9:79:0e:87:da:02:8d:ce:4d:de:72:17:f2:87:d8:1d:c6:20:
         86:e9:db:33:25:5d:ed:c9:e5:af:fe:ec:88:3e:0b:71:30:57:
         54:5d:a4:e4:49:d2:24:f6:a5:c3:17:a4:f8:60:20:be:39:f2:
         7f:a9:5d:fa:12:8a:b1:0d:39:78:e1:46:94:fd:0d:99:f6:8e:
         be:42:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:42 2026 by rpki-client