Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/59029A32233A11E78D48837AC4F9AE02.roa
File:                     59029A32233A11E78D48837AC4F9AE02.roa (raw, json)
Hash identifier:          lHteA2k0KU/f+rgAagu47KqYY1kW4VRedBUcIkrBIEI=
Subject key identifier:   8E:00:C3:13:42:47:06:D5:8E:43:A3:F1:CF:B1:4C:01:CA:88:CE:D0
Certificate issuer:       /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial:       1BBB
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/59029A32233A11E78D48837AC4F9AE02.roa
Signing time:             Mon 18 May 2026 16:19:14 +0000
ROA not before:           Mon 18 May 2026 16:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45766
IP address blocks:        43.251.84.0/22 maxlen: 24
                          103.216.56.0/22 maxlen: 22
                          103.216.56.0/22 maxlen: 24
                          103.216.56.0/23 maxlen: 23
                          103.216.56.0/23 maxlen: 24
                          103.216.56.0/24 maxlen: 24
                          103.216.57.0/24 maxlen: 24
                          103.216.58.0/23 maxlen: 23
                          103.216.58.0/23 maxlen: 24
                          103.216.58.0/24 maxlen: 24
                          103.216.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
                          rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7099 (0x1bbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
        Validity
            Not Before: May 18 16:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0b3c01-34fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:df:ca:a3:a8:82:40:e9:fd:52:09:46:47:
                    e9:ec:e6:62:2a:ba:13:08:93:e4:fd:74:00:df:00:
                    d8:c2:50:14:b7:66:5c:6d:54:aa:75:94:76:8b:f5:
                    34:93:96:60:ee:28:1f:1b:07:2d:b8:ed:49:9c:5a:
                    33:c8:bb:c1:43:39:c9:f4:bb:ba:ea:9e:57:fa:eb:
                    aa:dc:b9:b3:4f:87:39:7d:3b:67:78:51:b5:db:27:
                    56:cc:1c:bb:45:f7:1d:0d:8a:91:08:bf:34:4d:f2:
                    8f:c2:d6:ab:04:52:27:28:90:88:95:ba:08:97:7d:
                    42:b3:00:0c:eb:71:e8:8e:38:82:fa:61:5b:d7:ba:
                    af:5c:19:d7:79:cc:01:12:ee:22:a6:a7:c0:39:0e:
                    5a:6f:5a:d3:34:7a:5c:72:7d:2e:78:b6:e6:42:ea:
                    d5:aa:66:77:33:51:80:81:86:d3:cb:d4:c7:fd:9d:
                    05:f1:ee:22:10:31:e7:40:57:63:52:25:33:99:a1:
                    f9:83:76:0d:b2:a6:5c:3c:31:2d:7a:2c:dc:db:32:
                    55:43:2a:c9:b7:81:0a:d8:f5:cd:86:33:0f:53:42:
                    1b:4b:93:01:8e:ee:fe:5e:20:73:fc:18:e5:c3:62:
                    21:86:77:14:ab:e6:ce:0a:de:06:ca:7e:c4:10:5b:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:00:C3:13:42:47:06:D5:8E:43:A3:F1:CF:B1:4C:01:CA:88:CE:D0
            X509v3 Authority Key Identifier:
                keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/59029A32233A11E78D48837AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.84.0/22
                  103.216.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:b8:15:90:29:30:ae:bc:6b:5c:c2:da:fc:47:a9:52:36:9f:
         79:f5:93:e7:aa:54:82:9e:38:36:71:15:a8:2f:f6:79:0a:91:
         14:c4:5a:81:88:c5:b8:09:bb:61:a1:03:54:88:bd:b8:69:e4:
         a3:b5:44:69:6e:a8:94:62:5c:9a:e4:18:99:70:bc:2e:22:bd:
         be:3a:71:a0:cf:3d:80:bd:e8:17:f0:e3:16:cf:6b:56:fd:8a:
         e9:c0:67:49:84:b9:0c:71:d9:80:b3:ed:80:e5:6e:27:70:44:
         69:53:e7:2a:33:6c:02:29:18:2d:54:f9:6e:7e:25:58:e2:39:
         90:a6:bf:9f:63:bf:59:d4:3b:64:3e:99:3a:7e:5f:c3:6b:48:
         e1:b5:2b:b0:f9:c4:01:5d:8b:85:3b:91:f1:35:c2:90:68:21:
         e5:06:82:0a:3a:5a:b5:ea:76:1d:df:3d:25:64:99:2d:63:da:
         f5:8e:39:4d:87:be:0f:30:67:eb:b0:47:c5:70:23:12:4e:55:
         54:4d:db:48:e0:0c:16:d7:fd:08:c8:6b:66:80:e2:9b:47:bc:
         86:d3:25:2a:67:31:9d:65:a2:aa:2b:a9:18:95:e0:dc:c4:8c:
         2a:7b:d9:62:5f:da:b8:82:3a:49:38:47:83:fd:11:8e:2c:ac:
         96:92:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:52 2026 by rpki-client