Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
File:                     54B32544D84711EF81BD1E0BC4F9AE02.roa (raw, json)
Hash identifier:          gP6gufX38UElSO8C26tQ9wbRqOVT/gY7F2DssjnF8Go=
Subject key identifier:   87:F8:39:69:31:FD:C7:D9:45:9A:F8:3E:D8:E6:3F:DF:B7:79:2F:E3
Certificate issuer:       /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial:       0C7E
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
Signing time:             Thu 02 Apr 2026 19:23:09 +0000
ROA not before:           Thu 02 Apr 2026 19:23:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     38442
IP address blocks:        27.123.128.0/18 maxlen: 24
                          103.244.228.0/22 maxlen: 24
                          183.81.128.0/20 maxlen: 24
                          2401:5100::/32 maxlen: 40
                          2401:5100:300::/48 maxlen: 48
                          2401:5100:301::/48 maxlen: 48
                          2401:5100:302::/48 maxlen: 48
                          2401:5100:303::/48 maxlen: 48
                          2401:5100:308::/48 maxlen: 48
                          2401:5100:309::/48 maxlen: 48
                          2401:5100:30a::/48 maxlen: 48
                          2401:5100:30b::/48 maxlen: 48
                          2401:5100:2300::/46 maxlen: 46
                          2401:5100:2300::/48 maxlen: 48
                          2401:5100:2301::/48 maxlen: 48
                          2401:5100:2302::/48 maxlen: 48
                          2401:5100:2303::/48 maxlen: 48
                          2401:5100:2308::/48 maxlen: 48
                          2401:5100:2309::/48 maxlen: 48
                          2401:5100:230a::/48 maxlen: 48
                          2401:5100:230b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
                          rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3198 (0xc7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
        Validity
            Not Before: Apr  2 19:23:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cec21d-5062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:b2:f3:61:9c:f1:10:7f:bd:3a:3c:19:86:
                    ba:a1:90:eb:18:c8:b2:3f:78:b2:fc:d6:cc:8e:3e:
                    20:46:f3:48:c8:fa:05:10:3f:c9:39:37:10:b4:b8:
                    a3:d8:c4:51:6b:35:78:79:06:a1:5c:bd:87:b9:2a:
                    d0:ac:e1:80:e3:03:bd:78:eb:60:dc:e3:06:c1:99:
                    39:da:ff:ed:aa:00:12:8f:96:87:78:93:28:be:dc:
                    fe:68:33:d2:df:d6:d1:c4:2e:60:9a:ed:15:81:22:
                    3a:6d:27:8a:c4:a8:de:5b:23:09:6a:52:43:9e:a0:
                    8a:e7:ed:a9:a3:0b:d2:35:47:4b:db:1e:17:ff:fc:
                    fb:23:9a:80:c7:f0:aa:45:03:08:61:57:44:41:13:
                    d4:2f:7b:fd:dc:fc:e4:12:12:ab:76:70:ba:26:15:
                    82:61:3e:aa:ac:fa:44:fe:99:7d:8d:94:39:7c:3b:
                    77:59:10:71:15:14:e8:81:7b:5b:a8:23:05:5c:30:
                    2b:54:04:97:0a:f8:2e:96:24:18:c9:4c:03:6b:6a:
                    e1:74:99:18:87:10:58:e9:8d:60:ef:b8:cc:ef:90:
                    d5:19:97:2a:bb:6d:db:7a:33:69:0a:d5:85:d6:6a:
                    70:c1:d2:7c:fc:1a:ab:05:41:d0:61:4f:7b:83:5a:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F8:39:69:31:FD:C7:D9:45:9A:F8:3E:D8:E6:3F:DF:B7:79:2F:E3
            X509v3 Authority Key Identifier:
                keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.128.0/18
                  103.244.228.0/22
                  183.81.128.0/20
                IPv6:
                  2401:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:c6:16:0f:f1:d0:99:d4:3f:65:e6:16:af:9f:99:26:58:
         5a:81:30:b2:c7:44:4f:0e:e2:92:6f:28:01:00:e1:13:3a:d3:
         25:ce:c9:ad:64:b9:a4:eb:53:2a:c3:50:a7:af:44:a6:83:ac:
         15:22:23:93:31:82:c3:2b:98:31:e1:3a:fe:7d:27:4c:67:e2:
         9c:00:c9:8a:06:24:01:12:dd:9f:b1:cc:aa:68:60:36:a0:61:
         56:ca:fc:b5:15:8b:57:65:31:72:49:0e:34:90:83:44:4e:0d:
         04:57:d7:ce:8c:7d:2d:26:42:8c:a4:dc:45:8c:c9:e6:8e:a4:
         0c:f4:e9:bd:36:93:4d:71:de:fc:6b:72:bd:2d:ac:46:8e:56:
         3b:f0:a9:1b:4c:85:66:7f:b9:fd:1e:49:40:2b:7f:3d:a6:73:
         8a:ea:70:dc:70:15:41:65:a3:45:ae:61:7c:cc:f4:91:98:02:
         be:98:d8:3a:41:68:7e:b3:70:60:54:6b:3e:ae:f1:83:4b:54:
         06:ce:09:97:47:8c:03:28:6f:4d:9d:72:34:e2:44:bb:42:d0:
         82:c5:1e:3d:d9:81:f7:90:37:e2:13:68:95:21:f0:59:54:01:
         14:84:0c:90:86:63:67:98:f7:37:1a:75:d5:85:a2:8d:8c:0a:
         42:82:8e:a4
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE5MjYxMTAvBgNVBAUTKDZGMjNCQjRCRTgyRjM0QjBFNzQ2MTI3OTUyMEM3Mzk3
N0FCMUQyM0MwHhcNMjYwNDAyMTkyMzA5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNlYzIxZC01MDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt02y82Gc8RB/vTo8GYa6oZDrGMiyP3iy/NbMjj4gRvNIyPoFED/JOTcQtLij
2MRRazV4eQahXL2HuSrQrOGA4wO9eOtg3OMGwZk52v/tqgASj5aHeJMovtz+aDPS
39bRxC5gmu0VgSI6bSeKxKjeWyMJalJDnqCK5+2powvSNUdL2x4X//z7I5qAx/Cq
RQMIYVdEQRPUL3v93PzkEhKrdnC6JhWCYT6qrPpE/pl9jZQ5fDt3WRBxFRTogXtb
qCMFXDArVASXCvguliQYyUwDa2rhdJkYhxBY6Y1g77jM75DVGZcqu23bejNpCtWF
1mpwwdJ8/BqrBUHQYU97g1ruEwIDAQABo4ICezCCAncwHQYDVR0OBBYEFIf4OWkx
/cfZRZr4PtjmP9+3eS/jMB8GA1UdIwQYMBaAFG8ju0voLzSw50YSeVIMc5d6sdI8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTkyNi83QzZBMEU0NDIx
RkYxMUVBQTcyMzJBM0RDNEY5QUUwMi9ieU83Uy1ndk5MRG5SaEo1VWd4emwzcXgw
ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J5TzdTLWd2TkxEblJoSjVVZ3h6bDNxeDBqdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTE5MjYvN0M2QTBFNDQyMUZGMTFFQUE3MjMyQTNEQzRGOUFFMDIvNTRCMzI1NDRE
ODQ3MTFFRjgxQkQxRTBCQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQGG3uAAwQCZ/TkAwQEt1GAMA0EAgACMAcDBQAkAVEAMA0GCSqGSIb3
DQEBCwUAA4IBAQCY/cYWD/HQmdQ/ZeYWr5+ZJlhagTCyx0RPDuKSbygBAOETOtMl
zsmtZLmk61Mqw1Cnr0Smg6wVIiOTMYLDK5gx4Tr+fSdMZ+KcAMmKBiQBEt2fscyq
aGA2oGFWyvy1FYtXZTFySQ40kINETg0EV9fOjH0tJkKMpNxFjMnmjqQM9Om9NpNN
cd78a3K9LaxGjlY78KkbTIVmf7n9HklAK389pnOK6nDccBVBZaNFrmF8zPSRmAK+
mNg6QWh+s3BgVGs+rvGDS1QGzgmXR4wDKG9NnXI04kS7QtCCxR492YH3kDfiE2iV
IfBZVAEUhAyQhmNnmPc3GnXVhaKNjApCgo6k
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:31:25 2026 by rpki-client