Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/199C4122356411F199EC77DFBA833773.roa
File:                     199C4122356411F199EC77DFBA833773.roa (raw, json)
Hash identifier:          JhY9Gylrwf6imONEZB/excsXAHceemOqJE8FFpSCvWY=
Subject key identifier:   63:F8:85:16:8A:E8:54:CE:A2:81:35:3D:90:DB:49:89:F8:F5:2F:6B
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0D1E
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/199C4122356411F199EC77DFBA833773.roa
Signing time:             Sun 12 Apr 2026 17:39:34 +0000
ROA not before:           Sun 12 Apr 2026 17:39:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137530
IP address blocks:        103.112.56.0/23 maxlen: 23
                          103.112.56.0/24 maxlen: 24
                          103.112.57.0/24 maxlen: 24
                          103.112.58.0/23 maxlen: 23
                          103.112.58.0/24 maxlen: 24
                          103.112.59.0/24 maxlen: 24
                          2402:a540:56::/48 maxlen: 48
                          2402:a540:57::/48 maxlen: 48
                          2402:a540:58::/48 maxlen: 48
                          2402:a540:59::/48 maxlen: 48
                          2402:a540:156::/48 maxlen: 48
                          2402:a540:157::/48 maxlen: 48
                          2402:a540:158::/48 maxlen: 48
                          2402:a540:159::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
                          rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3358 (0xd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Apr 12 17:39:34 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69dbd8d6-8b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:4f:3b:79:66:46:d6:16:24:fb:46:6f:76:
                    95:fb:28:41:45:87:f5:eb:63:bf:f5:14:4c:a7:f9:
                    67:c7:cb:27:a6:05:7e:06:1c:31:d1:4a:f2:39:ff:
                    25:38:4a:0d:44:cf:03:f1:3c:85:22:20:7e:05:09:
                    b1:a0:bd:31:57:7f:6b:9a:78:1b:df:7b:a3:70:69:
                    29:a3:b7:22:75:04:db:58:2b:e4:1d:c7:6d:b3:bf:
                    42:26:f0:19:7c:54:07:ad:79:e3:52:81:90:0b:50:
                    18:40:b2:93:bb:18:be:49:e3:34:0b:d6:fb:af:e1:
                    65:84:97:8f:71:c0:b9:a8:a7:19:a0:dd:45:ec:fa:
                    08:5e:6c:a1:83:4f:9b:7f:c0:44:43:90:04:c4:cc:
                    00:2b:3d:bf:fc:be:ca:f2:57:bf:e8:9d:d4:6d:d2:
                    9f:e6:28:09:4e:d9:fb:60:ed:44:c2:b7:fe:19:e8:
                    12:a4:13:69:cf:ac:ea:b6:c4:b8:81:c7:32:98:0d:
                    7e:ab:7d:75:64:2e:94:56:20:e7:f1:d2:ad:30:80:
                    5f:33:fa:c4:ac:5c:ca:c1:be:63:30:bc:2b:0a:46:
                    2e:14:85:b1:22:ff:d0:bc:71:bf:cd:d5:7e:09:86:
                    a5:87:06:04:9e:a7:70:1a:51:95:e3:e3:b2:2c:52:
                    4d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:85:16:8A:E8:54:CE:A2:81:35:3D:90:DB:49:89:F8:F5:2F:6B
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/199C4122356411F199EC77DFBA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.56.0/22
                IPv6:
                  2402:a540:56::-2402:a540:59:ffff:ffff:ffff:ffff:ffff
                  2402:a540:156::-2402:a540:159:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:e7:49:4f:0e:39:d7:a5:09:59:ed:61:c7:30:50:41:30:
         cd:9a:37:cf:3e:fc:37:ec:b8:ee:c7:db:21:b6:11:8e:ea:4f:
         06:3e:4f:a8:f8:52:d9:85:01:f0:66:4f:d7:98:c2:6c:94:b8:
         1a:94:b9:98:28:17:e4:de:47:79:81:f7:2e:f1:ee:e6:eb:38:
         c4:1f:bb:3d:bc:59:fd:41:f9:63:aa:c9:dc:5b:92:0e:de:46:
         c9:a0:c3:cf:19:21:73:2b:6c:38:4d:b7:e6:88:44:07:db:10:
         f7:0a:ef:6b:2a:f1:d1:9f:b5:54:69:7e:76:73:81:cc:da:c5:
         30:aa:7f:48:57:e1:01:c6:ad:28:10:17:7c:a1:d5:33:cf:81:
         dd:7e:2d:69:d5:97:d0:bd:a7:ac:fe:1d:2a:ed:d5:4d:aa:c2:
         64:cf:98:0d:63:b1:4d:3d:1a:3d:04:fb:1e:40:5d:10:0c:53:
         37:40:81:28:f3:c7:59:1f:f6:1f:17:2b:d9:bc:03:0d:2c:3c:
         4e:c4:9b:e0:7b:c2:81:6e:75:4f:c1:76:25:0b:8f:59:59:32:
         57:e1:6c:cf:25:e7:22:05:dc:98:5a:44:83:3b:fa:19:db:a0:
         79:f7:df:6e:66:72:b7:60:da:c7:20:b1:0d:17:78:2e:94:db:
         5f:70:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:54 2026 by rpki-client