Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/3FEAB8ACB35111F18D4FB8773611F970.roa
File:                     3FEAB8ACB35111F18D4FB8773611F970.roa (raw, json)
Hash identifier:          G4O4Fr9KFAy9JCGG9vy1DQtNadHCEy2A/xHTLkXWzvU=
Subject key identifier:   2B:27:58:C1:F8:7C:58:C9:01:4B:74:6A:DD:EE:81:5C:7A:59:3D:1B
Certificate issuer:       /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial:       0112
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/3FEAB8ACB35111F18D4FB8773611F970.roa
Signing time:             Mon 21 Sep 2026 06:20:38 +0000
ROA not before:           Mon 21 Sep 2026 06:20:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     62325
IP address blocks:        27.123.232.0/22 maxlen: 24
                          45.114.108.0/22 maxlen: 24
                          45.116.144.0/22 maxlen: 24
                          103.14.112.0/22 maxlen: 24
                          103.56.192.0/22 maxlen: 24
                          103.71.32.0/22 maxlen: 24
                          103.73.88.0/22 maxlen: 24
                          103.75.16.0/22 maxlen: 24
                          103.88.184.0/22 maxlen: 24
                          103.214.32.0/22 maxlen: 24
                          103.243.128.0/22 maxlen: 24
                          116.204.244.0/22 maxlen: 24
                          117.18.224.0/22 maxlen: 24
                          122.10.0.0/18 maxlen: 24
                          122.10.64.0/20 maxlen: 24
                          144.48.56.0/22 maxlen: 24
                          150.129.152.0/22 maxlen: 24
                          157.119.112.0/22 maxlen: 24
                          216.250.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
        Validity
            Not Before: Sep 21 06:20:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab0ccb6-78ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:71:7f:51:f8:c7:ec:dd:ac:14:6e:39:cf:
                    49:16:5f:23:6c:50:c3:6a:c8:a0:bc:09:bd:48:45:
                    51:3b:66:e8:84:7a:dc:e4:b8:c5:2e:6e:7a:7d:d6:
                    3f:ba:d9:52:22:61:f4:12:48:d8:10:38:d7:36:1e:
                    33:49:aa:8f:aa:4c:a4:aa:dc:3b:bd:1b:a6:0b:28:
                    db:12:23:08:5d:12:73:53:af:af:91:56:db:3e:90:
                    1c:f8:99:54:34:17:d5:16:78:00:19:79:99:d9:3c:
                    8b:7c:d5:53:ab:59:ae:48:39:08:72:c7:a1:3a:e4:
                    40:c4:9d:ad:9a:fa:20:5f:4f:e9:6b:7b:e3:fa:76:
                    f1:5d:25:15:35:15:e4:b8:03:a2:94:bd:73:07:8b:
                    ce:46:a5:40:3e:25:59:d9:49:8c:c7:2d:4f:3b:42:
                    fe:d2:d5:c9:7a:dc:a8:9c:1f:60:6d:f8:ae:d8:6d:
                    01:6a:d7:89:bf:85:48:fc:1b:83:50:79:6d:2d:4c:
                    6d:aa:a3:ba:89:04:85:41:15:68:6e:f0:48:57:db:
                    25:df:a9:06:5c:bb:bd:bc:6f:99:6f:b0:a1:64:f5:
                    c8:36:5a:91:7b:44:58:b3:88:c7:5b:16:0c:82:9f:
                    3a:1f:32:a6:f8:93:e6:a2:1d:0e:e6:d8:03:d5:6c:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:27:58:C1:F8:7C:58:C9:01:4B:74:6A:DD:EE:81:5C:7A:59:3D:1B
            X509v3 Authority Key Identifier:
                keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/3FEAB8ACB35111F18D4FB8773611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.232.0/22
                  45.114.108.0/22
                  45.116.144.0/22
                  103.14.112.0/22
                  103.56.192.0/22
                  103.71.32.0/22
                  103.73.88.0/22
                  103.75.16.0/22
                  103.88.184.0/22
                  103.214.32.0/22
                  103.243.128.0/22
                  116.204.244.0/22
                  117.18.224.0/22
                  122.10.0.0-122.10.79.255
                  144.48.56.0/22
                  150.129.152.0/22
                  157.119.112.0/22
                  216.250.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:78:39:39:57:89:cd:03:fc:a7:83:a4:c9:ea:b2:2f:bd:
         a8:a0:f1:10:ba:b8:ab:a2:c2:29:b6:c6:41:c3:de:15:94:76:
         a6:92:64:b1:f2:c8:bd:49:bb:09:59:15:44:cb:84:d5:da:78:
         a5:30:c1:a3:8d:5f:70:dc:3a:cd:56:eb:d9:47:de:11:7f:e7:
         e1:a6:dc:78:3a:86:87:d5:1b:c8:52:30:00:ec:3d:88:e3:7b:
         b4:63:1e:47:13:81:6a:4f:3e:e7:af:31:52:4f:f9:f6:77:fc:
         75:a9:90:61:6f:30:3e:4d:6a:71:5b:24:5a:b4:e4:b8:df:e8:
         ba:25:bd:bb:7f:f9:27:41:50:80:c1:19:f6:06:ab:75:0f:27:
         02:d9:5c:fc:91:c1:08:98:e9:70:2d:0f:27:64:de:ec:9e:d4:
         e2:a6:61:40:ea:ff:1d:a5:12:01:86:29:fe:e1:66:c2:83:fd:
         6c:4e:39:4c:52:0d:7e:bd:f5:42:e3:68:17:9e:ad:45:f4:18:
         bd:f2:be:d8:17:5e:0a:ba:e9:c1:9c:cd:06:00:04:22:56:8e:
         25:98:5a:f8:27:1d:82:93:01:35:70:99:cc:df:46:4f:f9:37:
         f2:c6:32:ee:e8:5a:d3:19:ae:14:04:9d:bf:c2:c1:d0:86:da:
         35:f6:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:50:56 2026 by rpki-client