Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
File:                     C27C0758916B11EF81BBB521C4F9AE02.roa (raw, json)
Hash identifier:          sLX9jLZ0eXwwPtZ8ZCXcjMbDATrYxsYJVg1Q12EyI+E=
Subject key identifier:   90:45:AA:84:46:0B:8F:68:A8:41:6E:EF:2A:74:F5:9A:09:19:60:1C
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       028A
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:32:06 +0000
ROA not before:           Thu 09 Jul 2026 06:32:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     53813
IP address blocks:        101.2.192.0/24 maxlen: 24
                          101.2.193.0/24 maxlen: 24
                          101.2.194.0/24 maxlen: 24
                          101.2.195.0/24 maxlen: 24
                          101.2.196.0/24 maxlen: 24
                          101.2.197.0/24 maxlen: 24
                          101.2.198.0/24 maxlen: 24
                          101.2.199.0/24 maxlen: 24
                          101.2.200.0/24 maxlen: 24
                          101.2.201.0/24 maxlen: 24
                          101.2.202.0/23 maxlen: 24
                          101.2.204.0/23 maxlen: 24
                          101.2.206.0/24 maxlen: 24
                          101.2.207.0/24 maxlen: 24
                          101.2.208.0/24 maxlen: 24
                          101.2.209.0/24 maxlen: 24
                          101.2.214.0/24 maxlen: 24
                          101.2.215.0/24 maxlen: 24
                          101.2.216.0/23 maxlen: 24
                          101.2.218.0/23 maxlen: 24
                          101.2.220.0/23 maxlen: 24
                          101.2.222.0/23 maxlen: 24
                          101.2.224.0/23 maxlen: 24
                          101.2.226.0/23 maxlen: 24
                          101.2.228.0/23 maxlen: 24
                          101.2.230.0/23 maxlen: 24
                          101.2.232.0/23 maxlen: 24
                          101.2.234.0/23 maxlen: 24
                          101.2.236.0/23 maxlen: 24
                          101.2.238.0/23 maxlen: 24
                          101.2.240.0/24 maxlen: 24
                          101.2.241.0/24 maxlen: 24
                          101.2.242.0/23 maxlen: 24
                          101.2.244.0/23 maxlen: 24
                          101.2.246.0/24 maxlen: 24
                          101.2.247.0/24 maxlen: 24
                          101.2.248.0/23 maxlen: 24
                          101.2.250.0/24 maxlen: 24
                          101.2.252.0/23 maxlen: 24
                          101.2.254.0/23 maxlen: 24
                          175.107.128.0/23 maxlen: 24
                          175.107.130.0/23 maxlen: 24
                          175.107.132.0/23 maxlen: 24
                          175.107.134.0/24 maxlen: 24
                          175.107.136.0/23 maxlen: 24
                          175.107.138.0/23 maxlen: 24
                          175.107.140.0/23 maxlen: 24
                          175.107.142.0/23 maxlen: 24
                          175.107.144.0/23 maxlen: 24
                          175.107.146.0/23 maxlen: 24
                          175.107.148.0/23 maxlen: 24
                          175.107.150.0/23 maxlen: 24
                          175.107.152.0/23 maxlen: 24
                          175.107.154.0/23 maxlen: 24
                          175.107.156.0/23 maxlen: 24
                          175.107.158.0/23 maxlen: 24
                          175.107.160.0/23 maxlen: 24
                          175.107.162.0/23 maxlen: 24
                          175.107.164.0/23 maxlen: 24
                          175.107.166.0/23 maxlen: 24
                          175.107.170.0/23 maxlen: 24
                          175.107.172.0/23 maxlen: 24
                          175.107.174.0/23 maxlen: 24
                          175.107.176.0/23 maxlen: 24
                          175.107.178.0/23 maxlen: 24
                          175.107.184.0/23 maxlen: 24
                          175.107.186.0/23 maxlen: 24
                          175.107.190.0/24 maxlen: 24
                          2400:7aa0:1200::/40 maxlen: 48
                          2400:7aa0:1300::/40 maxlen: 48
                          2400:7aa0:1400::/40 maxlen: 48
                          2400:7aa0:1500::/40 maxlen: 48
                          2400:7aa0:1600::/40 maxlen: 48
                          2400:7aa0:1700::/40 maxlen: 48
                          2400:7aa0:1800::/40 maxlen: 48
                          2400:7aa0:1900::/40 maxlen: 48
                          2400:7aa0:1a00::/40 maxlen: 48
                          2400:7aa0:1b00::/40 maxlen: 48
                          2400:7aa0:1c00::/40 maxlen: 48
                          2400:7aa0:1d00::/40 maxlen: 40
                          2400:7aa0:1e00::/40 maxlen: 48
                          2400:7aa0:1f00::/40 maxlen: 48
                          2400:7aa0:2200::/40 maxlen: 48
                          2400:7aa0:2300::/40 maxlen: 48
                          2400:7aa0:2400::/40 maxlen: 48
                          2400:7aa0:2500::/40 maxlen: 48
                          2400:7aa0:2600::/40 maxlen: 48
                          2400:7aa0:2800::/40 maxlen: 48
                          2400:7aa0:2900::/40 maxlen: 48
                          2400:7aa0:2b00::/40 maxlen: 48
                          2400:7aa0:2c00::/40 maxlen: 48
                          2400:7aa0:2e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jul  9 06:32:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f4066-7a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:36:d7:cc:1b:df:47:0a:0c:9b:fb:53:a8:
                    04:a8:d1:9a:d0:b0:d5:46:b4:13:f5:ff:68:18:05:
                    28:54:78:0c:7f:b1:b9:5e:02:08:39:b8:0c:0b:c4:
                    08:6a:7b:c6:d7:9c:dc:03:e2:d8:4b:10:40:d1:5e:
                    79:04:3f:69:de:c5:44:bb:7b:a2:aa:e9:d4:a4:69:
                    19:49:13:da:e1:8c:0b:c6:90:33:bd:03:d5:10:da:
                    93:74:dd:57:a5:6b:14:f2:cd:95:06:17:bd:7e:cc:
                    74:40:67:02:89:c1:4b:2b:29:63:9f:cf:23:73:17:
                    28:6b:fb:bc:b2:e8:e0:f3:1d:bf:28:c4:29:46:b5:
                    dd:bd:5c:07:01:cd:8a:d3:9b:ea:c4:6a:1c:91:eb:
                    eb:f2:92:08:7c:a0:d9:ed:38:0f:e6:a2:b0:b5:21:
                    1e:58:d5:f7:ee:8a:32:8f:9c:da:e0:d5:a5:c5:fb:
                    67:b4:e6:47:f2:6f:78:ea:ed:34:73:02:30:bf:9d:
                    78:0e:da:bb:30:4e:6f:49:0e:51:3b:af:6c:fc:15:
                    88:15:0f:6a:da:af:d1:ce:30:a5:99:57:26:93:3a:
                    72:72:1a:6f:70:aa:08:0d:32:ea:e8:b7:46:56:ab:
                    d2:cc:d0:94:70:e7:0d:c6:e1:56:ea:5b:1f:01:cb:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:45:AA:84:46:0B:8F:68:A8:41:6E:EF:2A:74:F5:9A:09:19:60:1C
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.192.0-101.2.209.255
                  101.2.214.0-101.2.250.255
                  101.2.252.0/22
                  175.107.128.0-175.107.134.255
                  175.107.136.0-175.107.167.255
                  175.107.170.0-175.107.179.255
                  175.107.184.0/22
                  175.107.190.0/24
                IPv6:
                  2400:7aa0:1200::-2400:7aa0:1fff:ffff:ffff:ffff:ffff:ffff
                  2400:7aa0:2200::-2400:7aa0:26ff:ffff:ffff:ffff:ffff:ffff
                  2400:7aa0:2800::/39
                  2400:7aa0:2b00::-2400:7aa0:2cff:ffff:ffff:ffff:ffff:ffff
                  2400:7aa0:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:44:8d:fc:ec:c2:f6:53:f0:0f:b3:61:57:fd:c7:b7:55:a0:
         97:3e:ec:83:ae:51:f4:48:37:8b:5a:e0:22:3c:81:04:43:b8:
         9f:f3:0d:15:07:af:fc:90:d1:ee:e5:88:e1:78:0d:d1:12:eb:
         41:2c:04:a2:e8:fe:29:0b:84:cd:97:de:6e:17:d2:4a:30:7c:
         b5:8f:b7:a5:3f:f7:97:a7:5c:09:08:bd:7b:13:b2:14:ae:26:
         b6:7c:7e:a5:f9:a1:cc:72:54:2d:2b:64:99:29:99:50:fc:6c:
         a9:24:af:4c:47:1a:fa:e4:f8:e4:14:2d:e7:a1:92:3f:97:0d:
         3b:c7:01:c9:da:52:93:26:44:80:ab:37:29:0b:92:c5:c6:8c:
         b6:b4:87:2c:e8:9f:5e:bb:5f:a2:dd:73:ce:e7:2b:11:ff:90:
         23:4e:f8:c1:d0:f2:1f:a8:a7:2f:f5:99:8f:57:c0:75:5a:e2:
         da:dd:ed:ac:db:f4:46:2d:58:fc:f0:12:3e:ad:a2:6f:17:f4:
         9b:b4:96:f4:d4:54:ec:b1:83:3c:55:e2:59:09:05:e6:4a:28:
         68:00:39:f9:d8:c6:89:5a:74:ac:f4:a1:8e:f2:94:b4:22:b1:
         2f:90:99:a6:4f:64:cd:64:c5:11:61:9e:b3:39:36:45:1c:8e:
         91:05:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:22 2026 by rpki-client