Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa
File:                     33C3BDD69AA111F0944EF628C4F9AE02.roa (raw, json)
Hash identifier:          pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=
Subject key identifier:   A4:40:47:56:07:63:8E:47:E5:F4:6B:70:94:CF:65:DA:25:EB:CA:EF
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       72
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa
Signing time:             Sun 05 Apr 2026 07:41:54 +0000
ROA not before:           Sun 05 Apr 2026 07:41:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     31898
IP address blocks:        196.15.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Apr  5 07:41:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d21242-b284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:f5:11:15:09:a0:1d:de:9a:71:9e:44:52:
                    32:f6:b9:37:69:70:1a:05:11:81:62:4b:00:37:37:
                    40:f2:18:a4:f4:6a:92:3d:f2:b8:1e:f9:cd:b6:9d:
                    f6:28:ac:7c:f9:07:02:23:bd:49:a6:91:d3:b6:3e:
                    5b:81:a0:17:f1:62:74:2c:7c:3d:78:f1:04:cc:b3:
                    60:cc:87:19:48:e5:07:0d:e8:ae:bf:88:e3:ca:e1:
                    0d:7a:b3:af:7c:a7:6d:8f:11:42:6f:ce:c8:0b:e2:
                    ec:e1:7c:1c:d5:85:2a:32:7b:61:c1:13:26:18:b6:
                    c7:a8:3e:27:96:9c:ce:66:e9:97:23:1f:79:e1:be:
                    16:dd:25:c8:29:76:b4:22:5d:98:2d:4b:f2:a8:83:
                    25:3a:7c:6e:c9:c0:4d:0c:11:ee:0f:8d:fa:5f:02:
                    7b:32:8f:74:51:aa:c2:36:f6:a0:0f:1c:37:88:b8:
                    9e:a0:99:ec:a8:86:5f:3a:30:16:f1:67:d3:a4:2e:
                    67:3b:21:8b:c2:60:47:e3:59:d1:a0:40:aa:e7:c9:
                    7f:79:6c:cb:c0:5a:0f:b4:bb:b6:be:27:fa:22:3d:
                    e8:06:13:16:1e:53:90:9f:5c:11:10:3f:93:a5:66:
                    74:93:95:ac:cd:dc:5c:68:4d:d5:6d:f5:ad:d7:6d:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:47:56:07:63:8E:47:E5:F4:6B:70:94:CF:65:DA:25:EB:CA:EF
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/33C3BDD69AA111F0944EF628C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.15.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:b5:59:1c:66:23:c7:b6:19:73:2c:bf:f9:bd:04:9a:8f:
         4f:a5:6d:8b:91:47:d5:0e:62:0c:5b:74:c9:35:0f:ac:b7:b7:
         59:fa:3a:cc:2c:1a:3e:46:54:a9:9d:67:f6:7a:35:7e:10:03:
         a7:67:1a:ea:83:a0:00:f0:ea:d6:73:f9:2e:b4:7e:d0:6a:7d:
         0b:f0:23:37:51:b9:3c:ce:9c:0a:b6:67:cd:f1:01:e9:fc:89:
         a9:6f:74:47:ae:2c:1e:20:c5:7e:38:7f:54:4c:f8:cf:da:c6:
         c0:c9:22:db:c5:fb:6d:c2:ba:1c:bf:ff:85:7c:1b:9f:1a:09:
         62:bd:8e:63:83:e7:a4:cc:a5:11:79:1b:41:ad:4b:44:b7:5f:
         44:75:b0:ce:03:e3:30:64:c5:06:c5:7c:38:4a:d8:a1:ab:16:
         81:5d:5f:d5:1c:b0:30:79:75:96:30:a8:dc:6f:ae:e4:72:d1:
         da:34:94:75:62:36:03:34:9f:62:c8:e5:2a:3e:5e:76:4f:f7:
         cb:58:24:ee:14:54:9e:2e:86:4d:1e:8f:3c:a2:cf:6f:a4:ee:
         6a:80:19:c8:76:1b:77:c1:e5:d3:e2:96:a8:70:9f:96:0e:7c:
         13:ce:d1:40:ce:60:bf:83:72:08:5d:e3:82:97:e7:48:2b:8b:
         87:7b:8f:de
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2
Njc3RjA5QjAeFw0yNjA0MDUwNzQxNTRaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZDIxMjQyLWIyODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpBvURFQmgHd6acZ5EUjL2uTdpcBoFEYFiSwA3N0DyGKT0apI98rge+c22nfYo
rHz5BwIjvUmmkdO2PluBoBfxYnQsfD148QTMs2DMhxlI5QcN6K6/iOPK4Q16s698
p22PEUJvzsgL4uzhfBzVhSoye2HBEyYYtseoPieWnM5m6ZcjH3nhvhbdJcgpdrQi
XZgtS/KogyU6fG7JwE0MEe4PjfpfAnsyj3RRqsI29qAPHDeIuJ6gmeyohl86MBbx
Z9OkLmc7IYvCYEfjWdGgQKrnyX95bMvAWg+0u7a+J/oiPegGExYeU5CfXBEQP5Ol
ZnSTlazN3FxoTdVt9a3XbR7fAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUpEBHVgdj
jkfl9GtwlM9l2iXryu8wHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz
OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RBQy83MjYwRkMwQzhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zM0MzQkRENjlB
QTExMUYwOTQ0RUY2MjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADEDxYwDQYJKoZIhvcNAQELBQADggEBACnQtVkcZiPHthlzLL/5vQSa
j0+lbYuRR9UOYgxbdMk1D6y3t1n6OswsGj5GVKmdZ/Z6NX4QA6dnGuqDoADw6tZz
+S60ftBqfQvwIzdRuTzOnAq2Z83xAen8ialvdEeuLB4gxX44f1RM+M/axsDJItvF
+23Cuhy//4V8G58aCWK9jmOD56TMpRF5G0GtS0S3X0R1sM4D4zBkxQbFfDhK2KGr
FoFdX9UcsDB5dZYwqNxvruRy0do0lHViNgM0n2LI5So+XnZP98tYJO4UVJ4uhk0e
jzyiz2+k7mqAGch2G3fB5dPilqhwn5YOfBPO0UDOYL+Dcghd44KX50gri4d7j94=
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:09:03 2026 by rpki-client