Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63CD8020B35011F19B6C7AEB3511F970.roa
File:                     63CD8020B35011F19B6C7AEB3511F970.roa (raw, json)
Hash identifier:          Wa4FWT9aOHEZOJNnNK1xjxJYRVenPgzimIo1B1clEH0=
Subject key identifier:   FE:A0:10:E9:F3:C5:FA:93:36:95:52:EC:E3:EA:60:E7:8E:1A:AA:57
Certificate issuer:       /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial:       0111
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63CD8020B35011F19B6C7AEB3511F970.roa
Signing time:             Mon 21 Sep 2026 06:20:36 +0000
ROA not before:           Mon 21 Sep 2026 06:20:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     58658
IP address blocks:        27.123.232.0/22 maxlen: 24
                          45.114.108.0/22 maxlen: 24
                          45.116.144.0/22 maxlen: 24
                          103.14.112.0/22 maxlen: 24
                          103.56.192.0/22 maxlen: 24
                          103.71.32.0/22 maxlen: 24
                          103.73.88.0/22 maxlen: 24
                          103.75.16.0/22 maxlen: 24
                          103.88.184.0/22 maxlen: 24
                          103.214.32.0/22 maxlen: 24
                          103.243.128.0/22 maxlen: 24
                          116.204.244.0/22 maxlen: 24
                          117.18.224.0/22 maxlen: 24
                          122.10.0.0/18 maxlen: 24
                          122.10.64.0/20 maxlen: 24
                          144.48.56.0/22 maxlen: 24
                          150.129.152.0/22 maxlen: 24
                          157.119.112.0/22 maxlen: 24
                          216.250.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
        Validity
            Not Before: Sep 21 06:20:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab0ccb4-b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:21:99:70:db:4d:6c:d8:6b:60:84:0f:c5:
                    1c:32:ac:40:f8:fa:4e:46:8c:c7:af:b6:df:e7:ae:
                    ce:a1:f5:f8:bf:81:27:d8:c2:ed:81:d7:ba:81:07:
                    73:8c:71:9a:25:dd:d2:3a:86:7b:af:f6:83:ff:0a:
                    d4:1f:46:e5:5a:a2:32:60:29:a1:4a:ad:89:58:58:
                    01:06:c1:87:30:6e:77:df:80:27:81:70:ca:b5:30:
                    79:66:e6:cc:dc:42:5b:29:81:67:fa:8e:dd:0f:c1:
                    e0:5b:05:41:4c:c3:31:74:d0:db:47:1f:a4:80:73:
                    41:f0:b8:81:23:33:30:05:f7:64:3d:4a:f3:7c:8c:
                    5b:89:8e:09:80:ba:73:9a:e2:c0:27:f3:50:b0:f6:
                    f7:f0:78:bd:26:49:7e:27:d9:5d:c5:59:f1:10:38:
                    13:8f:2e:27:27:8f:0c:6c:63:6d:f9:28:8c:62:2c:
                    9b:7e:63:17:9b:b4:76:a1:d7:26:9b:32:16:22:e8:
                    0d:71:75:5f:b9:86:60:dc:6a:3a:91:98:d8:d2:a0:
                    ac:4d:f0:ef:26:d7:04:ce:4a:3e:c5:fe:4a:33:c3:
                    6f:2d:8a:13:b7:2c:5d:6f:bd:c4:1c:89:c4:c2:11:
                    4b:b7:c4:6c:cb:0e:6b:a3:05:4b:de:86:f0:26:d6:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:10:E9:F3:C5:FA:93:36:95:52:EC:E3:EA:60:E7:8E:1A:AA:57
            X509v3 Authority Key Identifier:
                keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/63CD8020B35011F19B6C7AEB3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.232.0/22
                  45.114.108.0/22
                  45.116.144.0/22
                  103.14.112.0/22
                  103.56.192.0/22
                  103.71.32.0/22
                  103.73.88.0/22
                  103.75.16.0/22
                  103.88.184.0/22
                  103.214.32.0/22
                  103.243.128.0/22
                  116.204.244.0/22
                  117.18.224.0/22
                  122.10.0.0-122.10.79.255
                  144.48.56.0/22
                  150.129.152.0/22
                  157.119.112.0/22
                  216.250.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:ec:1b:e6:15:82:9e:4b:cd:b0:43:25:78:b7:95:0f:eb:
         af:fe:54:4e:47:e3:23:6a:24:05:e4:75:8b:1d:5a:10:55:66:
         5d:9f:ac:ce:c0:3a:23:b1:a2:ed:3d:c7:6a:83:9b:63:d2:31:
         1a:85:1f:93:5f:4e:b1:e1:79:09:a8:02:7a:33:a2:36:05:cc:
         a6:9c:b9:6f:d1:db:55:f9:97:fe:d5:46:aa:61:1d:43:0c:eb:
         90:43:3c:9c:3f:9c:21:63:ba:c2:39:cb:25:8d:32:c7:d6:11:
         ab:a0:26:ae:69:6e:54:29:f6:44:5a:a9:f1:c7:0c:17:cd:83:
         a7:5a:0d:8d:c1:02:70:c0:ad:06:82:78:0c:d4:fa:fe:fb:2f:
         20:3d:3c:7a:44:d3:00:c6:d7:8b:86:12:2c:7c:9e:de:aa:97:
         b7:65:06:4c:e2:ab:16:44:c9:98:b3:0b:1f:e9:ea:90:b0:6b:
         1f:af:56:9f:c5:64:fd:17:2f:f9:9e:a3:a4:89:40:62:67:4b:
         66:a7:96:e8:e5:c5:75:33:27:37:99:51:97:93:1d:8d:87:1d:
         5b:78:aa:bf:a7:07:be:df:03:a8:e1:1b:0a:74:e6:4e:e4:86:
         b7:38:31:71:8d:40:25:30:0a:7d:14:47:ac:7e:a8:8b:f6:70:
         0c:a3:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:51 2026 by rpki-client