Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B630F86086F011F19E006003A7EE528E.roa
File:                     B630F86086F011F19E006003A7EE528E.roa (raw, json)
Hash identifier:          Dc+lIrluDlwFqmSNTbpJGR9JAggoonA7Vsue96ulmVI=
Subject key identifier:   FD:57:55:AC:B6:F9:81:51:26:6F:00:EA:90:32:77:8F:57:73:06:A0
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       142F
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B630F86086F011F19E006003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:46:23 +0000
ROA not before:           Thu 23 Jul 2026 23:46:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9874
IP address blocks:        27.54.0.0/18 maxlen: 24
                          61.8.235.0/24 maxlen: 24
                          61.8.236.0/24 maxlen: 24
                          101.127.200.0/22 maxlen: 24
                          101.127.204.0/23 maxlen: 24
                          113.10.64.0/18 maxlen: 24
                          122.11.150.0/23 maxlen: 24
                          122.11.152.0/21 maxlen: 24
                          122.11.169.0/24 maxlen: 24
                          122.11.170.0/23 maxlen: 24
                          122.11.172.0/24 maxlen: 24
                          122.11.216.0/24 maxlen: 24
                          122.11.217.0/24 maxlen: 24
                          122.11.218.0/24 maxlen: 24
                          122.11.219.0/24 maxlen: 24
                          124.155.192.0/19 maxlen: 24
                          171.0.0.0/15 maxlen: 15
                          171.0.0.0/16 maxlen: 24
                          171.1.0.0/16 maxlen: 24
                          171.207.0.0/16 maxlen: 24
                          183.90.0.0/19 maxlen: 24
                          183.90.32.0/21 maxlen: 24
                          183.90.40.0/24 maxlen: 24
                          203.116.22.0/24 maxlen: 24
                          203.116.107.0/24 maxlen: 24
                          203.116.116.0/24 maxlen: 24
                          203.116.119.0/24 maxlen: 24
                          203.116.133.0/24 maxlen: 24
                          203.116.149.0/24 maxlen: 24
                          203.116.150.0/24 maxlen: 24
                          203.116.181.0/24 maxlen: 24
                          203.116.211.0/24 maxlen: 24
                          203.116.222.0/24 maxlen: 24
                          203.117.40.0/23 maxlen: 24
                          203.117.56.0/21 maxlen: 24
                          203.117.246.0/24 maxlen: 24
                          203.117.247.0/24 maxlen: 24
                          203.117.248.0/22 maxlen: 24
                          203.117.252.0/23 maxlen: 24
                          2406:3000:8:4030::/60 maxlen: 60
                          2406:3002:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5167 (0x142f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Jul 23 23:46:23 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a62a7cf-bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:73:31:89:f5:a4:6c:a9:1c:0d:d7:f2:39:
                    7e:a8:d6:a3:75:e4:89:b2:6c:ad:52:77:8c:75:bd:
                    b6:91:59:27:c5:b7:5b:d9:45:19:9c:f5:b3:7c:e4:
                    99:43:73:c8:ee:50:76:34:7d:3d:b3:51:5a:ff:d0:
                    ef:6f:98:00:96:d1:47:2c:dc:9e:58:82:2b:26:00:
                    60:4d:97:44:5a:de:ab:3f:67:03:84:b2:3a:4a:54:
                    68:a0:c9:68:5a:53:d7:d5:30:0f:f0:7c:b9:80:0e:
                    4a:19:44:77:e2:e5:bf:57:ee:85:aa:22:bb:ab:47:
                    33:b9:dc:dd:af:e9:60:b8:d4:ad:b0:70:f6:7c:03:
                    f3:4e:d3:3f:20:cb:aa:37:e1:c9:34:26:ef:df:af:
                    1d:5a:10:4f:20:fa:3b:61:b1:05:67:ac:ca:f4:b3:
                    a0:86:a6:55:fb:cc:12:98:2a:6e:0a:fb:de:69:37:
                    f8:32:50:5c:31:1a:02:5b:5c:09:1e:8c:ec:34:29:
                    f8:ed:ba:ff:1e:21:89:88:f4:f3:4d:a4:43:9f:b5:
                    1c:24:d4:09:4d:91:5f:5d:30:13:d4:c2:f0:12:24:
                    a3:b4:ba:b8:c0:6b:8f:e6:7f:63:ef:04:99:9f:cc:
                    6a:7a:22:c0:08:55:c3:b0:38:9b:9e:12:2c:9e:04:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:57:55:AC:B6:F9:81:51:26:6F:00:EA:90:32:77:8F:57:73:06:A0
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B630F86086F011F19E006003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.0.0/18
                  61.8.235.0-61.8.236.255
                  101.127.200.0-101.127.205.255
                  113.10.64.0/18
                  122.11.150.0-122.11.159.255
                  122.11.169.0-122.11.172.255
                  122.11.216.0/22
                  124.155.192.0/19
                  171.0.0.0/15
                  171.207.0.0/16
                  183.90.0.0-183.90.40.255
                  203.116.22.0/24
                  203.116.107.0/24
                  203.116.116.0/24
                  203.116.119.0/24
                  203.116.133.0/24
                  203.116.149.0-203.116.150.255
                  203.116.181.0/24
                  203.116.211.0/24
                  203.116.222.0/24
                  203.117.40.0/23
                  203.117.56.0/21
                  203.117.246.0-203.117.253.255
                IPv6:
                  2406:3000:8:4030::/60
                  2406:3002:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:94:97:2c:5e:44:2e:b6:d3:81:e1:c4:71:e8:1a:26:d9:a0:
         6a:e1:28:d7:d3:4f:8c:bc:bf:14:e1:fe:3a:bd:10:6a:82:c1:
         5f:b2:bb:9c:1d:8c:8d:9a:72:b1:15:cf:ac:14:31:45:a7:ee:
         20:3b:01:b0:e1:54:17:88:1d:25:ee:05:59:9a:97:42:7c:70:
         54:7d:e3:9b:7c:5a:d8:a2:fa:b4:ef:59:82:0e:0a:e9:5c:a2:
         14:f8:b9:bb:c5:7e:17:22:f1:d5:00:70:34:d5:0a:f2:ee:8f:
         26:5d:6d:40:0c:13:7f:ff:69:f3:34:5e:85:54:05:2d:6a:4e:
         65:94:b2:86:a2:17:63:ed:6c:20:fc:16:b0:b7:14:5d:48:a3:
         15:1a:96:07:96:28:84:3c:84:e9:e2:80:4b:35:90:1f:03:74:
         9a:91:a4:b6:7c:8b:32:0e:85:a4:e9:7b:a5:2a:be:d4:18:6a:
         ee:b4:b4:79:2a:5a:bf:94:2d:b5:f8:ef:ca:15:04:5f:ae:0a:
         3b:75:e5:88:d9:dd:e3:00:2f:8e:5b:60:b9:61:90:b7:82:46:
         39:1c:47:ea:25:43:ac:3a:c1:2f:8c:7c:ae:cd:04:9a:45:df:
         f7:b1:3a:ad:7a:22:1d:11:bb:83:79:df:93:5b:a4:30:0c:88:
         fb:ee:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:09 2026 by rpki-client