Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
File:                     BAA31B82334C11F1B39593F0C5833773.roa (raw, json)
Hash identifier:          b6cDSBTCgzSKIGv+eOKoPPpsaR3v5MlvIB5CVO/xPAE=
Subject key identifier:   05:11:3B:1F:03:12:AA:E7:49:58:B6:EC:FD:A0:AA:2B:45:DB:C4:7F
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3B60
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa
Signing time:             Wed 08 Apr 2026 13:13:27 +0000
ROA not before:           Wed 08 Apr 2026 13:13:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132165
IP address blocks:        103.246.108.0/22 maxlen: 22
                          103.246.108.0/24 maxlen: 24
                          103.246.109.0/24 maxlen: 24
                          103.246.110.0/24 maxlen: 24
                          103.246.111.0/24 maxlen: 24
                          111.88.0.0/22 maxlen: 24
                          111.88.4.0/24 maxlen: 30
                          111.88.5.0/24 maxlen: 24
                          111.88.6.0/23 maxlen: 24
                          111.88.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15200 (0x3b60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr  8 13:13:27 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69d65477-3676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:99:85:6a:e4:d4:4f:af:78:c5:12:52:b6:
                    7a:f6:26:00:eb:1b:d4:1b:69:5a:10:9c:7b:7c:d5:
                    88:cd:2e:50:6a:e8:3a:59:b6:4a:cd:98:84:d7:86:
                    97:ff:82:3f:a3:78:0d:07:47:65:95:67:97:51:41:
                    a0:35:8c:4e:02:3c:0a:61:8a:54:6b:af:f2:3d:29:
                    6c:fc:c3:b7:68:c3:6b:95:c2:30:bf:63:18:3a:d0:
                    3c:61:c8:fc:db:d9:52:f3:68:2d:70:89:7a:fd:d7:
                    cc:39:b4:71:a8:90:a3:16:68:93:22:68:1b:90:ff:
                    4c:fb:bb:88:86:f0:61:a1:13:b7:61:31:78:0a:c0:
                    7d:85:2a:ff:99:ca:2f:f4:47:32:39:a9:9c:57:ce:
                    7c:fa:ba:89:65:15:3d:65:bf:c1:ac:af:b9:c5:c2:
                    5e:d5:6d:44:26:2b:f5:d9:b5:57:65:ff:8a:d5:c6:
                    00:5a:3d:a9:8b:7e:6d:f9:54:dc:06:a8:fc:0f:2a:
                    33:60:76:32:2c:cc:f5:a3:04:7b:af:42:0a:0d:7a:
                    5f:77:db:15:d6:c2:14:8d:d1:7a:49:37:00:aa:a0:
                    c6:5f:01:fc:49:e3:b1:20:a8:99:21:3d:44:6d:52:
                    71:6d:d9:4a:dc:d3:ff:61:f8:ea:22:9a:1c:bb:55:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:3B:1F:03:12:AA:E7:49:58:B6:EC:FD:A0:AA:2B:45:DB:C4:7F
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BAA31B82334C11F1B39593F0C5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.108.0/22
                  111.88.0.0/21
                  111.88.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:a9:1b:87:2f:b4:98:11:6e:66:c0:81:6a:37:22:69:ae:
         33:7c:3c:6d:28:43:13:49:8c:54:e7:ba:1e:9b:45:66:40:14:
         a0:9d:8f:3e:c8:58:8d:c9:b8:81:c0:c0:53:5f:f2:8d:49:26:
         68:29:19:b4:f6:20:5d:ea:44:56:01:09:44:76:1a:2a:3b:d6:
         29:3c:aa:4f:b7:c7:bb:dc:18:9a:db:c0:c9:55:2e:d6:7e:35:
         ce:3d:c8:17:e7:bf:f0:62:81:ba:2a:e7:e8:b7:72:3f:4d:3d:
         a5:a1:52:74:5e:0e:21:08:27:25:cc:38:b4:23:bc:f4:84:de:
         de:f1:cb:ec:6a:5c:af:e8:7c:3c:c5:9b:4c:f4:13:90:b9:e6:
         07:12:2c:24:39:66:ec:1c:c8:e4:f5:c2:63:f4:4b:30:6a:28:
         b8:c1:27:b4:a8:d0:70:6d:ce:44:ec:e6:4a:66:2a:7d:a3:d9:
         7b:c2:38:82:e6:07:56:55:7c:a1:16:13:32:a3:58:2f:13:59:
         b9:91:4a:1b:ca:36:c6:11:c3:84:3f:f3:d2:44:31:1b:4b:19:
         71:80:e5:c4:08:6b:75:1f:21:64:ca:1f:bc:8a:59:f4:f5:6b:
         32:6e:35:46:af:2c:8a:e3:3c:21:fe:40:7f:1c:73:b2:58:94:
         80:dd:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:30 2026 by rpki-client