Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC20C79663DD11F1A8F4A29A8647A888.roa
File:                     AC20C79663DD11F1A8F4A29A8647A888.roa (raw, json)
Hash identifier:          iqHrEZCcn4iOrmIl6xU/5IkvDTh+MMY2cMGXFBRoFRY=
Subject key identifier:   8F:D0:84:C8:49:3C:E5:C3:81:A1:B0:F9:4E:E3:08:F3:AD:9B:08:60
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3BBC
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC20C79663DD11F1A8F4A29A8647A888.roa
Signing time:             Tue 09 Jun 2026 08:36:29 +0000
ROA not before:           Tue 09 Jun 2026 08:36:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38710
IP address blocks:        111.88.233.0/24 maxlen: 24
                          111.88.238.0/24 maxlen: 24
                          115.186.13.0/24 maxlen: 24
                          115.186.17.0/24 maxlen: 24
                          115.186.23.0/24 maxlen: 24
                          115.186.25.0/24 maxlen: 24
                          115.186.30.0/24 maxlen: 24
                          115.186.31.0/24 maxlen: 24
                          115.186.32.0/24 maxlen: 24
                          115.186.33.0/24 maxlen: 24
                          115.186.34.0/24 maxlen: 24
                          115.186.35.0/24 maxlen: 24
                          115.186.38.0/24 maxlen: 24
                          115.186.39.0/24 maxlen: 24
                          115.186.40.0/24 maxlen: 24
                          115.186.56.0/24 maxlen: 24
                          115.186.57.0/24 maxlen: 24
                          115.186.58.0/24 maxlen: 24
                          115.186.59.0/24 maxlen: 24
                          115.186.60.0/24 maxlen: 24
                          115.186.61.0/24 maxlen: 24
                          115.186.90.0/24 maxlen: 24
                          115.186.96.0/24 maxlen: 24
                          115.186.98.0/24 maxlen: 24
                          115.186.101.0/24 maxlen: 24
                          115.186.106.0/23 maxlen: 24
                          115.186.108.0/22 maxlen: 24
                          115.186.112.0/23 maxlen: 24
                          115.186.115.0/24 maxlen: 24
                          115.186.121.0/24 maxlen: 24
                          115.186.126.0/24 maxlen: 24
                          117.102.7.0/24 maxlen: 24
                          117.102.8.0/23 maxlen: 24
                          117.102.16.0/24 maxlen: 24
                          117.102.17.0/24 maxlen: 24
                          117.102.18.0/23 maxlen: 24
                          117.102.24.0/24 maxlen: 24
                          117.102.25.0/24 maxlen: 24
                          117.102.26.0/24 maxlen: 24
                          117.102.28.0/24 maxlen: 24
                          117.102.32.0/24 maxlen: 24
                          117.102.33.0/24 maxlen: 24
                          117.102.34.0/24 maxlen: 24
                          117.102.35.0/24 maxlen: 24
                          117.102.36.0/24 maxlen: 24
                          117.102.37.0/24 maxlen: 24
                          117.102.38.0/24 maxlen: 24
                          117.102.39.0/24 maxlen: 24
                          117.102.40.0/24 maxlen: 24
                          117.102.41.0/24 maxlen: 24
                          117.102.42.0/24 maxlen: 24
                          117.102.43.0/24 maxlen: 24
                          117.102.44.0/24 maxlen: 24
                          117.102.45.0/24 maxlen: 24
                          117.102.46.0/24 maxlen: 24
                          117.102.47.0/24 maxlen: 24
                          203.81.230.0/24 maxlen: 24
                          203.81.239.0/24 maxlen: 24
                          2406:7000::/32 maxlen: 32
                          2406:7000::/48 maxlen: 48
                          2406:7000:1::/48 maxlen: 48
                          2406:7000:2::/48 maxlen: 48
                          2406:7000:3::/48 maxlen: 48
                          2406:7000:4::/48 maxlen: 48
                          2406:7000:5::/48 maxlen: 48
                          2406:7000:6::/48 maxlen: 48
                          2406:7000:7::/48 maxlen: 48
                          2406:7000:8::/48 maxlen: 48
                          2406:7000:9::/48 maxlen: 48
                          2406:7000:a::/48 maxlen: 48
                          2406:7000:b::/48 maxlen: 48
                          2406:7000:c::/48 maxlen: 48
                          2406:7000:d::/48 maxlen: 48
                          2406:7000:e::/48 maxlen: 48
                          2406:7000:f::/48 maxlen: 48
                          2406:7000:10::/48 maxlen: 48
                          2406:7000:11::/48 maxlen: 56
                          2406:7000:12::/48 maxlen: 48
                          2406:7000:13::/48 maxlen: 48
                          2406:7000:14::/48 maxlen: 48
                          2406:7000:15::/48 maxlen: 48
                          2406:7000:16::/48 maxlen: 48
                          2406:7000:17::/48 maxlen: 48
                          2406:7000:18::/48 maxlen: 48
                          2406:7000:19::/48 maxlen: 48
                          2406:7000:1a::/48 maxlen: 48
                          2406:7000:1b::/48 maxlen: 48
                          2406:7000:1c::/48 maxlen: 48
                          2406:7000:1d::/48 maxlen: 48
                          2406:7000:1e::/48 maxlen: 48
                          2406:7000:1f::/48 maxlen: 48
                          2406:7000:20::/48 maxlen: 48
                          2406:7000:21::/48 maxlen: 48
                          2406:7000:22::/48 maxlen: 48
                          2406:7000:23::/48 maxlen: 48
                          2406:7000:24::/48 maxlen: 48
                          2406:7000:25::/48 maxlen: 48
                          2406:7000:26::/48 maxlen: 48
                          2406:7000:27::/48 maxlen: 48
                          2406:7000:28::/48 maxlen: 48
                          2406:7000:29::/48 maxlen: 48
                          2406:7000:2a::/48 maxlen: 48
                          2406:7000:2b::/48 maxlen: 48
                          2406:7000:2c::/48 maxlen: 48
                          2406:7000:2d::/48 maxlen: 48
                          2406:7000:2e::/48 maxlen: 48
                          2406:7000:2f::/48 maxlen: 48
                          2406:7000:30::/48 maxlen: 48
                          2406:7000:31::/48 maxlen: 48
                          2406:7000:32::/48 maxlen: 48
                          2406:7000:33::/48 maxlen: 48
                          2406:7000:34::/48 maxlen: 48
                          2406:7000:35::/48 maxlen: 48
                          2406:7000:36::/48 maxlen: 48
                          2406:7000:37::/48 maxlen: 48
                          2406:7000:38::/48 maxlen: 48
                          2406:7000:39::/48 maxlen: 48
                          2406:7000:3a::/48 maxlen: 48
                          2406:7000:3b::/48 maxlen: 48
                          2406:7000:3c::/48 maxlen: 48
                          2406:7000:3d::/48 maxlen: 48
                          2406:7000:3e::/48 maxlen: 48
                          2406:7000:3f::/48 maxlen: 48
                          2406:7000:40::/48 maxlen: 48
                          2406:7000:41::/48 maxlen: 48
                          2406:7000:42::/48 maxlen: 48
                          2406:7000:43::/48 maxlen: 48
                          2406:7000:44::/48 maxlen: 48
                          2406:7000:45::/48 maxlen: 48
                          2406:7000:46::/48 maxlen: 48
                          2406:7000:47::/48 maxlen: 48
                          2406:7000:48::/48 maxlen: 48
                          2406:7000:49::/48 maxlen: 48
                          2406:7000:4a::/48 maxlen: 48
                          2406:7000:4b::/48 maxlen: 48
                          2406:7000:4c::/48 maxlen: 48
                          2406:7000:4d::/48 maxlen: 48
                          2406:7000:4e::/48 maxlen: 48
                          2406:7000:4f::/48 maxlen: 48
                          2406:7000:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 14:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15292 (0x3bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jun  9 08:36:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a27d08c-f03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:09:d5:cf:8c:90:8a:64:91:32:e8:6f:d2:3b:
                    4b:d3:79:58:90:2c:c2:61:57:6c:76:7a:20:f0:29:
                    98:7b:da:fe:18:e8:98:c4:62:bc:eb:36:01:e0:29:
                    ae:33:dc:18:89:00:03:65:63:88:25:8c:ca:cb:1a:
                    d0:78:3c:c7:d8:7e:79:a4:12:74:f7:b0:09:5f:e1:
                    38:40:b2:aa:89:51:55:a3:c7:98:8f:91:a9:fa:06:
                    d1:06:df:f6:f9:17:8c:98:95:70:b9:82:9f:88:91:
                    83:df:57:51:11:56:07:08:0a:c1:dd:02:35:14:15:
                    e2:e9:a6:29:7e:19:ad:c5:e7:9f:99:62:75:91:6b:
                    43:28:14:d0:d3:59:0c:0c:68:b9:ac:73:49:58:b1:
                    35:5c:f1:ff:19:f3:36:39:55:6b:82:b1:6d:ad:27:
                    ca:2a:2b:49:d5:a2:fa:3b:6f:af:c8:b9:96:68:71:
                    37:3c:1e:bf:4c:d9:41:b4:72:12:4e:ba:22:2e:23:
                    96:fd:75:7c:5e:fe:a7:0a:79:4d:62:f7:ba:5a:49:
                    ab:fb:38:fa:c3:43:ea:db:c3:33:bc:a4:63:fe:0c:
                    12:be:a1:92:62:ea:0f:26:fc:3e:49:e7:e3:51:9f:
                    52:b4:20:3e:da:f4:e0:05:82:5a:34:71:e8:52:b7:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:84:C8:49:3C:E5:C3:81:A1:B0:F9:4E:E3:08:F3:AD:9B:08:60
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC20C79663DD11F1A8F4A29A8647A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.233.0/24
                  111.88.238.0/24
                  115.186.13.0/24
                  115.186.17.0/24
                  115.186.23.0/24
                  115.186.25.0/24
                  115.186.30.0-115.186.35.255
                  115.186.38.0-115.186.40.255
                  115.186.56.0-115.186.61.255
                  115.186.90.0/24
                  115.186.96.0/24
                  115.186.98.0/24
                  115.186.101.0/24
                  115.186.106.0-115.186.113.255
                  115.186.115.0/24
                  115.186.121.0/24
                  115.186.126.0/24
                  117.102.7.0-117.102.9.255
                  117.102.16.0/22
                  117.102.24.0-117.102.26.255
                  117.102.28.0/24
                  117.102.32.0/20
                  203.81.230.0/24
                  203.81.239.0/24
                IPv6:
                  2406:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:90:e7:0e:66:39:78:7c:f2:bc:a8:8c:d1:74:a3:57:92:
         cb:9c:60:2d:e3:e5:68:a6:8a:0e:42:ec:77:55:e8:a5:5e:45:
         be:9a:0e:a5:ee:dd:00:12:3f:3b:90:b2:f8:a4:5b:0c:a7:f3:
         00:07:61:49:b5:b1:e8:f4:85:69:73:a4:f8:21:8a:3e:0e:83:
         27:82:f8:4d:f7:92:37:eb:c3:20:9d:4e:51:93:ef:7e:99:1c:
         18:09:52:3d:b6:56:80:7d:5a:e3:4f:c9:68:7f:75:27:82:08:
         b7:82:3b:31:48:28:33:72:d2:ff:d0:c1:63:b0:3c:1a:ba:61:
         a0:b8:7e:ed:be:bf:4e:18:a3:39:a1:8a:6f:76:0f:39:15:e4:
         22:d1:54:88:2d:1f:55:9f:e2:72:e8:ac:9d:85:fc:8a:31:82:
         35:6a:d9:cc:8f:6d:a1:5c:77:79:31:17:ab:60:a6:83:16:bf:
         f0:ae:58:68:cd:d7:7e:0c:fb:61:0a:fc:34:03:01:82:59:57:
         eb:58:82:12:60:d5:23:10:04:30:8b:81:3a:54:ea:04:60:d0:
         b5:2d:c6:4d:c0:6a:e8:e6:72:bb:6e:dc:87:43:86:0c:a3:9d:
         77:b3:9d:fe:eb:a8:21:d8:8c:93:48:f4:e7:90:8a:22:61:fe:
         31:37:03:d4
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgICO7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjYwNjA5MDgzNjI5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI3ZDA4Yy1mMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6gnVz4yQimSRMuhv0jtL03lYkCzCYVdsdnog8CmYe9r+GOiYxGK86zYB4Cmu
M9wYiQADZWOIJYzKyxrQeDzH2H55pBJ097AJX+E4QLKqiVFVo8eYj5Gp+gbRBt/2
+ReMmJVwuYKfiJGD31dREVYHCArB3QI1FBXi6aYpfhmtxeefmWJ1kWtDKBTQ01kM
DGi5rHNJWLE1XPH/GfM2OVVrgrFtrSfKKitJ1aL6O2+vyLmWaHE3PB6/TNlBtHIS
TroiLiOW/XV8Xv6nCnlNYve6Wkmr+zj6w0Pq28MzvKRj/gwSvqGSYuoPJvw+Sefj
UZ9StCA+2vTgBYJaNHHoUrfdKQIDAQABo4IDLjCCAyowHQYDVR0OBBYEFI/QhMhJ
POXDgaGw+U7jCPOtmwhgMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQUMyMEM3OTY2
M0REMTFGMUE4RjRBMjlBODY0N0E4ODgucm9hMIHsBggrBgEFBQcBBwEB/wSB3DCB
2TCBxwQCAAEwgcADBABvWOkDBABvWO4DBABzug0DBABzuhEDBABzuhcDBABzuhkw
DAMEAXO6HgMEAnO6IDAMAwQBc7omAwQAc7ooMAwDBANzujgDBAFzujwDBABzuloD
BABzumADBABzumIDBABzumUwDAMEAXO6agMEAXO6cAMEAHO6cwMEAHO6eQMEAHO6
fjAMAwQAdWYHAwQBdWYIAwQCdWYQMAwDBAN1ZhgDBAB1ZhoDBAB1ZhwDBAR1ZiAD
BADLUeYDBADLUe8wDQQCAAIwBwMFACQGcAAwDQYJKoZIhvcNAQELBQADggEBAKH4
kOcOZjl4fPK8qIzRdKNXksucYC3j5Wimig5C7HdV6KVeRb6aDqXu3QASPzuQsvik
Wwyn8wAHYUm1sej0hWlzpPghij4OgyeC+E33kjfrwyCdTlGT736ZHBgJUj22VoB9
WuNPyWh/dSeCCLeCOzFIKDNy0v/QwWOwPBq6YaC4fu2+v04Yozmhim92DzkV5CLR
VIgtH1Wf4nLorJ2F/IoxgjVq2cyPbaFcd3kxF6tgpoMWv/CuWGjN134M+2EK/DQD
AYJZV+tYghJg1SMQBDCLgTpU6gRg0LUtxk3Aaujmcrtu3IdDhgyjnXeznf7rqCHY
jJNI9OeQiiJh/jE3A9Q=
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:37:09 2026 by rpki-client