Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/6295DC5CB35011F19B6C7AEB3511F970.roa
File:                     6295DC5CB35011F19B6C7AEB3511F970.roa (raw, json)
Hash identifier:          miISMTG3epzi577iGHU3qUsy/CRXBGTdzRzmdu9GUHk=
Subject key identifier:   48:73:85:72:14:D2:87:E7:C2:9C:8B:7F:F2:61:DF:64:86:74:78:ED
Certificate issuer:       /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial:       010F
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/6295DC5CB35011F19B6C7AEB3511F970.roa
Signing time:             Mon 21 Sep 2026 06:20:32 +0000
ROA not before:           Mon 21 Sep 2026 06:20:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134175
IP address blocks:        27.123.232.0/22 maxlen: 24
                          45.114.108.0/22 maxlen: 24
                          45.116.144.0/22 maxlen: 24
                          103.14.112.0/22 maxlen: 24
                          103.56.192.0/22 maxlen: 24
                          103.71.32.0/22 maxlen: 24
                          103.73.88.0/22 maxlen: 24
                          103.75.16.0/22 maxlen: 24
                          103.88.184.0/22 maxlen: 24
                          103.214.32.0/22 maxlen: 24
                          103.243.128.0/22 maxlen: 24
                          116.204.244.0/22 maxlen: 24
                          117.18.224.0/22 maxlen: 24
                          122.10.0.0/18 maxlen: 24
                          122.10.64.0/20 maxlen: 24
                          144.48.56.0/22 maxlen: 24
                          150.129.152.0/22 maxlen: 24
                          157.119.112.0/22 maxlen: 24
                          216.250.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
        Validity
            Not Before: Sep 21 06:20:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab0ccb0-d737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:97:a8:26:b4:6f:38:22:8f:b2:c6:26:de:63:
                    a5:91:1a:25:c7:f0:f9:fb:75:41:f6:ee:87:c7:c1:
                    83:ef:8b:48:bf:72:0b:df:47:0f:64:3a:a3:4e:60:
                    bb:0f:a5:90:19:55:81:d9:43:6e:b1:58:5e:08:09:
                    95:75:b7:4c:d3:9f:18:c5:b5:19:65:1e:db:84:4d:
                    1e:b4:6e:0b:2a:75:cd:c5:4b:90:0f:b9:e5:2c:d5:
                    7f:53:00:9c:19:de:de:5d:71:1c:43:3e:5a:01:2c:
                    42:25:ae:c3:25:1d:ac:a8:3a:60:52:a6:19:28:f6:
                    a3:45:24:be:57:ef:f6:47:0e:f7:e1:cd:f7:db:57:
                    82:05:5d:3c:eb:da:9a:f7:d9:e1:da:55:96:d4:55:
                    a0:63:67:97:3c:79:35:c5:1d:65:56:22:c2:c8:c9:
                    ed:5e:63:e0:6b:fe:6f:44:a5:f9:af:72:10:ca:e0:
                    2e:b5:c5:31:45:ee:76:ca:d2:b9:e4:c7:7e:cb:b3:
                    82:14:d6:99:66:83:a2:88:93:56:c0:68:b1:f0:a9:
                    6c:80:83:ba:ef:65:11:ae:b0:e7:22:ca:21:7a:15:
                    7b:14:95:b6:46:b2:a8:87:88:7b:ef:a1:b9:39:53:
                    79:d7:9b:84:c3:0f:b7:2e:bc:7a:2c:1d:bb:ac:56:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:85:72:14:D2:87:E7:C2:9C:8B:7F:F2:61:DF:64:86:74:78:ED
            X509v3 Authority Key Identifier:
                keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/6295DC5CB35011F19B6C7AEB3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.232.0/22
                  45.114.108.0/22
                  45.116.144.0/22
                  103.14.112.0/22
                  103.56.192.0/22
                  103.71.32.0/22
                  103.73.88.0/22
                  103.75.16.0/22
                  103.88.184.0/22
                  103.214.32.0/22
                  103.243.128.0/22
                  116.204.244.0/22
                  117.18.224.0/22
                  122.10.0.0-122.10.79.255
                  144.48.56.0/22
                  150.129.152.0/22
                  157.119.112.0/22
                  216.250.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:20:24:ec:56:7a:e5:09:41:4d:d6:e2:ed:aa:93:31:b9:95:
         48:0a:0d:23:cb:8a:87:d0:42:65:e3:0f:51:3a:32:16:da:10:
         0e:63:ca:bd:05:27:eb:fc:23:6f:b0:e6:fa:3a:68:49:ec:9c:
         69:4e:d7:b5:6c:b7:41:bf:7b:d5:fd:d1:19:c9:89:90:66:1c:
         90:5f:5e:5d:9b:ef:06:0c:e6:f3:9c:11:cf:c8:f7:81:d7:5e:
         28:2f:b2:40:4e:1e:f1:a5:2c:ff:40:dd:44:a2:e6:f7:21:b0:
         00:b2:ce:d7:0b:6d:b5:7a:24:e2:66:2e:d2:ad:3a:30:e2:72:
         bd:41:40:d2:d6:d4:8f:30:3c:1d:a1:0e:73:cd:ef:52:f0:fa:
         5f:99:30:c2:53:13:7e:4f:31:07:e8:17:c2:8c:9f:af:82:69:
         bd:61:43:8a:b7:fe:3e:21:94:ff:39:c0:3f:93:c5:01:54:8a:
         e0:1f:e1:e0:1d:4f:03:06:a1:bf:df:84:ef:7c:d3:23:4a:89:
         e7:55:d9:e2:f3:e9:93:17:fb:3e:c4:92:b6:05:e1:4c:cc:15:
         e1:16:ed:1f:ac:38:b5:22:3f:f1:6b:71:e7:1d:20:52:8b:bd:
         a0:0f:b9:76:d7:3b:e8:ac:26:15:c3:84:09:ac:24:66:1f:c0:
         3c:07:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:49 2026 by rpki-client