Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
File:                     33F4955E3A3411F1992413829C833773.roa (raw, json)
Hash identifier:          llScgH/DERZP3O6YHfGF7jLGiuA7wh+xHhl+qdlnh+A=
Subject key identifier:   D6:4A:A1:03:A2:63:53:C3:92:4C:2E:BF:74:74:8C:C3:CB:15:77:B8
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       114A
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa
Signing time:             Wed 24 Jun 2026 01:50:54 +0000
ROA not before:           Wed 24 Jun 2026 01:50:54 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133478
IP address blocks:        103.95.224.0/24 maxlen: 24
                          103.95.225.0/24 maxlen: 24
                          103.95.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 17:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4426 (0x114a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Jun 24 01:50:54 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3b37fd-9cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:64:3a:36:b4:e2:67:c5:c9:95:06:cc:98:
                    12:20:63:03:38:0c:dc:25:45:d1:5f:40:dd:26:ac:
                    d1:d1:91:82:22:ce:be:31:e4:03:a7:88:ca:51:6c:
                    b5:76:5f:ad:a8:e2:9e:46:e5:3d:c3:09:09:b8:67:
                    aa:c8:81:eb:cb:fc:80:e1:64:d7:d5:19:40:28:16:
                    52:5a:23:f8:d4:40:c7:f7:05:ac:03:fc:67:97:0d:
                    7e:b8:a2:9f:e6:55:9c:0e:0d:71:19:dd:42:e9:6a:
                    b1:b3:ad:8d:6f:68:32:d6:87:d3:84:0a:ef:c1:74:
                    c5:4c:0c:26:8f:a7:f0:ca:22:af:19:38:00:9b:73:
                    8c:71:33:76:bf:19:f5:d3:8b:e7:7f:7f:49:d1:71:
                    a7:35:76:f2:33:bc:d8:62:ec:64:d6:a1:d7:e7:3e:
                    cd:88:f7:4b:2e:2a:a4:cb:ad:9e:c4:5a:57:03:cc:
                    0c:0f:34:47:26:51:3d:24:76:7a:3e:4b:d6:91:18:
                    cf:b8:e0:33:85:a9:1f:63:1c:3a:f3:e5:97:a7:6b:
                    f6:46:94:43:9b:2d:9f:ab:bf:4d:bc:be:81:b9:45:
                    b8:10:a5:a5:98:2b:68:30:47:2f:ae:90:29:b0:91:
                    eb:d3:18:44:c9:51:60:73:20:16:18:a4:79:a8:d2:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4A:A1:03:A2:63:53:C3:92:4C:2E:BF:74:74:8C:C3:CB:15:77:B8
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/33F4955E3A3411F1992413829C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.224.0-103.95.226.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:61:fd:30:64:bf:eb:71:f8:2d:c4:31:72:78:84:5e:6b:0c:
         47:42:ff:fb:f0:d2:43:61:77:42:51:39:03:4a:3d:18:7d:11:
         db:3c:f2:7a:8b:da:27:1f:25:9c:2c:9b:4a:20:10:e6:8c:e3:
         ce:c3:dc:07:5f:7b:9e:95:c1:82:b9:12:13:ba:a9:cb:76:10:
         e2:9c:a0:67:57:e2:c6:38:36:1b:d9:68:5d:94:51:54:7a:74:
         3f:22:f1:82:8b:ce:f0:73:9c:05:48:91:7a:b3:10:de:6f:13:
         d4:b5:54:d8:2f:cd:c8:9a:b5:4b:a1:6b:39:45:a2:61:90:56:
         0d:2a:96:15:38:fd:f7:7c:8f:e0:b2:57:8c:55:87:0d:57:77:
         14:24:a8:72:50:41:ed:d3:1b:ed:ac:bf:c3:49:a8:7d:f3:fa:
         d1:4d:1e:46:5d:55:22:2d:19:66:a3:76:aa:2a:00:64:01:bd:
         4d:e4:49:2a:09:27:9e:8e:1b:db:cd:70:96:8c:60:1a:63:02:
         7b:73:90:9b:16:6b:b5:ef:fa:bf:fd:2c:37:ee:d4:9b:df:0c:
         b1:be:d7:9e:b3:67:ab:81:af:f9:16:e5:69:97:e3:08:9a:46:
         0a:3f:e9:1d:5a:73:7b:0c:fa:46:7f:7c:8a:db:bc:ea:0a:5a:
         ea:c7:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 09:55:01 2026 by rpki-client