Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
File:                     AEEA30A444C911F0B1847067C4F9AE02.roa (raw, json)
Hash identifier:          dH0ygpV7vVR6WPP93i2YDDYSIOB5Zm2w4tTvZ0XAWas=
Subject key identifier:   DC:80:C5:D3:07:77:C8:5F:DF:C5:D1:33:BF:59:5C:AE:D4:E9:0E:8D
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       075F
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
Signing time:             Thu 27 Aug 2026 21:09:12 +0000
ROA not before:           Thu 27 Aug 2026 21:09:12 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     18190
IP address blocks:        49.157.9.0/24 maxlen: 24
                          49.157.10.0/24 maxlen: 24
                          49.157.11.0/24 maxlen: 24
                          49.157.12.0/24 maxlen: 24
                          49.157.13.0/24 maxlen: 24
                          49.157.16.0/24 maxlen: 24
                          49.157.17.0/24 maxlen: 24
                          49.157.18.0/24 maxlen: 24
                          49.157.19.0/24 maxlen: 24
                          49.157.20.0/24 maxlen: 24
                          49.157.21.0/24 maxlen: 24
                          49.157.22.0/24 maxlen: 24
                          49.157.23.0/24 maxlen: 24
                          49.157.24.0/24 maxlen: 24
                          49.157.25.0/24 maxlen: 24
                          49.157.29.0/24 maxlen: 24
                          49.157.30.0/24 maxlen: 24
                          49.157.31.0/24 maxlen: 24
                          49.157.33.0/24 maxlen: 24
                          49.157.34.0/24 maxlen: 24
                          49.157.35.0/24 maxlen: 24
                          49.157.36.0/24 maxlen: 24
                          49.157.37.0/24 maxlen: 24
                          49.157.38.0/24 maxlen: 24
                          49.157.39.0/24 maxlen: 24
                          49.157.40.0/24 maxlen: 24
                          49.157.41.0/24 maxlen: 24
                          49.157.42.0/24 maxlen: 24
                          49.157.43.0/24 maxlen: 24
                          49.157.44.0/24 maxlen: 24
                          49.157.45.0/24 maxlen: 24
                          49.157.55.0/24 maxlen: 24
                          49.157.56.0/24 maxlen: 24
                          49.157.57.0/24 maxlen: 24
                          49.157.58.0/24 maxlen: 24
                          49.157.59.0/24 maxlen: 24
                          61.28.168.0/24 maxlen: 24
                          61.28.173.0/24 maxlen: 24
                          112.199.73.0/24 maxlen: 24
                          113.61.32.0/24 maxlen: 24
                          113.61.33.0/24 maxlen: 24
                          113.61.34.0/24 maxlen: 24
                          113.61.35.0/24 maxlen: 24
                          113.61.36.0/24 maxlen: 24
                          113.61.38.0/24 maxlen: 24
                          113.61.42.0/24 maxlen: 24
                          113.61.43.0/24 maxlen: 24
                          113.61.44.0/24 maxlen: 24
                          113.61.45.0/24 maxlen: 24
                          113.61.46.0/24 maxlen: 24
                          113.61.47.0/24 maxlen: 24
                          113.61.48.0/24 maxlen: 24
                          113.61.49.0/24 maxlen: 24
                          113.61.50.0/24 maxlen: 24
                          113.61.51.0/24 maxlen: 24
                          113.61.52.0/24 maxlen: 24
                          113.61.53.0/24 maxlen: 24
                          113.61.54.0/24 maxlen: 24
                          113.61.55.0/24 maxlen: 24
                          113.61.56.0/24 maxlen: 24
                          113.61.57.0/24 maxlen: 24
                          113.61.58.0/24 maxlen: 24
                          113.61.59.0/24 maxlen: 24
                          113.61.60.0/24 maxlen: 24
                          113.61.61.0/24 maxlen: 24
                          113.61.62.0/24 maxlen: 24
                          113.61.63.0/24 maxlen: 24
                          115.85.2.0/24 maxlen: 24
                          116.50.137.0/24 maxlen: 24
                          116.50.138.0/24 maxlen: 24
                          116.50.139.0/24 maxlen: 24
                          116.50.140.0/24 maxlen: 24
                          116.50.142.0/24 maxlen: 24
                          116.50.143.0/24 maxlen: 24
                          116.50.144.0/24 maxlen: 24
                          116.50.145.0/24 maxlen: 24
                          116.50.183.0/24 maxlen: 24
                          116.50.238.0/24 maxlen: 24
                          117.104.240.0/24 maxlen: 24
                          117.104.241.0/24 maxlen: 24
                          117.104.242.0/24 maxlen: 24
                          117.104.243.0/24 maxlen: 24
                          117.104.244.0/24 maxlen: 24
                          117.104.245.0/24 maxlen: 24
                          117.104.246.0/24 maxlen: 24
                          117.104.247.0/24 maxlen: 24
                          117.104.248.0/24 maxlen: 24
                          117.104.249.0/24 maxlen: 24
                          117.104.250.0/24 maxlen: 24
                          117.104.251.0/24 maxlen: 24
                          117.104.252.0/24 maxlen: 24
                          117.104.253.0/24 maxlen: 24
                          117.104.254.0/24 maxlen: 24
                          180.232.5.0/24 maxlen: 24
                          180.232.6.0/24 maxlen: 24
                          180.232.7.0/24 maxlen: 24
                          180.232.8.0/24 maxlen: 24
                          180.232.9.0/24 maxlen: 24
                          180.232.15.0/24 maxlen: 24
                          180.232.16.0/24 maxlen: 24
                          180.232.17.0/24 maxlen: 24
                          180.232.18.0/24 maxlen: 24
                          180.232.19.0/24 maxlen: 24
                          180.232.113.0/24 maxlen: 24
                          180.232.114.0/24 maxlen: 24
                          180.232.115.0/24 maxlen: 24
                          180.232.116.0/24 maxlen: 24
                          180.232.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Aug 27 21:09:12 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a90a777-844b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:65:45:15:b5:b5:1f:26:f4:80:59:43:26:
                    7f:a8:f2:a1:61:a2:4b:7e:13:43:2a:c5:12:3a:e3:
                    f7:7e:60:1d:88:2f:1b:c4:cd:e4:d4:a9:00:cf:8f:
                    5f:ad:e7:02:02:2f:20:a1:dc:6f:f3:04:85:c6:52:
                    70:f7:03:62:5e:3f:cd:ec:a2:b7:7e:86:91:8f:19:
                    4f:dd:47:b3:ae:a8:52:b6:cb:44:c5:cd:02:64:65:
                    87:39:37:38:32:63:04:14:b0:06:5d:12:74:ca:0e:
                    d7:53:12:3f:e8:fd:01:3b:cf:08:06:0e:4c:b1:d2:
                    4f:51:6e:2f:69:95:3b:ff:08:47:c2:7b:8c:dd:9d:
                    f0:32:e8:e6:29:3d:80:6a:58:33:92:33:d5:f4:44:
                    3c:cb:41:d2:20:45:4b:f5:41:c3:d3:34:0e:1f:61:
                    1c:0e:e3:a6:c4:0d:23:57:74:36:c3:f4:a8:cc:88:
                    a8:50:7a:ac:21:50:a5:45:52:8b:20:02:8b:74:3e:
                    2b:95:dc:d7:32:26:2c:9e:60:b7:66:b6:29:26:fc:
                    02:d4:30:cb:95:f1:40:0c:2e:4a:f4:a5:66:95:fe:
                    e2:53:6e:e8:fd:cd:9d:42:fd:3d:7b:3b:e8:3c:4f:
                    2b:14:5d:c7:ee:13:e4:62:70:7c:27:c5:85:c2:6d:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:C5:D3:07:77:C8:5F:DF:C5:D1:33:BF:59:5C:AE:D4:E9:0E:8D
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.157.9.0-49.157.13.255
                  49.157.16.0-49.157.25.255
                  49.157.29.0-49.157.31.255
                  49.157.33.0-49.157.45.255
                  49.157.55.0-49.157.59.255
                  61.28.168.0/24
                  61.28.173.0/24
                  112.199.73.0/24
                  113.61.32.0-113.61.36.255
                  113.61.38.0/24
                  113.61.42.0-113.61.63.255
                  115.85.2.0/24
                  116.50.137.0-116.50.140.255
                  116.50.142.0-116.50.145.255
                  116.50.183.0/24
                  116.50.238.0/24
                  117.104.240.0-117.104.254.255
                  180.232.5.0-180.232.9.255
                  180.232.15.0-180.232.19.255
                  180.232.113.0-180.232.117.255

    Signature Algorithm: sha256WithRSAEncryption
         74:94:1e:fb:98:d5:1b:01:2d:f9:b7:29:41:ee:39:55:66:5a:
         49:49:3d:ab:ed:d7:32:ea:35:2a:43:16:0c:27:57:db:ad:39:
         1e:ca:3b:2e:9f:dd:1d:df:cc:b8:8a:b1:b7:ed:d5:63:2f:ec:
         6a:9c:c8:7d:a8:aa:21:e1:d3:04:95:1e:87:a0:35:97:84:cf:
         42:18:29:dc:35:44:f1:ec:bd:28:37:b6:10:e6:96:82:6e:68:
         d6:da:11:bf:e7:41:9d:60:b0:2d:2b:bb:94:f9:77:bb:05:7c:
         67:00:b7:2f:cf:0c:88:02:84:f7:69:35:08:ea:61:f8:d8:57:
         63:c7:8c:10:8e:e6:dc:a0:fc:a7:1e:0f:de:af:dc:7c:b0:20:
         49:c8:0f:ca:c8:9e:1e:a9:d6:ed:34:6b:f2:6a:10:c4:d9:b1:
         1a:e0:3d:4b:3b:06:c4:bc:59:52:84:0f:5d:79:8b:e9:59:e9:
         bf:a7:cc:87:2b:1a:03:b7:d3:7d:a7:4d:c6:3d:fa:fa:e7:3b:
         d1:74:a4:44:68:a6:d1:ae:95:37:54:f3:3c:4c:f8:d4:ff:4d:
         c2:62:32:46:19:0b:af:5c:fe:88:1f:06:7b:f0:2a:cf:a2:3a:
         71:ca:53:e1:e9:a7:2c:79:e3:51:b2:af:e5:4f:a3:ba:ba:b9:
         19:1a:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:40:53 2026 by rpki-client