Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6BB6356086F111F19E006003A7EE528E.roa
File:                     6BB6356086F111F19E006003A7EE528E.roa (raw, json)
Hash identifier:          8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=
Subject key identifier:   0A:A1:C3:8D:A9:F5:92:A4:A4:95:92:AA:F3:8E:30:A2:95:E8:34:D7
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0E27
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6BB6356086F111F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:51:28 +0000
ROA not before:           Thu 23 Jul 2026 23:51:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4788
IP address blocks:        1.9.0.0/16 maxlen: 24
                          1.32.0.0/17 maxlen: 19
                          27.146.0.0/16 maxlen: 21
                          27.146.0.0/17 maxlen: 24
                          27.146.128.0/18 maxlen: 24
                          27.146.192.0/19 maxlen: 24
                          27.146.224.0/20 maxlen: 24
                          27.146.240.0/21 maxlen: 24
                          27.146.248.0/22 maxlen: 22
                          27.146.248.0/23 maxlen: 23
                          27.146.248.0/24 maxlen: 24
                          42.153.5.0/24 maxlen: 24
                          42.153.200.0/22 maxlen: 22
                          42.153.204.0/22 maxlen: 22
                          42.188.0.0/14 maxlen: 19
                          45.116.240.0/22 maxlen: 22
                          45.116.244.0/22 maxlen: 24
                          58.26.0.0/16 maxlen: 24
                          58.27.0.0/17 maxlen: 24
                          58.139.0.0/16 maxlen: 17
                          58.139.0.0/17 maxlen: 24
                          58.139.128.0/18 maxlen: 21
                          58.139.128.0/19 maxlen: 24
                          58.139.160.0/20 maxlen: 24
                          58.139.176.0/21 maxlen: 24
                          58.139.184.0/22 maxlen: 22
                          58.139.184.0/23 maxlen: 24
                          60.48.0.0/14 maxlen: 18
                          60.48.0.0/15 maxlen: 22
                          60.50.0.0/16 maxlen: 22
                          60.51.0.0/18 maxlen: 22
                          60.51.64.0/19 maxlen: 20
                          60.51.64.0/20 maxlen: 22
                          60.51.80.0/21 maxlen: 22
                          60.52.0.0/15 maxlen: 20
                          60.52.0.0/16 maxlen: 23
                          60.53.0.0/17 maxlen: 23
                          60.53.128.0/18 maxlen: 23
                          60.53.192.0/19 maxlen: 23
                          60.53.224.0/20 maxlen: 23
                          60.53.240.0/21 maxlen: 21
                          60.53.240.0/22 maxlen: 22
                          60.53.240.0/23 maxlen: 23
                          60.54.0.0/16 maxlen: 22
                          103.1.104.0/22 maxlen: 22
                          103.4.140.0/22 maxlen: 22
                          103.4.140.0/23 maxlen: 24
                          103.4.142.0/23 maxlen: 24
                          110.159.0.0/16 maxlen: 22
                          114.133.0.0/16 maxlen: 21
                          114.133.0.0/17 maxlen: 24
                          114.133.128.0/18 maxlen: 24
                          114.133.192.0/19 maxlen: 24
                          114.133.224.0/20 maxlen: 24
                          114.133.240.0/21 maxlen: 24
                          115.132.0.0/14 maxlen: 22
                          115.135.42.0/23 maxlen: 23
                          118.100.0.0/16 maxlen: 22
                          118.101.0.0/16 maxlen: 22
                          120.140.0.0/15 maxlen: 15
                          120.140.0.0/19 maxlen: 19
                          120.140.32.0/19 maxlen: 19
                          120.140.66.0/24 maxlen: 24
                          120.140.67.0/24 maxlen: 24
                          120.140.69.0/24 maxlen: 24
                          120.140.74.0/24 maxlen: 24
                          120.140.77.0/24 maxlen: 24
                          120.140.96.0/19 maxlen: 19
                          120.140.128.0/19 maxlen: 19
                          120.141.0.0/20 maxlen: 20
                          120.141.16.0/20 maxlen: 20
                          124.13.0.0/16 maxlen: 22
                          124.82.0.0/16 maxlen: 21
                          175.136.0.0/13 maxlen: 21
                          175.142.248.0/22 maxlen: 22
                          175.144.0.0/15 maxlen: 22
                          175.145.77.0/24 maxlen: 24
                          180.72.0.0/14 maxlen: 22
                          202.71.109.0/24 maxlen: 24
                          202.75.41.0/24 maxlen: 24
                          202.171.192.0/20 maxlen: 24
                          202.178.0.0/19 maxlen: 19
                          202.178.32.0/19 maxlen: 24
                          202.178.64.0/20 maxlen: 24
                          202.188.0.0/16 maxlen: 24
                          203.106.0.0/16 maxlen: 24
                          210.186.0.0/16 maxlen: 24
                          210.187.0.0/16 maxlen: 24
                          210.195.0.0/16 maxlen: 21
                          218.111.0.0/16 maxlen: 18
                          218.208.0.0/16 maxlen: 24
                          219.92.0.0/16 maxlen: 24
                          219.93.0.0/16 maxlen: 24
                          219.94.0.0/17 maxlen: 18
                          219.94.0.0/18 maxlen: 24
                          219.95.0.0/16 maxlen: 21
                          2001:e68::/32 maxlen: 64
                          2001:4470::/32 maxlen: 32
                          2401:3c00::/47 maxlen: 47
                          2401:3c00:2::/47 maxlen: 47
                          2401:3c00:4::/47 maxlen: 47
                          2401:3c00:6::/47 maxlen: 47
                          2401:3c00:c::/48 maxlen: 48
                          2401:3c00:10::/46 maxlen: 46
                          2401:3c00:40::/47 maxlen: 47
                          2401:3c00:42::/47 maxlen: 47
                          2401:3c00:44::/47 maxlen: 47
                          2401:3c00:46::/47 maxlen: 47
                          2401:3c00:4c::/48 maxlen: 48
                          2401:3c00:50::/46 maxlen: 46
                          2401:3c00:c8::/48 maxlen: 48
                          2401:3c00:cc::/48 maxlen: 48
                          2401:3c00:202::/47 maxlen: 47
                          2401:3c00:204::/47 maxlen: 47
                          2401:3c00:206::/47 maxlen: 47
                          2401:3c00:208::/47 maxlen: 47
                          2401:3c00:20a::/47 maxlen: 47
                          2401:3c00:20c::/47 maxlen: 47
                          2401:3c00:20e::/47 maxlen: 47
                          2401:3c00:210::/47 maxlen: 47
                          2401:3c00:212::/47 maxlen: 47
                          2401:3c00:214::/47 maxlen: 47
                          2401:3c00:216::/47 maxlen: 47
                          2401:3c00:218::/47 maxlen: 47
                          2401:3c00:21a::/48 maxlen: 48
                          2401:3c00:21b::/48 maxlen: 48
                          2401:3c00:21c::/48 maxlen: 48
                          2401:3c00:21d::/48 maxlen: 48
                          2401:3c00:21e::/47 maxlen: 47
                          2401:3c00:220::/47 maxlen: 47
                          2401:3c00:224::/48 maxlen: 48
                          2401:3c00:225::/48 maxlen: 48
                          2401:3c00:226::/48 maxlen: 48
                          2401:3c00:228::/47 maxlen: 47
                          2401:3c00:22a::/47 maxlen: 47
                          2401:3c00:22c::/47 maxlen: 47
                          2401:3c00:22e::/47 maxlen: 47
                          2401:3c00:240::/44 maxlen: 44
                          2401:3c00:240::/46 maxlen: 46
                          2401:3c00:240::/47 maxlen: 47
                          2401:3c00:242::/47 maxlen: 47
                          2401:3c00:244::/46 maxlen: 46
                          2401:3c00:244::/47 maxlen: 47
                          2401:3c00:246::/47 maxlen: 47
                          2401:3c00:248::/46 maxlen: 46
                          2401:3c00:248::/47 maxlen: 47
                          2401:3c00:24a::/47 maxlen: 47
                          2401:3c00:24c::/46 maxlen: 46
                          2401:3c00:24c::/48 maxlen: 48
                          2401:3c00:24d::/48 maxlen: 48
                          2401:3c00:24e::/47 maxlen: 47
                          2401:3c00:250::/47 maxlen: 47
                          2401:3c00:252::/47 maxlen: 47
                          2401:3c00:254::/47 maxlen: 47
                          2401:3c00:256::/47 maxlen: 47
                          2401:3c00:258::/47 maxlen: 47
                          2401:3c00:25a::/47 maxlen: 47
                          2401:3c00:25c::/47 maxlen: 47
                          2401:3c00:25e::/48 maxlen: 48
                          2401:3c00:25f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3623 (0xe27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Jul 23 23:51:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a62a900-0b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:42:3d:4f:5c:df:46:45:71:ed:d3:6e:07:
                    c7:08:98:e8:fc:67:b5:b0:9c:ee:0c:e8:58:f6:21:
                    de:79:c7:fd:ba:b8:db:b5:86:e6:3f:06:69:54:dc:
                    75:1f:b0:1b:ee:fe:f7:2c:ff:a4:43:f4:5e:55:fd:
                    3a:0f:35:15:92:8c:b1:88:b6:22:f8:81:bf:7b:b3:
                    f0:67:d8:83:14:1c:11:da:bc:ad:c1:e6:93:9c:b9:
                    7e:fb:35:54:93:bb:eb:47:38:cf:84:37:aa:52:bb:
                    5c:2a:71:19:c4:c7:68:c3:c7:f5:0b:4b:e8:b8:4c:
                    28:d8:bc:3a:0c:69:26:2f:3a:ae:18:1f:79:5c:04:
                    92:25:ba:ef:fe:77:17:a8:38:dd:a2:c5:de:bd:0f:
                    cf:c0:21:63:35:55:68:1e:2b:d0:ab:be:07:1d:d3:
                    8a:88:77:27:53:e6:e2:10:7e:66:42:1b:c7:7c:6a:
                    1c:6a:f1:6e:7c:35:d6:fa:e5:1d:33:7f:4e:42:4b:
                    30:d7:2e:e8:88:21:b4:92:bd:6f:fe:a5:32:15:1d:
                    fe:53:b5:7a:80:38:50:6b:61:b5:4f:8d:9a:25:ca:
                    71:ec:87:98:d6:97:fc:07:be:bf:a5:94:1f:1f:23:
                    a8:23:60:4b:94:f4:04:4a:63:1d:72:a3:33:ba:e0:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A1:C3:8D:A9:F5:92:A4:A4:95:92:AA:F3:8E:30:A2:95:E8:34:D7
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6BB6356086F111F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.9.0.0/16
                  1.32.0.0/17
                  27.146.0.0/16
                  42.153.5.0/24
                  42.153.200.0/21
                  42.188.0.0/14
                  45.116.240.0/21
                  58.26.0.0-58.27.127.255
                  58.139.0.0/16
                  60.48.0.0-60.54.255.255
                  103.1.104.0/22
                  103.4.140.0/22
                  110.159.0.0/16
                  114.133.0.0/16
                  115.132.0.0/14
                  118.100.0.0/15
                  120.140.0.0/15
                  124.13.0.0/16
                  124.82.0.0/16
                  175.136.0.0-175.145.255.255
                  180.72.0.0/14
                  202.71.109.0/24
                  202.75.41.0/24
                  202.171.192.0/20
                  202.178.0.0-202.178.79.255
                  202.188.0.0/16
                  203.106.0.0/16
                  210.186.0.0/15
                  210.195.0.0/16
                  218.111.0.0/16
                  218.208.0.0/16
                  219.92.0.0-219.94.127.255
                  219.95.0.0/16
                IPv6:
                  2001:e68::/32
                  2001:4470::/32
                  2401:3c00::/45
                  2401:3c00:c::/48
                  2401:3c00:10::/46
                  2401:3c00:40::/45
                  2401:3c00:4c::/48
                  2401:3c00:50::/46
                  2401:3c00:c8::/48
                  2401:3c00:cc::/48
                  2401:3c00:202::-2401:3c00:221:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:224::-2401:3c00:226:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:228::/45
                  2401:3c00:240::/43

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:64:06:b2:84:db:e2:a3:34:dc:7a:df:a1:81:d1:49:fb:
         e2:c0:e2:c3:a4:59:42:c9:a7:c0:4b:27:74:4f:0a:8f:2d:7b:
         38:c8:5b:c5:22:c7:c6:0e:01:32:e4:0b:a4:6e:24:8b:31:78:
         4b:fb:ea:ae:b1:66:03:2b:0f:8d:52:5b:66:10:05:db:6e:25:
         7b:f0:ec:57:9b:4b:1b:bf:82:10:e3:8c:1c:4e:c3:a6:5e:78:
         36:e7:76:76:fc:fe:41:b0:20:5f:54:44:0d:dd:93:bc:66:8c:
         7a:3a:17:69:66:56:70:8d:a2:e9:3d:a5:42:39:83:69:83:44:
         04:73:27:93:79:22:14:56:ac:6f:d9:12:dd:b0:5a:8d:a8:35:
         d6:cb:44:2f:98:ce:80:33:c0:00:7d:0f:22:74:d3:70:ab:57:
         8e:b1:c1:85:16:86:d3:55:08:6f:26:77:39:bc:34:bd:c5:54:
         42:51:86:7b:90:b6:d0:f2:3b:27:53:ef:55:c5:48:fa:03:6b:
         5a:c2:91:42:4e:77:86:3f:a1:6f:69:f4:17:b3:87:66:ed:e4:
         49:d9:95:ca:11:7d:5e:a4:a1:52:95:42:86:d7:9e:c7:52:c5:
         30:7f:25:c3:09:0b:47:c6:84:44:c0:d8:44:4b:be:35:fd:29:
         a6:95:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:56:40 2026 by rpki-client