Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
File:                     681E9EECCAC111ECA0AC3E32C4F9AE02.roa (raw, json)
Hash identifier:          msVxHQEYl2rGF2akMxTwWHMppz0njU3hQ5R2rR3AU24=
Subject key identifier:   F5:07:84:D5:13:B4:75:74:62:C9:3D:EB:CD:04:03:BA:9F:85:6C:B1
Certificate issuer:       /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial:       03D6
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 00:32:56 +0000
ROA not before:           Thu 09 Apr 2026 00:32:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134242
IP address blocks:        103.111.16.0/22 maxlen: 22
                          103.111.16.0/24 maxlen: 24
                          103.111.17.0/24 maxlen: 24
                          103.111.18.0/24 maxlen: 24
                          103.111.19.0/24 maxlen: 24
                          2402:9340::/32 maxlen: 32
                          2402:9340:1000::/36 maxlen: 36
                          2402:9340:2000::/36 maxlen: 36
                          2402:9340:3000::/36 maxlen: 36
                          2402:9340:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
        Validity
            Not Before: Apr  9 00:32:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d6f3b8-8df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:5d:91:24:7e:50:1e:e3:d7:78:15:34:d9:
                    5d:9b:de:1d:13:c8:16:93:d7:b2:04:96:4b:54:7c:
                    a8:ad:4c:56:67:15:93:a1:0b:47:6a:8f:d7:2a:f8:
                    85:4e:5c:51:cc:84:18:22:c9:49:1a:49:07:95:f6:
                    2a:00:a9:fc:c5:c2:d2:34:3e:23:6f:83:e4:42:b4:
                    d2:89:1f:1b:80:44:90:96:34:0b:5c:cb:6e:5c:4c:
                    bc:f6:e4:a9:27:3e:af:5d:95:b3:77:4a:89:52:9e:
                    37:ab:8b:69:83:a1:f9:c9:61:62:f8:d7:40:a9:f2:
                    0e:f8:de:f4:d6:23:32:8f:a0:26:43:cc:23:3b:6f:
                    97:05:be:a9:f9:c5:e5:2e:87:bf:1a:98:48:9c:6c:
                    bf:5e:94:47:16:3a:71:10:c1:65:d6:6f:bc:cc:e5:
                    6f:ce:dd:78:a9:ee:29:64:8c:ed:e1:56:05:ab:57:
                    7b:cf:09:d2:2e:ea:ee:a6:d2:22:e2:e7:9c:cf:59:
                    0d:bd:3e:71:b9:56:3c:5c:a9:e9:c2:bd:64:fd:68:
                    50:e1:ad:77:55:4f:47:43:f6:b8:d8:68:8f:7d:7d:
                    3f:fe:81:fe:c5:cd:ad:9c:dc:2c:0b:b4:1a:65:d6:
                    10:19:98:02:67:5f:a0:fa:eb:6f:ae:c9:3e:85:68:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:07:84:D5:13:B4:75:74:62:C9:3D:EB:CD:04:03:BA:9F:85:6C:B1
            X509v3 Authority Key Identifier:
                keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.16.0/22
                IPv6:
                  2402:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:80:05:b9:57:30:a2:3f:0a:54:2d:f9:c0:0b:b6:7e:22:60:
         12:ec:35:26:3e:86:24:58:ef:a9:02:7d:ef:cb:a1:d4:e9:93:
         b6:b5:a3:dd:ac:c3:31:e5:76:cd:d1:ff:82:bb:cb:c6:e1:99:
         8b:46:74:5c:7d:04:74:80:e0:2d:7c:d4:3d:aa:ce:25:41:0b:
         16:f5:f0:ec:85:9e:5b:ff:09:e6:14:25:1c:75:7f:0e:dd:80:
         45:cb:e8:c2:f6:c9:5b:fd:b5:0d:6f:59:d0:7d:45:cc:a0:dd:
         94:88:14:6e:88:95:f6:3c:ea:a8:6c:e1:4c:b5:f0:03:93:3a:
         03:f2:6f:7f:6a:b6:b3:0d:aa:be:68:8a:7b:70:94:e0:16:8c:
         7f:52:e3:ba:9c:71:5a:8b:8b:19:e6:90:59:00:a0:5a:0c:2e:
         57:bd:26:10:d1:2c:83:98:74:40:40:7c:3c:40:7b:b7:a8:e5:
         e0:88:6b:87:bb:2f:99:97:aa:24:2d:fd:ed:74:08:ec:f1:b0:
         4d:89:36:9b:f2:f7:11:e0:03:55:f7:44:05:31:c3:02:fa:02:
         62:fa:f5:4e:ff:c6:ab:e4:8f:aa:f2:df:6b:3b:44:d2:9c:c8:
         2b:c3:c8:49:47:e6:35:c7:ef:bf:55:d5:a7:f1:b5:40:48:c8:
         97:db:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:32 2026 by rpki-client