Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/33253220B5CA11F19A00DBF44311F970.roa
File:                     33253220B5CA11F19A00DBF44311F970.roa (raw, json)
Hash identifier:          sKLVgopa7iD7VB18ZJtMNmaTxumSLt54Q49L9FE+4sc=
Subject key identifier:   A2:7E:8F:0A:44:64:E6:E7:59:C3:4D:F1:AB:F2:6B:B8:E8:7E:70:A1
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       115B
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/33253220B5CA11F19A00DBF44311F970.roa
Signing time:             Mon 21 Sep 2026 14:39:07 +0000
ROA not before:           Mon 21 Sep 2026 14:39:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138985
IP address blocks:        103.20.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4443 (0x115b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Sep 21 14:39:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab1418b-05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:98:21:26:ad:18:6d:13:84:95:e1:5c:71:
                    28:bd:56:42:05:38:38:9f:ce:5d:69:14:cf:ce:48:
                    34:36:d6:87:61:fa:1d:e3:f0:34:10:87:31:98:72:
                    96:31:0c:18:a5:19:4e:43:ae:a2:8a:fc:9c:03:8a:
                    7e:8d:7c:2b:41:71:1c:73:6c:c5:fd:4a:e9:ab:3e:
                    d0:fc:db:77:31:c4:39:50:93:f2:8d:30:bc:7d:75:
                    96:70:6b:1b:54:7a:8c:e2:25:2f:68:23:61:53:4f:
                    4b:fc:4a:46:88:ca:ed:08:07:4f:79:41:5e:05:4c:
                    8f:62:21:18:5a:ec:e4:a3:13:2e:b9:b2:20:4e:cb:
                    fe:55:02:77:26:49:41:e5:ad:bb:e6:7a:32:ca:23:
                    01:5f:12:b1:b5:25:f1:02:fa:4c:73:b8:0a:c7:de:
                    df:e3:67:44:dc:6d:d2:b3:0d:74:f7:87:7a:24:a1:
                    64:3c:e6:e8:fc:d6:52:ce:22:a1:ef:fb:2f:ff:e0:
                    63:50:97:03:47:e5:99:8b:73:2e:2c:bb:8c:9b:cc:
                    94:c0:45:07:17:a2:55:4c:87:28:f6:55:08:5c:58:
                    77:be:73:35:22:9e:1b:3f:ea:92:6d:6c:18:a5:b3:
                    eb:66:95:c7:60:dc:f7:a9:5b:73:30:3b:27:44:19:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7E:8F:0A:44:64:E6:E7:59:C3:4D:F1:AB:F2:6B:B8:E8:7E:70:A1
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/33253220B5CA11F19A00DBF44311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:2b:bd:0f:1e:5c:59:67:be:03:3e:d3:41:ae:f6:e8:21:ab:
         67:50:9e:28:a3:fb:a3:6e:82:b8:6b:58:b3:45:6a:92:15:9e:
         62:b2:8b:1f:5a:31:36:7f:f1:b5:12:fa:b4:ee:df:01:d9:86:
         0e:26:eb:7d:be:98:a3:4c:4a:c3:8d:ab:06:02:d1:23:4d:7c:
         f0:f4:65:4d:5f:44:98:01:10:17:4d:9b:ed:23:97:74:5d:df:
         86:94:85:08:ad:5f:54:a4:c8:17:d1:15:9f:1e:40:d9:e0:29:
         7a:37:db:91:4c:59:53:8c:82:b3:c0:4f:38:92:69:60:64:39:
         44:ee:fc:32:8c:6a:f6:dc:1b:bb:57:15:7b:8b:24:25:65:69:
         20:fc:e3:8f:90:9f:0b:06:37:a6:d2:e8:48:fa:a7:45:83:0c:
         b6:a2:74:01:aa:41:8f:25:b2:a3:0d:fe:fc:3b:76:a7:19:ef:
         78:ff:29:db:6e:87:e2:1e:73:15:e8:62:bb:04:76:60:55:69:
         8d:3c:1d:c7:f9:e9:d7:0e:57:eb:ea:a8:fe:28:e6:20:3a:d4:
         8f:1f:d4:03:12:90:8f:85:f9:43:0f:d3:b1:37:e3:7c:c6:13:
         e1:1a:cb:65:b9:b6:6c:4b:07:b9:2c:86:1e:63:26:fe:ee:f4:
         a1:f9:a1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:12 2026 by rpki-client