Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/934C25D238C011F1AD0BCD9C99833773.roa
File:                     934C25D238C011F1AD0BCD9C99833773.roa (raw, json)
Hash identifier:          cGn3Lo/FbVIwl+53xjRLuIEPIR30UuULfhw/6zprKyo=
Subject key identifier:   7B:0E:61:72:9B:93:08:04:E4:E3:B1:96:AA:DC:55:D2:C7:0C:1E:9C
Certificate issuer:       /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial:       04
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/934C25D238C011F1AD0BCD9C99833773.roa
Signing time:             Wed 15 Apr 2026 11:45:18 +0000
ROA not before:           Wed 15 Apr 2026 11:45:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138398
IP address blocks:        167.179.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
        Validity
            Not Before: Apr 15 11:45:18 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69df7a4e-ff91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:94:e4:7c:b5:3b:59:a5:de:42:7d:2f:a8:
                    f1:36:9a:6c:6e:c6:3a:8f:fc:65:e2:28:53:a2:1f:
                    a5:d0:61:4c:0a:4c:26:9f:46:f1:ad:84:55:9c:d4:
                    b5:9c:a3:00:82:20:30:36:d1:17:ce:99:90:22:23:
                    18:d4:0e:b8:c8:d6:56:69:df:7d:20:44:7e:81:ec:
                    67:07:0c:52:1f:2c:ac:05:fd:76:a4:e5:23:85:cd:
                    59:e9:5a:74:18:97:7e:ae:bd:b8:dd:c3:88:37:13:
                    58:54:27:94:e6:3c:4f:c0:b6:e2:ae:74:81:20:80:
                    37:54:76:12:ad:91:6a:4c:63:2c:79:48:72:08:3e:
                    9a:0c:ad:cd:9f:91:e8:36:6a:12:ad:a3:56:37:7d:
                    ac:e0:19:59:0d:b7:37:0b:d8:50:17:e6:36:0b:f9:
                    4f:45:4d:e3:6f:b1:fd:6d:b6:d2:5b:33:39:52:17:
                    92:39:ec:f4:51:1e:c8:6e:4e:b3:64:5c:42:ad:19:
                    16:e4:6f:c9:77:57:f8:c7:ee:15:11:39:d0:45:73:
                    3f:87:42:26:19:8e:16:64:5c:3c:25:42:7a:af:a5:
                    67:eb:9b:f6:16:8e:03:e6:f4:57:fd:9a:b3:17:25:
                    33:06:44:14:e0:f7:7a:3d:45:c6:5b:a4:25:db:9d:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0E:61:72:9B:93:08:04:E4:E3:B1:96:AA:DC:55:D2:C7:0C:1E:9C
            X509v3 Authority Key Identifier:
                keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/934C25D238C011F1AD0BCD9C99833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:04:71:3b:1c:56:6c:6a:32:29:1c:bb:a3:d5:de:73:1d:
         80:49:43:29:a2:26:8d:df:8f:bd:a2:3e:be:dc:61:8d:3c:e0:
         ec:29:bf:5a:a1:5b:98:60:39:14:93:7e:58:cc:b7:23:c9:a8:
         0d:ac:36:08:0c:c9:bf:37:80:1e:7a:81:73:b9:5e:53:0e:ec:
         13:01:36:c1:4d:3d:00:66:80:66:1a:95:35:19:44:46:af:6e:
         b7:fe:2e:36:9b:50:55:a2:36:bd:08:64:26:98:67:e6:9a:50:
         28:00:4b:af:4a:33:9b:95:81:73:cb:3c:37:28:55:a3:99:fa:
         1c:bb:d8:72:dc:2a:da:53:57:92:a9:67:13:b0:5d:c7:fa:a3:
         cd:c3:1b:f6:1b:b0:87:73:b8:8a:9c:60:15:4f:86:07:d7:3b:
         f9:23:1c:b8:e4:90:40:1c:24:2e:6e:44:67:f6:43:25:30:a5:
         11:b3:a5:0a:b4:1a:bf:30:c2:95:f4:4f:d5:28:f3:1f:af:0e:
         5f:46:e3:b7:3a:d8:10:43:c6:dd:3f:82:bb:dc:84:f1:97:38:
         ec:f5:6b:33:1c:30:b2:77:f0:05:11:7e:c7:94:91:f9:22:b2:
         b0:33:b1:db:03:12:37:69:75:dd:4a:1e:a4:fb:23:2a:19:37:
         98:99:13:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:43 2026 by rpki-client