Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/111B4450EBC211EEB58D4343C4F9AE02.roa
File:                     111B4450EBC211EEB58D4343C4F9AE02.roa (raw, json)
Hash identifier:          GDPqygOrsBj+fJmh7WunU6Q2CU+hKV7/kXJqiMPQcIA=
Subject key identifier:   DF:43:BC:7E:6E:06:8F:51:C9:F4:88:8B:59:52:4E:A3:F4:2D:F2:9E
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       01AE
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/111B4450EBC211EEB58D4343C4F9AE02.roa
Signing time:             Sun 31 May 2026 04:36:58 +0000
ROA not before:           Sun 31 May 2026 04:36:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     23934
IP address blocks:        103.16.174.0/24 maxlen: 24
                          115.126.128.0/21 maxlen: 21
                          115.126.132.0/22 maxlen: 23
                          115.126.132.0/24 maxlen: 24
                          115.126.134.0/24 maxlen: 24
                          202.162.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: May 31 04:36:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1bbaea-b8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:a0:2f:20:ec:8a:fa:b9:1c:ce:17:2a:85:
                    d0:0c:c4:55:8e:53:d5:0d:f7:1f:f0:25:2b:f1:f9:
                    1e:80:72:e3:6a:5f:f8:a6:13:68:f6:75:d3:24:da:
                    82:31:86:12:67:c3:87:22:f8:ae:bc:ab:10:d7:4c:
                    65:36:db:90:90:84:4e:85:58:24:85:8e:4d:12:53:
                    95:d7:12:b9:90:00:28:90:b0:8a:3d:ac:0d:20:a5:
                    54:a6:fc:cf:89:26:83:01:0c:63:3b:bb:a1:82:56:
                    24:1e:a4:d1:44:2a:bf:fe:43:01:43:3a:7f:e3:ce:
                    82:ba:02:87:5a:ce:cd:6b:67:cd:8a:81:f9:fe:5d:
                    d2:d8:94:a8:02:9c:35:36:ce:f0:11:7e:5d:2c:6c:
                    cb:d0:0a:13:17:8f:50:1c:0b:f0:b9:96:55:eb:ac:
                    59:0d:62:0f:d0:ff:0f:81:78:94:a0:eb:90:62:0c:
                    74:5a:1e:96:69:7e:99:84:31:ee:7a:c1:02:09:98:
                    05:60:07:e3:34:4c:ca:23:9f:a1:be:19:4f:af:b1:
                    ca:b9:11:e0:7f:ae:ed:f9:22:02:89:4c:d2:ec:db:
                    ae:66:78:c4:b9:54:60:47:89:b8:34:2f:15:6f:01:
                    50:03:87:72:99:ad:ce:bb:0e:11:d2:2f:5e:44:5b:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:BC:7E:6E:06:8F:51:C9:F4:88:8B:59:52:4E:A3:F4:2D:F2:9E
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/111B4450EBC211EEB58D4343C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.174.0/24
                  115.126.128.0/21
                  202.162.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:10:81:30:25:26:4c:d6:82:28:0a:5c:42:e0:50:b0:5a:a9:
         8e:06:43:1f:3f:5e:8f:64:82:62:d4:12:cd:d4:51:2b:f9:00:
         2d:ac:6c:f5:57:11:5e:a8:11:3d:d1:08:6d:a1:a8:14:2e:c3:
         2e:2a:65:8e:39:b8:12:5c:be:be:b8:c2:d5:3a:d8:d4:94:0e:
         82:cf:74:bd:8b:27:ab:ca:8e:7e:bb:93:37:7e:04:00:ad:1d:
         2a:51:be:c9:ea:6a:1e:c5:95:c4:de:3c:c8:85:7d:ff:a0:64:
         2b:92:a8:91:43:4c:b2:3d:4e:e9:5c:eb:b1:06:bf:bf:88:92:
         9d:5a:2c:02:86:79:87:7c:8b:8f:5e:02:13:f6:35:ad:db:45:
         a7:9f:ff:c7:f5:11:38:fa:f6:41:ef:35:6f:17:f8:33:20:64:
         f6:35:b3:59:37:c8:fa:64:b6:cd:29:fd:a4:a7:3d:d0:1a:00:
         52:04:45:a1:b0:f1:31:ee:7f:58:db:29:8a:e0:f7:57:91:ba:
         c1:0e:9c:97:f6:7f:b4:56:32:09:bc:f6:99:c8:1a:f5:eb:99:
         9f:80:1e:38:d1:18:b1:03:63:7c:f6:32:ab:60:9a:9a:17:d4:
         ea:6f:65:45:df:16:5c:3f:c5:83:f5:6e:db:ac:c2:06:a2:66:
         3e:c3:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:17:40 2026 by rpki-client