Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/33B40FB8826D11F095A2E27BC4F9AE02.roa
File:                     33B40FB8826D11F095A2E27BC4F9AE02.roa (raw, json)
Hash identifier:          jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=
Subject key identifier:   6D:3C:B9:A8:FB:C8:B0:EF:24:9E:C9:FC:2B:23:99:39:6A:CC:18:C9
Certificate issuer:       /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial:       6B
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/33B40FB8826D11F095A2E27BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:18:43 +0000
ROA not before:           Thu 05 Feb 2026 17:26:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        112.121.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
                          rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
        Validity
            Not Before: Feb  5 17:26:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43cb2-6b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:26:b5:d3:e9:8c:35:d1:bd:2b:4e:37:1c:
                    2a:44:1b:0e:9a:7c:2e:95:e4:fe:ef:9a:ab:6b:fa:
                    be:03:28:9c:2d:63:c2:e7:a0:06:64:25:02:69:29:
                    59:54:fa:67:71:3f:e4:83:fb:d3:0b:42:ee:e7:b3:
                    5e:fe:fb:e6:3a:24:ac:6d:f7:bd:03:50:19:46:80:
                    c6:38:aa:8d:b0:93:96:42:66:7c:43:f8:14:fd:a6:
                    0b:f2:22:27:29:c1:ce:26:03:92:fa:31:cd:65:57:
                    4d:93:3a:91:73:99:34:6e:83:7c:86:d8:85:c3:58:
                    d0:87:c4:53:36:75:3e:13:ea:4f:b2:9a:f0:3d:5f:
                    8d:53:a3:3b:df:28:8b:35:f2:7d:17:53:6f:ec:2d:
                    fa:e2:82:07:80:b4:34:0a:32:98:d9:99:0d:af:03:
                    43:e5:01:02:28:39:0c:db:a9:93:a2:88:f8:ce:18:
                    6b:38:91:16:a1:e5:1b:3c:8a:59:8a:b5:63:34:23:
                    27:30:19:fd:1b:2d:f5:2d:13:ca:fd:c9:54:da:c8:
                    c6:f2:13:b6:d1:30:9f:3c:56:49:9d:93:fe:f9:b4:
                    ef:37:e4:45:4c:5f:c1:bf:1f:e5:ea:81:0c:9b:a2:
                    ec:3b:84:b4:b4:bf:ca:0f:2e:a0:79:86:d1:25:92:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3C:B9:A8:FB:C8:B0:EF:24:9E:C9:FC:2B:23:99:39:6A:CC:18:C9
            X509v3 Authority Key Identifier:
                keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/33B40FB8826D11F095A2E27BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.121.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:8e:ac:22:3f:18:bf:75:65:b3:cd:4e:63:87:96:11:2b:
         09:09:0c:27:5e:c5:79:8c:a1:13:e8:33:66:fa:c9:8c:dd:36:
         07:c0:d3:72:dc:6d:fd:b5:e1:64:74:48:2a:f0:c3:25:fa:e7:
         2e:31:a0:24:d1:ae:10:d4:af:ed:fb:4c:5b:ed:d8:dd:25:0e:
         0e:37:bc:ef:05:ce:58:df:1e:f3:9d:92:3b:91:0c:23:6b:04:
         65:39:e8:e6:27:db:1a:96:c7:a4:42:d7:64:d5:4f:18:3f:bf:
         af:cb:5a:5d:af:61:ab:73:d5:cf:36:1d:e5:5a:d1:f4:71:57:
         14:d8:dc:7c:60:16:9c:25:75:6b:26:b8:33:3c:ac:67:4d:44:
         69:d1:86:f6:1d:b0:2d:d4:ee:e0:ae:a6:04:83:57:1d:89:17:
         14:88:35:c3:9a:f4:80:61:41:ea:1e:0d:07:5e:42:6f:f9:8d:
         5b:3a:03:3d:e1:36:3e:85:df:56:1b:a7:41:54:b8:14:5c:fa:
         45:35:e8:95:84:6d:0b:c0:7c:f4:3f:37:5e:86:64:17:13:e8:
         99:4a:9e:79:fb:91:18:46:9b:48:28:de:cf:55:80:da:45:5f:
         b5:bb:ed:91:aa:e0:dd:a7:48:4f:44:81:75:fc:7f:7f:cb:4c:
         4e:9a:88:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:16 2026 by rpki-client