Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/D14FB73439DA11F1B4AF0311B9833773.roa
File:                     D14FB73439DA11F1B4AF0311B9833773.roa (raw, json)
Hash identifier:          98qj9ACGoLIV5uiZE8wJ/8qhEcL1JY5MLgWrObpjwjc=
Subject key identifier:   04:1C:31:DF:29:84:7A:61:FC:B2:7C:43:C3:5B:58:D6:01:EC:D9:E3
Certificate issuer:       /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial:       0344
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/D14FB73439DA11F1B4AF0311B9833773.roa
Signing time:             Thu 16 Apr 2026 21:25:40 +0000
ROA not before:           Thu 16 Apr 2026 21:25:40 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154047
IP address blocks:        203.33.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
                          rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
        Validity
            Not Before: Apr 16 21:25:40 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69e153d4-1801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:3e:1f:68:d7:a3:4b:b3:51:04:46:9a:2b:
                    55:1e:e1:a2:6e:bf:83:a3:23:8a:43:b4:ff:4b:47:
                    25:4b:63:20:0e:cd:ff:e9:7c:d2:05:22:56:b8:2a:
                    55:a0:ef:e0:bf:48:15:ba:d4:6e:6a:bc:af:97:4d:
                    09:f7:ba:b4:6e:62:f9:80:4a:46:cd:cc:8b:49:73:
                    f0:ec:2e:06:2f:5e:c2:62:d7:25:b6:a1:14:17:13:
                    df:41:fd:3d:84:ab:d1:38:8b:a8:7b:42:da:61:3d:
                    80:0f:41:ac:ff:0c:fe:5f:cd:e0:27:a9:5b:f2:aa:
                    78:68:c0:46:50:48:41:f7:f6:27:87:ae:0b:d3:09:
                    62:62:c2:21:41:4f:85:54:b3:4c:2a:d0:09:d6:48:
                    0a:a3:83:64:24:83:b4:d2:46:ca:e7:6f:88:fd:e8:
                    06:00:78:82:1a:54:1e:2b:e5:d1:3a:9d:37:11:cf:
                    15:10:da:f8:05:c0:cb:41:dc:98:5e:b6:da:ef:a9:
                    d9:11:e7:7d:db:a8:2c:5e:dc:5b:d6:7f:9a:58:5f:
                    a8:73:19:b2:a3:bd:97:a1:37:c1:9c:29:ab:a8:77:
                    f2:db:65:30:c1:2c:46:e0:da:de:bb:68:c3:8a:45:
                    42:c1:0d:39:c4:86:d1:ac:f8:e0:8f:1b:99:18:b0:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:31:DF:29:84:7A:61:FC:B2:7C:43:C3:5B:58:D6:01:EC:D9:E3
            X509v3 Authority Key Identifier:
                keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/D14FB73439DA11F1B4AF0311B9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:28:42:2e:81:eb:ad:b6:ba:29:46:90:a6:1b:9c:df:0c:
         49:2e:7d:dd:44:f0:89:fc:58:55:86:5b:52:e7:7d:77:f6:53:
         e0:26:8c:48:77:f2:ae:cc:a6:29:b4:bd:d3:c0:3a:1e:bf:8f:
         f5:30:e5:05:1a:64:1c:e3:6b:00:66:b0:ca:73:60:aa:f7:b8:
         39:ef:d4:ed:74:c6:a4:a9:f9:10:72:90:a4:3d:70:2c:01:6b:
         2a:43:31:dd:11:a1:d6:59:6e:1c:58:8d:00:64:8e:b9:8c:8d:
         4d:19:3f:ea:95:f4:54:d1:57:62:07:0a:ad:87:9c:c9:25:4b:
         90:c1:d9:95:de:4f:b4:95:ac:cb:cf:16:b8:f7:5d:ea:9b:4f:
         19:72:a9:86:c9:f1:90:5b:b3:8b:19:2f:ec:ec:ff:f6:d8:b5:
         60:06:27:96:cb:dd:4d:a7:47:83:4a:18:38:12:5d:26:2b:12:
         e5:31:6f:de:f6:9c:75:48:bc:0b:a6:81:45:71:2d:02:5e:cc:
         5f:51:48:99:5b:99:fd:f2:06:90:00:91:43:62:db:8e:d5:41:
         2b:2e:a3:f8:95:41:d1:6b:10:4a:4a:c0:1a:bf:50:0e:c7:6b:
         51:22:67:97:38:3d:3e:b8:0c:d2:04:d2:89:21:e1:b8:2f:96:
         91:a1:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:45 2026 by rpki-client