Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9933B21049D411E7AA790315C4F9AE02.roa
File:                     9933B21049D411E7AA790315C4F9AE02.roa (raw, json)
Hash identifier:          wmOw2BuoGCJIUHvVuaRQLG+5/JheVX4qLMgdMvPjXZ4=
Subject key identifier:   A5:8E:D3:9E:21:88:4A:96:98:4C:91:12:25:D9:B8:C0:93:B3:98:8A
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1C4E
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9933B21049D411E7AA790315C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 16:34:46 +0000
ROA not before:           Thu 28 Aug 2025 16:34:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45671
IP address blocks:        203.33.22.0/24 maxlen: 24
                          2001:df3:ba00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 16:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7246 (0x1c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Aug 28 16:34:46 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b08526-702e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:43:dc:01:d0:44:66:c6:c5:4b:39:3e:bf:
                    be:ab:bc:5a:29:28:ab:3c:76:5c:52:48:9b:f2:68:
                    4d:5d:76:bd:f2:90:e0:6a:16:bf:f5:73:6c:46:09:
                    f8:b9:8e:56:2b:6e:91:be:62:86:ed:2f:10:31:38:
                    91:5c:7c:a9:aa:c1:29:97:b1:e8:84:ed:d4:70:ac:
                    86:b8:aa:ce:b8:c2:cf:f8:bb:7b:06:5f:cf:85:64:
                    0f:eb:6e:45:71:da:77:9c:f3:46:8f:03:83:8e:fe:
                    84:44:67:7f:8c:c7:6c:40:5e:09:ff:4c:83:b2:e6:
                    15:73:c7:37:9c:6f:2c:75:ba:96:df:89:20:59:7e:
                    41:5c:33:65:42:0c:b9:51:fc:b9:77:fb:67:52:0e:
                    c3:03:27:1e:64:3a:f7:cb:6c:b3:67:3e:a3:6d:3a:
                    c4:82:76:4b:dd:8b:9e:86:81:35:7a:0c:5d:e9:9b:
                    bd:94:cb:4b:39:e1:25:2d:a2:b2:58:d7:80:b3:27:
                    20:a9:55:43:5b:00:ab:db:4e:4f:75:72:b2:28:26:
                    59:61:15:e9:f6:8c:f4:7b:f8:88:fb:dc:e6:5f:2e:
                    34:09:fb:43:56:54:6e:7f:93:25:2e:96:ac:00:c4:
                    d2:9a:2e:c3:22:4e:71:09:90:c7:ce:ac:3d:d9:0e:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8E:D3:9E:21:88:4A:96:98:4C:91:12:25:D9:B8:C0:93:B3:98:8A
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9933B21049D411E7AA790315C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.22.0/24
                IPv6:
                  2001:df3:ba00::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:ea:3e:8a:45:db:3e:3a:40:2c:05:1e:55:13:4c:ce:bd:
         c9:4c:ed:a4:49:31:96:8f:3e:9a:1b:0a:26:28:67:23:20:a3:
         12:f7:99:d0:71:9c:67:00:4c:f3:a8:16:36:17:97:01:d2:65:
         2d:5b:87:01:1e:d9:4d:fe:0d:df:3b:8c:5d:31:20:78:cc:3e:
         b9:50:01:82:64:e3:23:ff:25:65:f8:b8:ea:b5:f2:04:56:6e:
         af:1b:fa:71:12:29:e2:8d:b5:c9:bc:e4:b5:b7:9e:ba:5e:83:
         91:90:e5:94:43:e7:63:b6:bd:77:b5:97:70:a8:ef:6d:d6:41:
         2f:86:e8:72:a6:77:00:91:97:d8:51:cb:67:fe:11:a6:a3:0e:
         55:14:98:1d:00:44:88:3c:96:c8:e4:e8:83:f9:b6:8d:c9:93:
         b8:11:b3:3d:61:23:eb:50:94:45:de:1e:fb:d7:ce:47:74:ff:
         3c:91:5a:2a:69:3b:f7:b9:86:5a:c6:25:80:ec:e1:e3:fc:15:
         9d:20:44:60:8e:5c:5c:9a:fb:f3:2e:4a:e1:1d:94:6c:41:30:
         e6:75:32:eb:66:50:36:0b:84:bb:df:0f:e0:7e:b5:ea:30:72:
         e3:45:fd:1c:11:8e:50:72:00:20:8b:d5:3b:ab:d5:e8:d4:bf:
         9f:d7:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:56:09 2025 by rpki-client