Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/99CE159C912C11EFA67EA629C4F9AE02.roa
File:                     99CE159C912C11EFA67EA629C4F9AE02.roa (raw, json)
Hash identifier:          7l99xTJR8cVRmrgfCm+IOAroHl0AfJtNP04Tfd0VEOo=
Subject key identifier:   26:9A:AF:16:B4:CB:49:DC:C3:8C:D6:86:CB:81:23:B8:F6:18:E3:2E
Certificate issuer:       /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A
Certificate serial:       0984
Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/99CE159C912C11EFA67EA629C4F9AE02.roa
Signing time:             Wed 18 Mar 2026 20:26:59 +0000
ROA not before:           Wed 18 Mar 2026 20:26:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136426
IP address blocks:        103.111.116.0/23 maxlen: 23
                          103.111.116.0/24 maxlen: 24
                          103.111.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl
                          rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436 (0x984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC1C, serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A
        Validity
            Not Before: Mar 18 20:26:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69bb0a93-467e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:31:15:44:dc:7e:f1:55:62:4d:2a:f7:62:
                    04:b2:85:48:10:3b:a0:f9:4a:99:d7:b7:1a:20:e5:
                    cf:6e:60:9f:e2:4e:ca:08:6d:54:4a:70:a1:d8:4d:
                    3e:87:ce:a1:0f:93:77:42:51:7a:cb:d9:73:28:f0:
                    ad:45:66:57:4f:90:a2:42:4c:94:7a:58:a8:6a:bc:
                    1e:e3:29:30:ab:4b:ea:27:61:df:ab:f8:95:17:95:
                    8e:05:b2:c4:65:d9:64:5b:89:4c:b3:85:25:8b:0a:
                    72:68:e3:d9:6f:3c:e6:5f:04:44:01:30:a5:b1:ec:
                    8b:c4:34:11:7f:16:ac:b0:ba:af:d2:b2:21:5b:2a:
                    41:d7:d4:cc:d4:2b:b5:60:fa:41:9e:68:31:a1:84:
                    70:9d:5a:90:8a:e9:de:48:c9:33:68:25:6e:0a:1b:
                    bc:c0:15:62:e2:70:91:05:80:f6:fc:ed:76:5a:eb:
                    03:5c:43:b2:a3:b7:65:5c:ed:df:4e:2d:9c:8b:69:
                    cf:51:c9:84:15:14:ea:c6:79:70:17:b7:0b:1e:e9:
                    9a:09:41:0a:eb:f4:58:b9:01:b4:1c:4e:5b:c2:4f:
                    56:b1:c9:19:5a:a1:a5:02:e3:cb:f4:6e:35:25:31:
                    31:40:7e:66:ba:7b:b1:d8:53:23:40:86:6e:d2:3c:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9A:AF:16:B4:CB:49:DC:C3:8C:D6:86:CB:81:23:B8:F6:18:E3:2E
            X509v3 Authority Key Identifier:
                keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/99CE159C912C11EFA67EA629C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:8f:e0:0f:3e:8a:5f:1c:44:02:22:f1:43:5b:46:45:fc:fc:
         81:be:f9:f6:3e:fe:87:6e:00:28:53:00:54:cd:a2:c6:4e:89:
         15:14:b8:55:e8:41:fc:d4:0b:82:df:a6:aa:bb:eb:2b:83:89:
         20:f3:45:62:67:b8:f8:8b:ec:84:0d:6d:35:f9:8e:96:64:69:
         b0:84:c0:de:e1:e2:97:b2:3f:38:01:fc:18:72:9e:a2:94:17:
         6e:fa:e7:89:cd:3e:87:11:bb:83:b5:d7:3d:83:c1:96:5b:ed:
         9d:9f:c8:5a:12:df:ed:ff:6f:80:32:7a:0c:2f:0a:a1:a7:68:
         c0:c8:7f:2c:83:76:33:5a:01:f4:56:17:69:5c:a0:01:24:28:
         6b:e0:65:9e:62:b9:f2:c0:30:22:4f:55:e3:9a:56:b4:4d:07:
         ec:ab:35:61:d5:49:c7:2d:ba:9d:5a:3e:35:5f:6b:41:2a:c7:
         64:c2:5a:b1:63:b6:9a:d8:bc:51:96:49:f0:73:34:3e:fe:ca:
         08:a6:13:1b:0e:55:ef:34:8a:54:14:c6:69:c6:8a:93:c2:db:
         1c:db:f8:03:de:94:98:15:73:11:03:bd:78:3a:68:6c:63:8f:
         7b:d9:5a:00:c0:fd:c3:cd:cf:2f:bd:f2:8d:b6:e8:13:e5:f9:
         96:dd:c1:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE
ODAxMTYzM0EwHhcNMjYwMzE4MjAyNjU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJiMGE5My00NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rYxFUTcfvFVYk0q92IEsoVIEDug+UqZ17caIOXPbmCf4k7KCG1USnCh2E0+
h86hD5N3QlF6y9lzKPCtRWZXT5CiQkyUelioarwe4ykwq0vqJ2Hfq/iVF5WOBbLE
ZdlkW4lMs4UliwpyaOPZbzzmXwREATClseyLxDQRfxassLqv0rIhWypB19TM1Cu1
YPpBnmgxoYRwnVqQiuneSMkzaCVuChu8wBVi4nCRBYD2/O12WusDXEOyo7dlXO3f
Ti2ci2nPUcmEFRTqxnlwF7cLHumaCUEK6/RYuQG0HE5bwk9WsckZWqGlAuPL9G41
JTExQH5munux2FMjQIZu0jzEOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCaarxa0
y0ncw4zWhsuBI7j2GOMuMB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC
RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENDMUMvRDkzMjUyRkNBQkY4MTFFQUIxRkJEODI4QzRGOUFFMDIvOTlDRTE1OUM5
MTJDMTFFRkE2N0VBNjI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ290MA0GCSqGSIb3DQEBCwUAA4IBAQDjj+APPopfHEQCIvFDW0ZF
/PyBvvn2Pv6HbgAoUwBUzaLGTokVFLhV6EH81AuC36aqu+srg4kg80ViZ7j4i+yE
DW01+Y6WZGmwhMDe4eKXsj84AfwYcp6ilBdu+ueJzT6HEbuDtdc9g8GWW+2dn8ha
Et/t/2+AMnoMLwqhp2jAyH8sg3YzWgH0VhdpXKABJChr4GWeYrnywDAiT1Xjmla0
TQfsqzVh1UnHLbqdWj41X2tBKsdkwlqxY7aa2LxRlknwczQ+/soIphMbDlXvNIpU
FMZpxoqTwtsc2/gD3pSYFXMRA714OmhsY4972VoAwP3Dzc8vvfKNtugT5fmW3cFs
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:16 2026 by rpki-client