Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/101150200BF211ECB242D930C4F9AE02.roa
File:                     101150200BF211ECB242D930C4F9AE02.roa (raw, json)
Hash identifier:          ssvfMr799f/mTVyYIgMj9bRfKIkNqOfU6Gmkf1qphqQ=
Subject key identifier:   90:E7:32:E5:EB:C9:84:E7:C0:FF:F8:97:94:08:E6:F6:6C:2B:3C:C0
Certificate issuer:       /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
Certificate serial:       067F
Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/101150200BF211ECB242D930C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:49:04 +0000
ROA not before:           Thu 04 Dec 2025 21:36:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     59210
IP address blocks:        103.243.172.0/22 maxlen: 22
                          103.243.173.0/24 maxlen: 24
                          103.243.174.0/24 maxlen: 24
                          103.243.175.0/24 maxlen: 24
                          2401:bc40:6100::/40 maxlen: 40
                          2401:bc40:a100::/40 maxlen: 40
                          2401:bc40:e301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl
                          rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B
        Validity
            Not Before: Dec  4 21:36:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46e00-513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:6f:63:3a:98:07:c5:c4:b4:ea:5a:83:e6:
                    f1:47:5b:b2:35:d6:66:4c:eb:85:70:14:10:f2:7c:
                    79:42:41:4e:24:9d:9d:9c:7f:2a:3d:15:71:d4:b6:
                    2b:16:33:f8:e4:56:ca:57:13:aa:a1:b5:c5:17:fa:
                    81:99:83:bf:40:52:ad:ff:0a:b9:c5:97:33:6f:4c:
                    fe:75:aa:95:95:ba:3f:97:0e:13:bd:93:da:91:f4:
                    20:e5:20:72:88:15:ec:d6:62:f6:35:52:b9:be:dd:
                    40:23:4a:07:0d:a3:b1:ee:86:73:18:ac:27:fa:47:
                    10:48:5d:81:8d:06:bb:42:dc:d6:81:2c:d2:b9:e3:
                    ad:ce:2c:8d:d5:53:e4:f5:3e:98:0d:cd:56:dd:ec:
                    9e:b9:86:b9:b7:b8:c0:ed:74:12:5e:ed:5e:84:f5:
                    d0:f0:c4:35:8f:48:31:e3:16:16:7b:aa:b8:43:6a:
                    cd:a9:9e:65:fc:f4:8f:c9:70:68:fa:27:30:f2:0b:
                    c1:2e:e4:7c:bf:73:e9:b9:23:31:9c:f5:0e:de:f6:
                    39:ed:a1:b1:ce:f4:76:54:13:60:39:c2:48:03:77:
                    06:6e:34:f9:00:e3:be:b6:30:88:93:b2:b3:ba:35:
                    9f:43:32:7e:ca:89:f8:53:b8:3b:c2:fc:56:cd:0a:
                    3a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E7:32:E5:EB:C9:84:E7:C0:FF:F8:97:94:08:E6:F6:6C:2B:3C:C0
            X509v3 Authority Key Identifier:
                keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/101150200BF211ECB242D930C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.172.0/22
                IPv6:
                  2401:bc40:6100::/40
                  2401:bc40:a100::/40
                  2401:bc40:e301::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:2d:03:45:37:40:58:72:19:b0:f2:48:ce:74:cd:86:02:ed:
         a6:4c:13:01:a5:d6:24:68:28:f1:20:ef:e6:5b:92:32:45:08:
         1c:7d:41:96:98:69:2c:3d:dc:ce:c0:ed:88:79:62:5c:47:26:
         58:21:24:dc:f8:d3:40:a4:26:1e:dd:69:88:56:ce:4d:92:d5:
         7a:40:b8:cc:e7:36:05:ba:d2:39:7c:f3:11:7d:86:31:43:70:
         97:3c:9f:dd:76:49:f1:39:7e:7b:11:b2:99:8e:d9:25:fd:d6:
         6b:9c:c8:a1:4b:d8:78:1b:18:98:49:be:c0:de:da:07:3e:76:
         64:f2:90:5d:fd:b1:2a:e9:3c:e9:fe:7b:8b:3c:81:ae:e8:c5:
         fa:79:48:fa:c6:5c:34:e8:d9:06:e4:8e:41:8e:b4:23:f0:5b:
         46:ca:1c:4d:0d:c8:24:33:32:12:cc:13:ea:20:fb:96:26:b4:
         45:1d:fb:90:15:63:74:23:3f:fc:18:ee:ea:7a:8d:62:65:1e:
         e9:c2:fd:9d:b0:d1:cb:b2:8d:a1:30:2b:ba:16:24:74:0e:8b:
         2b:1f:a8:5a:c1:31:89:8b:eb:da:9e:96:92:e8:ef:a4:d2:c5:
         48:e7:e7:51:89:59:cb:a4:63:80:dd:10:13:80:d5:87:d0:af:
         67:47:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:53 2026 by rpki-client