Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
File:                     E44FF288EE9811EF88F8B953C4F9AE02.roa (raw, json)
Hash identifier:          lIzAf0fI92xIL4SKAtW69KM0Oj+AT3miW4hjComG/k0=
Subject key identifier:   35:61:D4:8A:A8:2F:63:9B:29:BC:75:A5:1B:89:9C:CC:37:C6:95:23
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2BC0
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
Signing time:             Wed 11 Nov 2026 04:53:53 +0000
ROA not before:           Wed 11 Nov 2026 04:53:53 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23930
IP address blocks:        43.243.126.0/24 maxlen: 24
                          43.243.127.0/24 maxlen: 24
                          103.38.214.0/24 maxlen: 24
                          103.38.215.0/24 maxlen: 24
                          116.93.0.0/17 maxlen: 17
                          116.93.0.0/19 maxlen: 19
                          116.93.0.0/20 maxlen: 20
                          116.93.0.0/21 maxlen: 21
                          116.93.0.0/23 maxlen: 23
                          116.93.1.0/24 maxlen: 24
                          116.93.4.0/23 maxlen: 23
                          116.93.4.0/24 maxlen: 24
                          116.93.5.0/24 maxlen: 24
                          116.93.6.0/24 maxlen: 24
                          116.93.7.0/24 maxlen: 24
                          116.93.8.0/21 maxlen: 21
                          116.93.8.0/23 maxlen: 23
                          116.93.8.0/24 maxlen: 24
                          116.93.9.0/24 maxlen: 24
                          116.93.10.0/23 maxlen: 23
                          116.93.10.0/24 maxlen: 24
                          116.93.11.0/24 maxlen: 24
                          116.93.12.0/23 maxlen: 23
                          116.93.12.0/24 maxlen: 24
                          116.93.13.0/24 maxlen: 24
                          116.93.15.0/24 maxlen: 24
                          116.93.16.0/20 maxlen: 20
                          116.93.16.0/21 maxlen: 21
                          116.93.16.0/23 maxlen: 23
                          116.93.17.0/24 maxlen: 24
                          116.93.18.0/23 maxlen: 23
                          116.93.18.0/24 maxlen: 24
                          116.93.20.0/24 maxlen: 24
                          116.93.21.0/24 maxlen: 24
                          116.93.22.0/23 maxlen: 23
                          116.93.23.0/24 maxlen: 24
                          116.93.24.0/21 maxlen: 21
                          116.93.24.0/22 maxlen: 22
                          116.93.24.0/23 maxlen: 23
                          116.93.24.0/24 maxlen: 24
                          116.93.25.0/24 maxlen: 24
                          116.93.26.0/23 maxlen: 23
                          116.93.26.0/24 maxlen: 24
                          116.93.27.0/24 maxlen: 24
                          116.93.28.0/23 maxlen: 23
                          116.93.28.0/24 maxlen: 24
                          116.93.29.0/24 maxlen: 24
                          116.93.30.0/23 maxlen: 23
                          116.93.30.0/24 maxlen: 24
                          116.93.31.0/24 maxlen: 24
                          116.93.32.0/19 maxlen: 19
                          116.93.32.0/20 maxlen: 20
                          116.93.32.0/21 maxlen: 21
                          116.93.32.0/23 maxlen: 23
                          116.93.32.0/24 maxlen: 24
                          116.93.33.0/24 maxlen: 24
                          116.93.34.0/23 maxlen: 23
                          116.93.34.0/24 maxlen: 24
                          116.93.36.0/23 maxlen: 23
                          116.93.36.0/24 maxlen: 24
                          116.93.37.0/24 maxlen: 24
                          116.93.38.0/23 maxlen: 23
                          116.93.38.0/24 maxlen: 24
                          116.93.39.0/24 maxlen: 24
                          116.93.40.0/21 maxlen: 21
                          116.93.40.0/24 maxlen: 24
                          116.93.41.0/24 maxlen: 24
                          116.93.42.0/24 maxlen: 24
                          116.93.43.0/24 maxlen: 24
                          116.93.44.0/24 maxlen: 24
                          116.93.45.0/24 maxlen: 24
                          116.93.46.0/23 maxlen: 23
                          116.93.47.0/24 maxlen: 24
                          116.93.48.0/20 maxlen: 20
                          116.93.48.0/21 maxlen: 21
                          116.93.48.0/23 maxlen: 23
                          116.93.49.0/24 maxlen: 24
                          116.93.50.0/23 maxlen: 23
                          116.93.51.0/24 maxlen: 24
                          116.93.52.0/24 maxlen: 24
                          116.93.54.0/23 maxlen: 23
                          116.93.54.0/24 maxlen: 24
                          116.93.56.0/21 maxlen: 21
                          116.93.59.0/24 maxlen: 24
                          116.93.61.0/24 maxlen: 24
                          116.93.62.0/24 maxlen: 24
                          116.93.63.0/24 maxlen: 24
                          116.93.64.0/19 maxlen: 19
                          116.93.64.0/20 maxlen: 20
                          116.93.64.0/21 maxlen: 21
                          116.93.64.0/24 maxlen: 24
                          116.93.65.0/24 maxlen: 24
                          116.93.66.0/24 maxlen: 24
                          116.93.67.0/24 maxlen: 24
                          116.93.71.0/24 maxlen: 24
                          116.93.72.0/21 maxlen: 21
                          116.93.74.0/24 maxlen: 24
                          116.93.75.0/24 maxlen: 24
                          116.93.78.0/24 maxlen: 24
                          116.93.79.0/24 maxlen: 24
                          116.93.80.0/20 maxlen: 20
                          116.93.80.0/21 maxlen: 21
                          116.93.80.0/23 maxlen: 23
                          116.93.80.0/24 maxlen: 24
                          116.93.85.0/24 maxlen: 24
                          116.93.86.0/24 maxlen: 24
                          116.93.87.0/24 maxlen: 24
                          116.93.88.0/21 maxlen: 21
                          116.93.88.0/24 maxlen: 24
                          116.93.90.0/24 maxlen: 24
                          116.93.91.0/24 maxlen: 24
                          116.93.93.0/24 maxlen: 24
                          116.93.94.0/24 maxlen: 24
                          116.93.96.0/19 maxlen: 19
                          116.93.96.0/20 maxlen: 20
                          116.93.96.0/21 maxlen: 21
                          116.93.96.0/24 maxlen: 24
                          116.93.97.0/24 maxlen: 24
                          116.93.98.0/24 maxlen: 24
                          116.93.99.0/24 maxlen: 24
                          116.93.100.0/24 maxlen: 24
                          116.93.102.0/24 maxlen: 24
                          116.93.104.0/21 maxlen: 21
                          116.93.105.0/24 maxlen: 24
                          116.93.106.0/24 maxlen: 24
                          116.93.107.0/24 maxlen: 24
                          116.93.108.0/24 maxlen: 24
                          116.93.109.0/24 maxlen: 24
                          116.93.110.0/24 maxlen: 24
                          116.93.111.0/24 maxlen: 24
                          116.93.112.0/20 maxlen: 20
                          116.93.112.0/21 maxlen: 21
                          116.93.112.0/24 maxlen: 24
                          116.93.114.0/24 maxlen: 24
                          116.93.115.0/24 maxlen: 24
                          116.93.117.0/24 maxlen: 24
                          116.93.118.0/24 maxlen: 24
                          116.93.119.0/24 maxlen: 24
                          116.93.120.0/21 maxlen: 21
                          116.93.120.0/24 maxlen: 24
                          116.93.121.0/24 maxlen: 24
                          116.93.122.0/24 maxlen: 24
                          116.93.124.0/24 maxlen: 24
                          116.93.126.0/24 maxlen: 24
                          116.93.127.0/24 maxlen: 24
                          121.127.0.0/19 maxlen: 19
                          121.127.0.0/20 maxlen: 20
                          121.127.0.0/21 maxlen: 21
                          121.127.0.0/24 maxlen: 24
                          121.127.1.0/24 maxlen: 24
                          121.127.6.0/24 maxlen: 24
                          121.127.7.0/24 maxlen: 24
                          121.127.8.0/21 maxlen: 21
                          121.127.8.0/24 maxlen: 24
                          121.127.9.0/24 maxlen: 24
                          121.127.10.0/24 maxlen: 24
                          121.127.11.0/24 maxlen: 24
                          121.127.12.0/23 maxlen: 23
                          121.127.12.0/24 maxlen: 24
                          121.127.13.0/24 maxlen: 24
                          121.127.14.0/23 maxlen: 23
                          121.127.14.0/24 maxlen: 24
                          121.127.15.0/24 maxlen: 24
                          121.127.16.0/20 maxlen: 20
                          121.127.16.0/21 maxlen: 21
                          121.127.16.0/24 maxlen: 24
                          121.127.17.0/24 maxlen: 24
                          121.127.18.0/24 maxlen: 24
                          121.127.20.0/23 maxlen: 23
                          121.127.20.0/24 maxlen: 24
                          121.127.21.0/24 maxlen: 24
                          121.127.22.0/23 maxlen: 23
                          121.127.22.0/24 maxlen: 24
                          121.127.23.0/24 maxlen: 24
                          121.127.24.0/21 maxlen: 21
                          121.127.26.0/23 maxlen: 23
                          121.127.26.0/24 maxlen: 24
                          121.127.27.0/24 maxlen: 24
                          121.127.28.0/23 maxlen: 23
                          121.127.28.0/24 maxlen: 24
                          121.127.29.0/24 maxlen: 24
                          121.127.30.0/23 maxlen: 23
                          121.127.30.0/24 maxlen: 24
                          121.127.31.0/24 maxlen: 24
                          203.99.232.0/21 maxlen: 21
                          203.99.232.0/23 maxlen: 23
                          203.99.232.0/24 maxlen: 24
                          203.99.233.0/24 maxlen: 24
                          203.99.234.0/24 maxlen: 24
                          203.99.235.0/24 maxlen: 24
                          203.99.236.0/24 maxlen: 24
                          203.99.237.0/24 maxlen: 24
                          203.99.238.0/23 maxlen: 23
                          203.99.238.0/24 maxlen: 24
                          203.99.239.0/24 maxlen: 24
                          203.208.24.0/21 maxlen: 21
                          203.208.24.0/23 maxlen: 23
                          203.208.24.0/24 maxlen: 24
                          203.208.25.0/24 maxlen: 24
                          203.208.26.0/24 maxlen: 24
                          203.208.27.0/24 maxlen: 24
                          203.208.28.0/24 maxlen: 24
                          203.208.29.0/24 maxlen: 24
                          203.208.30.0/24 maxlen: 24
                          203.208.31.0/24 maxlen: 24
                          2401:9800::/32 maxlen: 32
                          2401:9800::/33 maxlen: 33
                          2401:9800:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11200 (0x2bc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Nov 11 04:53:53 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6af3f4e1-58a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:73:ec:f8:4f:39:e7:9f:c7:3f:c1:85:f9:
                    d4:dc:fc:78:5a:c5:bd:78:87:73:d4:9e:70:e1:ab:
                    a1:bf:79:a5:3a:98:a2:d6:64:f3:8a:f1:f8:38:2f:
                    f7:54:84:e5:16:8a:8e:f5:8b:86:6e:cf:14:25:f5:
                    3f:4b:a7:56:07:a8:60:21:ea:55:db:64:44:a9:0d:
                    3d:7c:30:00:91:62:c1:b5:b1:85:64:64:57:40:ab:
                    3d:f1:28:9e:5c:96:34:03:44:76:10:07:1f:f5:41:
                    0f:12:00:91:e7:88:31:b2:3b:24:a7:a0:13:e2:cd:
                    8f:87:1d:d2:6e:64:7b:ff:22:9c:b6:63:8e:b9:5e:
                    a6:5c:62:4b:23:67:4c:40:15:5b:c6:da:78:c3:10:
                    4f:b8:4d:10:b3:d4:3e:47:43:c3:34:4d:13:a4:93:
                    48:50:6b:8b:af:a9:2e:65:a2:11:29:5f:d5:7c:a4:
                    97:33:a6:5a:33:a2:d4:c0:1c:6e:30:12:98:2a:9e:
                    24:51:61:a9:be:cf:7a:f7:7f:b1:c3:54:b1:b1:4e:
                    2a:f1:a3:41:8a:e8:00:61:c2:9e:35:ec:cb:34:b9:
                    19:34:f1:56:32:6a:d6:38:02:4e:3c:c7:a0:dd:58:
                    e6:7a:28:4f:39:d8:81:d0:5e:38:6f:05:cf:56:f6:
                    19:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:61:D4:8A:A8:2F:63:9B:29:BC:75:A5:1B:89:9C:CC:37:C6:95:23
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.126.0/23
                  103.38.214.0/23
                  116.93.0.0/17
                  121.127.0.0/19
                  203.99.232.0/21
                  203.208.24.0/21
                IPv6:
                  2401:9800::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:87:7f:1e:2f:f5:25:10:a0:f1:39:f5:b8:81:77:d9:1e:1a:
         ac:b4:03:05:b2:73:df:d2:9e:1b:a8:3a:25:66:01:ee:d2:e5:
         3f:50:99:12:1e:9a:e5:89:6a:dc:4b:73:ef:76:22:1d:28:2e:
         2c:dd:07:00:a5:c1:3b:62:14:9f:ef:50:6e:48:1a:ad:26:8c:
         7a:dc:42:eb:bc:2a:d2:9a:fe:8b:bd:30:61:45:26:26:9c:b4:
         41:d9:1e:d3:86:b0:2d:37:de:e5:cd:9d:12:03:10:61:1b:31:
         4e:e1:6f:c2:80:71:05:81:bf:37:8e:f5:f9:55:82:8b:c8:fa:
         38:8b:fe:c1:a0:4b:fa:49:43:4d:6c:b2:ba:6a:65:a2:6b:b0:
         6a:03:26:d1:9f:b0:59:b5:88:33:4d:3f:20:93:0e:a3:50:4a:
         66:76:db:a1:6a:2e:81:97:39:58:91:c8:ad:20:4c:86:61:f9:
         b4:7c:57:ea:87:b0:10:8f:49:e3:c5:ee:d4:30:49:5d:2d:96:
         7a:d4:4b:4d:26:f2:c5:58:26:c8:3a:d0:6a:04:42:ff:86:6d:
         9e:4e:14:71:cf:9e:b7:ea:13:ba:0d:0c:ea:14:c9:97:c3:38:
         13:4d:5f:e2:4e:f0:64:87:11:61:0a:a7:68:8d:a8:f2:e8:f0:
         aa:f3:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:57:15 2026 by rpki-client