Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9933B21049D411E7AA790315C4F9AE02.roa
File:                     9933B21049D411E7AA790315C4F9AE02.roa (raw, json)
Hash identifier:          QZA5NGT0T4vQbPj3DAMmG2s01npT1BslQYeDAKHKYHA=
Subject key identifier:   32:36:B5:3A:48:33:01:95:60:D4:ED:AB:6E:28:01:45:2E:4E:CF:A4
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1CB6
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9933B21049D411E7AA790315C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:24:37 +0000
ROA not before:           Thu 28 Aug 2025 16:34:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45671
IP address blocks:        203.33.22.0/24 maxlen: 24
                          2001:df3:ba00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Mar 2026 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7350 (0x1cb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Aug 28 16:34:46 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46844-bec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:c9:d9:4e:d0:42:cf:6c:ee:06:a4:68:f1:
                    9e:03:81:ee:79:a2:60:cf:28:66:ed:23:1e:bc:bd:
                    b6:f1:b8:56:7b:bc:ab:61:18:4b:0b:28:8d:3f:83:
                    20:65:4f:f3:e4:fe:79:aa:3e:75:d8:a1:f0:41:e0:
                    93:3c:65:ec:56:c3:22:19:62:30:21:91:83:cb:a2:
                    55:3b:ad:a3:71:4c:5e:1e:3f:bd:a0:c6:80:b0:c6:
                    8d:e8:0b:ab:0c:f2:83:6b:08:a1:bc:7d:0e:dd:5c:
                    fe:6b:bd:c2:6a:1d:65:7d:a9:83:05:83:2d:5e:cd:
                    9a:ef:cf:63:24:58:1f:3c:e9:da:3f:63:2f:47:dd:
                    95:7f:9f:2b:67:18:43:1b:84:a7:e1:c3:e1:59:8a:
                    96:fc:0b:97:62:6a:8a:9e:0a:95:3f:4b:a0:03:ab:
                    0e:58:d3:1d:a2:46:69:9c:98:7c:3b:9d:90:a7:99:
                    6d:72:87:00:16:40:17:6b:09:eb:18:f1:69:8d:fd:
                    f0:5b:d0:e4:f3:61:3c:05:e9:65:97:f3:03:a0:9a:
                    85:bf:95:d6:93:5b:93:89:42:3f:d0:29:82:8b:5c:
                    6d:58:5b:fe:83:3b:17:4c:59:60:e0:0e:a9:fb:49:
                    53:45:91:43:85:00:00:2e:ab:88:60:75:71:99:92:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:B5:3A:48:33:01:95:60:D4:ED:AB:6E:28:01:45:2E:4E:CF:A4
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9933B21049D411E7AA790315C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.22.0/24
                IPv6:
                  2001:df3:ba00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:23:2b:00:32:88:1e:49:25:c2:c8:ea:bd:46:de:a9:5c:
         65:75:38:90:9a:1c:90:4b:73:65:8c:c4:91:b9:0a:ae:75:42:
         58:9b:5d:84:53:57:5c:3f:83:a6:4b:37:41:d9:92:47:fd:ac:
         a8:ec:30:34:b9:d0:7e:20:31:4c:39:73:f1:28:c1:16:9f:ea:
         2b:58:1e:aa:65:d1:bf:56:ba:ce:fa:86:75:6c:56:92:9f:37:
         bf:14:67:10:67:db:1d:fc:70:83:31:da:01:d8:bf:05:a2:4f:
         55:59:d1:ea:a3:ca:8c:d7:94:cc:59:98:2e:d8:26:56:5d:03:
         b1:6d:53:81:4b:47:71:63:7a:0f:04:3d:9a:e3:ae:51:db:22:
         58:07:61:01:1f:10:1c:5c:61:be:6f:5c:54:da:1e:9a:12:a0:
         98:5f:6d:ac:81:01:96:c2:eb:1c:e6:c1:14:e0:47:38:40:96:
         d7:9a:2d:f1:f9:e6:8d:2d:5f:b4:e3:44:6c:13:f5:54:12:c1:
         6f:cd:35:03:66:e1:3d:73:54:4d:3a:de:5f:a1:13:5a:e3:16:
         bb:2b:63:56:5c:bd:25:0e:4c:24:a6:ed:cc:49:52:ec:6c:b6:
         8e:89:ca:92:97:83:55:56:48:15:36:69:57:18:20:e0:9b:d4:
         ee:35:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 13:54:38 2026 by rpki-client