Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/DA947ECEA06911F181CDFB264711F970.roa
File:                     DA947ECEA06911F181CDFB264711F970.roa (raw, json)
Hash identifier:          socQ5hCJFo3idYhgrRnI7V6EPbZ3CEB97dO26Y9A/xI=
Subject key identifier:   4A:00:04:8D:60:4A:F0:83:00:37:9A:E1:58:06:38:07:A9:BF:C3:B9
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       0195
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/DA947ECEA06911F181CDFB264711F970.roa
Signing time:             Sat 29 Aug 2026 04:55:24 +0000
ROA not before:           Sat 29 Aug 2026 04:55:24 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     17439
IP address blocks:        103.30.152.0/23 maxlen: 24
                          103.30.154.0/24 maxlen: 24
                          103.30.155.0/24 maxlen: 24
                          123.108.32.0/19 maxlen: 24
                          124.153.64.0/19 maxlen: 24
                          124.153.96.0/19 maxlen: 24
                          180.179.0.0/21 maxlen: 24
                          180.179.8.0/21 maxlen: 24
                          180.179.16.0/20 maxlen: 24
                          180.179.32.0/19 maxlen: 24
                          180.179.64.0/19 maxlen: 24
                          180.179.96.0/19 maxlen: 24
                          180.179.128.0/19 maxlen: 20
                          180.179.128.0/24 maxlen: 24
                          180.179.129.0/24 maxlen: 24
                          180.179.130.0/24 maxlen: 24
                          180.179.132.0/24 maxlen: 24
                          180.179.133.0/24 maxlen: 24
                          180.179.134.0/24 maxlen: 24
                          180.179.135.0/24 maxlen: 24
                          180.179.136.0/23 maxlen: 24
                          180.179.138.0/24 maxlen: 24
                          180.179.139.0/24 maxlen: 24
                          180.179.140.0/23 maxlen: 24
                          180.179.142.0/24 maxlen: 24
                          180.179.143.0/24 maxlen: 24
                          180.179.144.0/24 maxlen: 24
                          180.179.145.0/24 maxlen: 24
                          180.179.146.0/24 maxlen: 24
                          180.179.149.0/24 maxlen: 24
                          180.179.151.0/24 maxlen: 24
                          180.179.153.0/24 maxlen: 24
                          180.179.154.0/24 maxlen: 24
                          180.179.155.0/24 maxlen: 24
                          180.179.156.0/24 maxlen: 24
                          180.179.157.0/24 maxlen: 24
                          180.179.158.0/24 maxlen: 24
                          180.179.159.0/24 maxlen: 24
                          180.179.160.0/19 maxlen: 20
                          180.179.160.0/24 maxlen: 24
                          180.179.161.0/24 maxlen: 24
                          180.179.162.0/23 maxlen: 23
                          180.179.164.0/24 maxlen: 24
                          180.179.165.0/24 maxlen: 24
                          180.179.166.0/24 maxlen: 24
                          180.179.167.0/24 maxlen: 24
                          180.179.168.0/24 maxlen: 24
                          180.179.169.0/24 maxlen: 24
                          180.179.170.0/23 maxlen: 23
                          180.179.172.0/24 maxlen: 24
                          180.179.173.0/24 maxlen: 24
                          180.179.174.0/24 maxlen: 24
                          180.179.175.0/24 maxlen: 24
                          180.179.177.0/24 maxlen: 24
                          180.179.178.0/24 maxlen: 24
                          180.179.179.0/24 maxlen: 24
                          180.179.180.0/24 maxlen: 24
                          180.179.182.0/23 maxlen: 23
                          180.179.184.0/24 maxlen: 24
                          180.179.185.0/24 maxlen: 24
                          180.179.186.0/24 maxlen: 24
                          180.179.192.0/19 maxlen: 20
                          180.179.192.0/22 maxlen: 22
                          180.179.192.0/24 maxlen: 24
                          180.179.193.0/24 maxlen: 24
                          180.179.194.0/24 maxlen: 24
                          180.179.195.0/24 maxlen: 24
                          180.179.196.0/22 maxlen: 22
                          180.179.196.0/24 maxlen: 24
                          180.179.197.0/24 maxlen: 24
                          180.179.198.0/24 maxlen: 24
                          180.179.199.0/24 maxlen: 24
                          180.179.200.0/22 maxlen: 22
                          180.179.200.0/24 maxlen: 24
                          180.179.201.0/24 maxlen: 24
                          180.179.202.0/24 maxlen: 24
                          180.179.203.0/24 maxlen: 24
                          180.179.204.0/22 maxlen: 23
                          180.179.206.0/23 maxlen: 24
                          180.179.208.0/24 maxlen: 24
                          180.179.209.0/24 maxlen: 24
                          180.179.211.0/24 maxlen: 24
                          180.179.212.0/24 maxlen: 24
                          180.179.213.0/24 maxlen: 24
                          180.179.214.0/24 maxlen: 24
                          180.179.215.0/24 maxlen: 24
                          180.179.216.0/24 maxlen: 24
                          180.179.217.0/24 maxlen: 24
                          180.179.218.0/24 maxlen: 24
                          180.179.219.0/24 maxlen: 24
                          180.179.220.0/24 maxlen: 24
                          180.179.221.0/24 maxlen: 24
                          180.179.222.0/24 maxlen: 24
                          180.179.223.0/24 maxlen: 24
                          180.179.224.0/19 maxlen: 20
                          180.179.224.0/23 maxlen: 23
                          180.179.224.0/24 maxlen: 24
                          180.179.226.0/24 maxlen: 24
                          180.179.227.0/24 maxlen: 24
                          180.179.228.0/24 maxlen: 24
                          180.179.229.0/24 maxlen: 24
                          180.179.230.0/24 maxlen: 24
                          180.179.231.0/24 maxlen: 24
                          180.179.232.0/24 maxlen: 24
                          180.179.233.0/24 maxlen: 24
                          180.179.234.0/24 maxlen: 24
                          180.179.235.0/24 maxlen: 24
                          180.179.236.0/24 maxlen: 24
                          180.179.237.0/24 maxlen: 24
                          180.179.239.0/24 maxlen: 24
                          180.179.240.0/20 maxlen: 21
                          180.179.240.0/24 maxlen: 24
                          180.179.242.0/24 maxlen: 24
                          180.179.243.0/24 maxlen: 24
                          180.179.244.0/24 maxlen: 24
                          180.179.245.0/24 maxlen: 24
                          180.179.246.0/24 maxlen: 24
                          180.179.247.0/24 maxlen: 24
                          180.179.248.0/24 maxlen: 24
                          180.179.249.0/24 maxlen: 24
                          180.179.253.0/24 maxlen: 24
                          180.179.255.0/24 maxlen: 24
                          202.87.32.0/19 maxlen: 24
                          2401:8800::/40 maxlen: 40
                          2401:8800:200::/40 maxlen: 40
                          2401:8800:400::/40 maxlen: 40
                          2401:8800:47f::/48 maxlen: 48
                          2401:8800:600::/40 maxlen: 40
                          2401:8800:800::/40 maxlen: 40
                          2401:8800:a00::/40 maxlen: 40
                          2401:8800:a00::/48 maxlen: 48
                          2401:8800:a03::/48 maxlen: 48
                          2401:8800:a50::/48 maxlen: 48
                          2401:8800:c00::/40 maxlen: 40
                          2401:8800:c05::/48 maxlen: 48
                          2401:8800:e00::/40 maxlen: 40
                          2401:8800:1000::/40 maxlen: 40
                          2401:8800:1100::/40 maxlen: 40
                          2401:8800:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
        Validity
            Not Before: Aug 29 04:55:24 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a92663c-0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:f5:70:6f:93:2e:d9:b4:73:99:c6:e3:d0:
                    48:56:68:a1:d6:e0:e3:46:a4:c2:6e:9a:43:91:8e:
                    49:ef:2d:14:19:50:94:d4:c3:49:8b:9a:c1:59:fc:
                    2d:1c:68:93:4e:7f:95:f6:79:1a:f7:8b:03:8b:2c:
                    e1:c3:cf:7c:c6:51:96:0c:50:8b:0e:60:a2:6c:c6:
                    2c:a8:af:2f:dc:e1:45:4d:f0:b0:d2:78:52:7e:b5:
                    f5:86:e2:a8:ed:d2:31:d1:51:44:25:7e:44:03:9e:
                    7a:65:a5:11:da:78:2c:70:cf:c0:e6:2e:6f:18:b4:
                    ae:0e:46:a7:83:62:55:3e:a5:f4:d7:8d:f1:49:e6:
                    f7:8d:bc:cf:40:6f:1a:a5:51:78:06:da:40:11:31:
                    c7:82:8a:b4:5f:57:5e:16:63:d3:a2:81:31:b1:ff:
                    20:1c:66:73:db:a3:ed:6d:b6:19:74:86:9d:a9:25:
                    b3:03:cc:44:d0:fd:51:ba:5b:c6:07:06:94:20:a6:
                    bc:e3:f0:d9:ea:17:9f:db:4f:72:0d:d1:ab:d0:a3:
                    cb:72:3b:68:93:ec:74:c2:9d:b8:71:2f:7f:a2:94:
                    07:38:17:ec:b6:2c:80:5d:0c:79:08:6c:11:d0:51:
                    10:79:d5:3c:b6:e9:5d:e7:d7:4b:0e:2b:44:62:c1:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:04:8D:60:4A:F0:83:00:37:9A:E1:58:06:38:07:A9:BF:C3:B9
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/DA947ECEA06911F181CDFB264711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.152.0/22
                  123.108.32.0/19
                  124.153.64.0/18
                  180.179.0.0/16
                  202.87.32.0/19
                IPv6:
                  2401:8800::/40
                  2401:8800:200::/40
                  2401:8800:400::/40
                  2401:8800:600::/40
                  2401:8800:800::/40
                  2401:8800:a00::/40
                  2401:8800:c00::/40
                  2401:8800:e00::/40
                  2401:8800:1000::-2401:8800:12ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6f:5a:5a:33:30:ce:64:85:a5:9c:d9:60:40:80:25:97:dd:5c:
         80:3b:ae:90:2f:25:bd:01:94:2c:98:c3:1b:74:b2:dc:48:df:
         0d:e7:d0:99:da:11:bd:f0:8d:9b:d9:60:12:37:1f:71:28:07:
         b7:8d:6c:d5:c0:ff:97:af:1e:08:06:bc:33:22:56:19:9d:ad:
         e2:ac:9e:2b:18:b8:a3:7c:42:45:d8:9e:e7:34:bf:f4:1f:05:
         bc:23:75:f5:46:8b:b0:db:9f:89:d6:4f:53:c7:44:55:43:8d:
         fc:dc:a2:9a:94:88:d0:ed:9d:6d:db:10:f3:c5:de:ff:b1:1d:
         15:73:74:81:48:9e:cf:17:73:83:55:8d:61:d1:6b:d4:f6:77:
         b5:bf:5e:cc:43:98:ff:af:10:ab:12:65:7c:5f:e5:8a:bd:ae:
         ff:12:a6:1c:6c:15:db:17:1b:40:ab:11:5a:43:67:b5:91:07:
         5e:10:9b:1d:0c:ce:cd:80:51:2c:01:9a:5e:23:f5:98:9e:1f:
         d9:c4:f5:9d:87:17:f0:3b:4f:86:43:b6:4f:58:29:91:eb:b5:
         68:f6:83:cb:24:d1:05:57:0e:43:f9:26:e1:9a:88:91:84:bf:
         a2:98:85:d1:2c:e7:b9:43:5f:a8:42:1b:c5:3b:f2:a0:42:fa:
         28:50:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:33 2026 by rpki-client