Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6E274D16DDD611ECA03EBA36C4F9AE02.roa
File:                     6E274D16DDD611ECA03EBA36C4F9AE02.roa (raw, json)
Hash identifier:          gh2XVSV6aTXrMJk1+HOBrMRSB3QzqGDbYmFKrOLDAro=
Subject key identifier:   68:0B:69:07:DB:46:52:A7:37:C7:EE:E4:61:EA:B0:97:77:30:0F:2D
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0AAF
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6E274D16DDD611ECA03EBA36C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 04:49:17 +0000
ROA not before:           Mon 06 Jul 2026 04:49:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9891
IP address blocks:        27.254.26.0/24 maxlen: 24
                          27.254.32.0/21 maxlen: 21
                          27.254.35.0/24 maxlen: 24
                          27.254.40.0/21 maxlen: 21
                          27.254.43.0/24 maxlen: 24
                          27.254.48.0/22 maxlen: 22
                          27.254.48.0/23 maxlen: 23
                          27.254.52.0/22 maxlen: 22
                          27.254.56.0/22 maxlen: 22
                          27.254.56.0/24 maxlen: 24
                          27.254.58.0/24 maxlen: 24
                          27.254.60.0/22 maxlen: 22
                          27.254.60.0/24 maxlen: 24
                          27.254.61.0/24 maxlen: 24
                          27.254.62.0/23 maxlen: 23
                          27.254.63.0/24 maxlen: 24
                          27.254.64.0/22 maxlen: 22
                          27.254.64.0/23 maxlen: 23
                          27.254.64.0/24 maxlen: 24
                          27.254.68.0/22 maxlen: 22
                          27.254.70.0/24 maxlen: 24
                          27.254.80.0/22 maxlen: 22
                          27.254.82.0/24 maxlen: 24
                          27.254.83.0/24 maxlen: 24
                          27.254.84.0/22 maxlen: 22
                          27.254.92.0/22 maxlen: 22
                          27.254.96.0/22 maxlen: 22
                          27.254.97.0/24 maxlen: 24
                          27.254.108.0/22 maxlen: 22
                          27.254.128.0/19 maxlen: 19
                          27.254.129.0/24 maxlen: 24
                          27.254.155.0/24 maxlen: 24
                          27.254.159.0/24 maxlen: 24
                          27.254.160.0/22 maxlen: 22
                          27.254.163.0/24 maxlen: 24
                          27.254.168.0/22 maxlen: 22
                          27.254.172.0/22 maxlen: 22
                          27.254.208.0/22 maxlen: 22
                          27.254.210.0/24 maxlen: 24
                          27.254.211.0/24 maxlen: 24
                          27.254.212.0/23 maxlen: 23
                          27.254.216.0/22 maxlen: 22
                          27.254.216.0/24 maxlen: 24
                          27.254.219.0/24 maxlen: 24
                          202.183.164.0/22 maxlen: 22
                          202.183.192.0/23 maxlen: 23
                          202.183.198.0/24 maxlen: 24
                          202.183.247.0/24 maxlen: 24
                          203.146.21.0/24 maxlen: 24
                          203.146.26.0/24 maxlen: 24
                          203.146.43.0/24 maxlen: 24
                          203.146.61.0/24 maxlen: 24
                          203.146.101.0/24 maxlen: 24
                          203.146.102.0/24 maxlen: 24
                          203.146.111.0/24 maxlen: 24
                          203.146.117.0/24 maxlen: 24
                          203.146.127.0/24 maxlen: 24
                          203.146.129.0/24 maxlen: 24
                          203.146.140.0/24 maxlen: 24
                          203.146.151.0/24 maxlen: 24
                          203.146.161.0/24 maxlen: 24
                          203.146.170.0/24 maxlen: 24
                          203.146.180.0/24 maxlen: 24
                          203.146.215.0/24 maxlen: 24
                          203.146.248.0/22 maxlen: 22
                          203.146.253.0/24 maxlen: 24
                          203.170.129.0/24 maxlen: 24
                          203.170.145.0/24 maxlen: 24
                          203.170.160.0/23 maxlen: 23
                          203.170.190.0/24 maxlen: 24
                          203.170.192.0/23 maxlen: 23
                          203.170.203.0/24 maxlen: 24
                          203.170.204.0/24 maxlen: 24
                          203.172.40.0/22 maxlen: 22
                          210.1.11.0/24 maxlen: 24
                          210.1.31.0/24 maxlen: 24
                          210.1.51.0/24 maxlen: 24
                          210.1.52.0/24 maxlen: 24
                          210.1.58.0/24 maxlen: 24
                          210.1.59.0/24 maxlen: 24
                          210.1.60.0/23 maxlen: 23
                          2404:b0:2000::/48 maxlen: 48
                          2404:b0:2001::/48 maxlen: 48
                          2404:b1::/32 maxlen: 32
                          2404:b1::/36 maxlen: 36
                          2404:b1:1000::/36 maxlen: 36
                          2404:b1:4000::/36 maxlen: 36
                          2404:b1:8000::/36 maxlen: 36
                          2404:b1:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735 (0xaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul  6 04:49:17 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a4b33cd-96da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:d1:b1:c5:bc:3a:b1:ab:4e:75:37:ec:75:
                    77:63:68:1c:06:f3:44:7c:6f:ec:9b:66:3c:31:49:
                    8b:76:38:85:c5:30:3b:3d:66:10:81:9a:33:07:cb:
                    7d:cc:a4:83:d6:d3:ea:29:4c:57:63:bf:71:aa:bc:
                    1a:04:d1:1c:e1:0f:9c:cf:7e:e3:ff:ed:93:0f:bb:
                    a2:b7:14:9e:24:85:c6:80:69:79:21:c6:d6:8f:db:
                    94:d0:36:aa:1c:eb:6d:07:46:95:fd:cf:0d:39:17:
                    7f:03:7d:3e:94:ba:8f:d4:15:72:47:65:ad:f4:e4:
                    61:fd:54:a5:b5:44:91:f1:06:f2:13:cd:98:eb:bf:
                    08:f1:71:ce:91:75:03:c5:99:39:14:f6:9d:5c:68:
                    fb:3f:80:f2:c6:72:5c:7d:11:75:f4:bf:20:b1:ae:
                    87:f6:6c:20:13:bf:81:a2:eb:d2:9d:43:a1:18:af:
                    3c:86:4e:b6:81:a0:9b:f3:ed:ec:17:ca:61:7a:8f:
                    11:42:67:d9:58:9b:d1:df:08:80:a9:fe:3e:8b:74:
                    77:65:da:27:d8:2a:90:c6:64:ab:73:a5:36:f5:61:
                    99:06:fa:70:3d:2e:01:48:fb:b4:8d:4f:82:6b:cf:
                    ff:8c:0e:b2:51:8f:ab:e4:d9:ce:e2:3e:63:28:45:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:69:07:DB:46:52:A7:37:C7:EE:E4:61:EA:B0:97:77:30:0F:2D
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6E274D16DDD611ECA03EBA36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.254.26.0/24
                  27.254.32.0-27.254.71.255
                  27.254.80.0/21
                  27.254.92.0-27.254.99.255
                  27.254.108.0/22
                  27.254.128.0-27.254.163.255
                  27.254.168.0/21
                  27.254.208.0-27.254.213.255
                  27.254.216.0/22
                  202.183.164.0/22
                  202.183.192.0/23
                  202.183.198.0/24
                  202.183.247.0/24
                  203.146.21.0/24
                  203.146.26.0/24
                  203.146.43.0/24
                  203.146.61.0/24
                  203.146.101.0-203.146.102.255
                  203.146.111.0/24
                  203.146.117.0/24
                  203.146.127.0/24
                  203.146.129.0/24
                  203.146.140.0/24
                  203.146.151.0/24
                  203.146.161.0/24
                  203.146.170.0/24
                  203.146.180.0/24
                  203.146.215.0/24
                  203.146.248.0/22
                  203.146.253.0/24
                  203.170.129.0/24
                  203.170.145.0/24
                  203.170.160.0/23
                  203.170.190.0/24
                  203.170.192.0/23
                  203.170.203.0-203.170.204.255
                  203.172.40.0/22
                  210.1.11.0/24
                  210.1.31.0/24
                  210.1.51.0-210.1.52.255
                  210.1.58.0-210.1.61.255
                IPv6:
                  2404:b0:2000::/47
                  2404:b1::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:16:4e:e9:b7:14:db:3b:06:31:2d:7f:37:6a:66:21:35:
         e0:ed:fd:22:a5:7e:01:a8:ee:41:50:e1:84:d1:a2:9c:45:ed:
         46:ae:3d:d2:44:34:21:0b:9a:1d:1d:1e:4b:18:2f:31:c8:cd:
         fd:9f:33:0c:c3:9a:36:8e:c1:bc:21:37:8e:30:86:23:96:4d:
         6d:9f:7f:05:e1:12:e7:aa:6a:e3:b7:ac:56:d8:47:70:cd:88:
         12:f0:18:fe:f5:38:a6:23:76:f3:7d:5a:c7:f5:41:c0:8b:0b:
         d0:75:b9:5f:40:5a:48:ef:4d:42:d7:ae:90:9c:18:84:dc:db:
         df:b8:e0:21:03:2f:1f:99:0f:97:c8:24:27:c8:bf:01:54:da:
         58:15:13:0c:a3:c6:43:fc:64:c3:85:a3:e6:9d:93:9a:41:3e:
         6d:e3:80:29:b0:20:5d:42:6e:66:e8:2b:18:11:34:ea:fe:45:
         b7:d6:e8:dc:e0:b5:01:6d:84:af:36:83:2e:e9:2d:5e:42:70:
         e1:ba:e8:c4:a6:08:66:af:fd:cc:fe:8d:2a:44:aa:80:6d:e7:
         43:7a:e0:85:37:fc:e1:b7:87:2b:41:06:e7:28:f6:6c:bf:af:
         8b:fe:9a:0b:77:0f:45:d4:00:ec:38:32:cd:3b:22:50:c3:f2:
         74:1a:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:07 2026 by rpki-client