Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC20C79663DD11F1A8F4A29A8647A888.roa
File:                     AC20C79663DD11F1A8F4A29A8647A888.roa (raw, json)
Hash identifier:          vUlNLC5mlthz5n9FlOguA8d/zLZxdl4iSHcOGUsO0iQ=
Subject key identifier:   BD:83:E8:5D:BF:7A:B3:F4:AF:11:6A:D3:33:77:8A:8F:16:1C:86:67
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3C05
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC20C79663DD11F1A8F4A29A8647A888.roa
Signing time:             Fri 04 Sep 2026 13:41:47 +0000
ROA not before:           Fri 04 Sep 2026 13:41:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38710
IP address blocks:        111.88.233.0/24 maxlen: 24
                          111.88.238.0/24 maxlen: 24
                          115.186.13.0/24 maxlen: 24
                          115.186.17.0/24 maxlen: 24
                          115.186.18.0/24 maxlen: 24
                          115.186.23.0/24 maxlen: 24
                          115.186.25.0/24 maxlen: 24
                          115.186.30.0/24 maxlen: 24
                          115.186.31.0/24 maxlen: 24
                          115.186.32.0/24 maxlen: 24
                          115.186.33.0/24 maxlen: 24
                          115.186.34.0/24 maxlen: 24
                          115.186.35.0/24 maxlen: 24
                          115.186.38.0/24 maxlen: 24
                          115.186.39.0/24 maxlen: 24
                          115.186.40.0/24 maxlen: 24
                          115.186.56.0/24 maxlen: 24
                          115.186.57.0/24 maxlen: 24
                          115.186.58.0/24 maxlen: 24
                          115.186.59.0/24 maxlen: 24
                          115.186.60.0/24 maxlen: 24
                          115.186.61.0/24 maxlen: 24
                          115.186.90.0/24 maxlen: 24
                          115.186.96.0/24 maxlen: 24
                          115.186.98.0/24 maxlen: 24
                          115.186.101.0/24 maxlen: 24
                          115.186.106.0/23 maxlen: 24
                          115.186.108.0/22 maxlen: 24
                          115.186.112.0/23 maxlen: 24
                          115.186.115.0/24 maxlen: 24
                          115.186.121.0/24 maxlen: 24
                          115.186.126.0/24 maxlen: 24
                          117.102.7.0/24 maxlen: 24
                          117.102.8.0/23 maxlen: 24
                          117.102.16.0/24 maxlen: 24
                          117.102.17.0/24 maxlen: 24
                          117.102.18.0/23 maxlen: 24
                          117.102.24.0/24 maxlen: 24
                          117.102.25.0/24 maxlen: 24
                          117.102.26.0/24 maxlen: 24
                          117.102.28.0/24 maxlen: 24
                          117.102.32.0/24 maxlen: 24
                          117.102.33.0/24 maxlen: 24
                          117.102.34.0/24 maxlen: 24
                          117.102.35.0/24 maxlen: 24
                          117.102.36.0/24 maxlen: 24
                          117.102.37.0/24 maxlen: 24
                          117.102.38.0/24 maxlen: 24
                          117.102.39.0/24 maxlen: 24
                          117.102.40.0/24 maxlen: 24
                          117.102.41.0/24 maxlen: 24
                          117.102.42.0/24 maxlen: 24
                          117.102.43.0/24 maxlen: 24
                          117.102.44.0/24 maxlen: 24
                          117.102.45.0/24 maxlen: 24
                          117.102.46.0/24 maxlen: 24
                          117.102.47.0/24 maxlen: 24
                          203.81.230.0/24 maxlen: 24
                          203.81.239.0/24 maxlen: 24
                          2406:7000::/32 maxlen: 32
                          2406:7000::/48 maxlen: 48
                          2406:7000:1::/48 maxlen: 48
                          2406:7000:2::/48 maxlen: 48
                          2406:7000:3::/48 maxlen: 48
                          2406:7000:4::/48 maxlen: 48
                          2406:7000:5::/48 maxlen: 48
                          2406:7000:6::/48 maxlen: 48
                          2406:7000:7::/48 maxlen: 48
                          2406:7000:8::/48 maxlen: 48
                          2406:7000:9::/48 maxlen: 48
                          2406:7000:a::/48 maxlen: 48
                          2406:7000:b::/48 maxlen: 48
                          2406:7000:c::/48 maxlen: 48
                          2406:7000:d::/48 maxlen: 48
                          2406:7000:e::/48 maxlen: 48
                          2406:7000:f::/48 maxlen: 48
                          2406:7000:10::/48 maxlen: 48
                          2406:7000:11::/48 maxlen: 56
                          2406:7000:12::/48 maxlen: 48
                          2406:7000:13::/48 maxlen: 48
                          2406:7000:14::/48 maxlen: 48
                          2406:7000:15::/48 maxlen: 48
                          2406:7000:16::/48 maxlen: 48
                          2406:7000:17::/48 maxlen: 48
                          2406:7000:18::/48 maxlen: 48
                          2406:7000:19::/48 maxlen: 48
                          2406:7000:1a::/48 maxlen: 48
                          2406:7000:1b::/48 maxlen: 48
                          2406:7000:1c::/48 maxlen: 48
                          2406:7000:1d::/48 maxlen: 48
                          2406:7000:1e::/48 maxlen: 48
                          2406:7000:1f::/48 maxlen: 48
                          2406:7000:20::/48 maxlen: 48
                          2406:7000:21::/48 maxlen: 48
                          2406:7000:22::/48 maxlen: 48
                          2406:7000:23::/48 maxlen: 48
                          2406:7000:24::/48 maxlen: 48
                          2406:7000:25::/48 maxlen: 48
                          2406:7000:26::/48 maxlen: 48
                          2406:7000:27::/48 maxlen: 48
                          2406:7000:28::/48 maxlen: 48
                          2406:7000:29::/48 maxlen: 48
                          2406:7000:2a::/48 maxlen: 48
                          2406:7000:2b::/48 maxlen: 48
                          2406:7000:2c::/48 maxlen: 48
                          2406:7000:2d::/48 maxlen: 48
                          2406:7000:2e::/48 maxlen: 48
                          2406:7000:2f::/48 maxlen: 48
                          2406:7000:30::/48 maxlen: 48
                          2406:7000:31::/48 maxlen: 48
                          2406:7000:32::/48 maxlen: 48
                          2406:7000:33::/48 maxlen: 48
                          2406:7000:34::/48 maxlen: 48
                          2406:7000:35::/48 maxlen: 48
                          2406:7000:36::/48 maxlen: 48
                          2406:7000:37::/48 maxlen: 48
                          2406:7000:38::/48 maxlen: 48
                          2406:7000:39::/48 maxlen: 48
                          2406:7000:3a::/48 maxlen: 48
                          2406:7000:3b::/48 maxlen: 48
                          2406:7000:3c::/48 maxlen: 48
                          2406:7000:3d::/48 maxlen: 48
                          2406:7000:3e::/48 maxlen: 48
                          2406:7000:3f::/48 maxlen: 48
                          2406:7000:40::/48 maxlen: 48
                          2406:7000:41::/48 maxlen: 48
                          2406:7000:42::/48 maxlen: 48
                          2406:7000:43::/48 maxlen: 48
                          2406:7000:44::/48 maxlen: 48
                          2406:7000:45::/48 maxlen: 48
                          2406:7000:46::/48 maxlen: 48
                          2406:7000:47::/48 maxlen: 48
                          2406:7000:48::/48 maxlen: 48
                          2406:7000:49::/48 maxlen: 48
                          2406:7000:4a::/48 maxlen: 48
                          2406:7000:4b::/48 maxlen: 48
                          2406:7000:4c::/48 maxlen: 48
                          2406:7000:4d::/48 maxlen: 48
                          2406:7000:4e::/48 maxlen: 48
                          2406:7000:4f::/48 maxlen: 48
                          2406:7000:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15365 (0x3c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep  4 13:41:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a9aca9b-69df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:fa:a2:0f:2e:d7:ab:ba:25:7a:02:93:94:
                    34:96:9f:8d:8b:95:d4:3d:4b:16:13:62:44:ed:e6:
                    28:91:cb:5a:2a:62:e9:94:de:4a:9d:32:75:ec:3e:
                    03:49:b3:c0:a6:1b:be:2c:e1:85:4f:60:5c:60:22:
                    e1:1a:1c:76:fb:a6:9d:c1:92:69:01:bd:6b:07:c1:
                    87:7d:ca:41:f5:49:5b:56:1a:7d:a7:68:6e:ef:45:
                    e6:38:46:b6:0c:36:ba:e3:81:57:84:79:5d:48:e4:
                    68:a8:0e:df:d5:51:09:cd:0e:9b:cc:04:2a:65:36:
                    89:a3:fd:db:2d:91:69:f8:78:1e:fc:64:e8:47:b1:
                    4d:92:5b:2f:4d:ab:ff:5c:23:d7:2e:5c:d2:bd:50:
                    f4:c8:6e:20:f2:0d:b9:cd:35:85:39:f0:af:5e:d2:
                    74:e1:2b:aa:3e:4a:03:ab:f2:11:e3:ef:a3:dc:64:
                    9d:37:63:a2:4a:46:f3:d5:b6:44:d2:4a:e7:af:b9:
                    9a:d3:44:2c:43:95:1e:32:39:25:77:94:fd:4c:76:
                    14:69:4a:33:c0:56:55:a9:0d:06:96:b3:4b:d0:68:
                    41:76:a7:51:79:62:0f:7b:b2:07:66:c5:bf:a2:e6:
                    83:14:16:e0:07:b6:7c:7e:ee:99:87:af:34:e8:7c:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:83:E8:5D:BF:7A:B3:F4:AF:11:6A:D3:33:77:8A:8F:16:1C:86:67
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC20C79663DD11F1A8F4A29A8647A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.233.0/24
                  111.88.238.0/24
                  115.186.13.0/24
                  115.186.17.0-115.186.18.255
                  115.186.23.0/24
                  115.186.25.0/24
                  115.186.30.0-115.186.35.255
                  115.186.38.0-115.186.40.255
                  115.186.56.0-115.186.61.255
                  115.186.90.0/24
                  115.186.96.0/24
                  115.186.98.0/24
                  115.186.101.0/24
                  115.186.106.0-115.186.113.255
                  115.186.115.0/24
                  115.186.121.0/24
                  115.186.126.0/24
                  117.102.7.0-117.102.9.255
                  117.102.16.0/22
                  117.102.24.0-117.102.26.255
                  117.102.28.0/24
                  117.102.32.0/20
                  203.81.230.0/24
                  203.81.239.0/24
                IPv6:
                  2406:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:83:3c:1d:9f:15:f9:71:7a:06:e0:30:63:b4:ad:91:e8:
         2a:cd:ab:54:1f:5c:67:77:06:a6:79:d5:bc:df:ee:52:d3:16:
         08:68:96:bb:f1:ea:d8:37:0c:eb:df:f6:ff:0e:de:98:a7:68:
         62:df:ea:e8:2b:37:08:1d:dc:9a:dd:77:51:e0:6d:a9:96:d0:
         1e:48:b6:a2:b0:95:01:5f:d3:1f:7a:b4:86:87:00:e3:9d:c5:
         40:03:e5:03:65:d1:f2:3c:a3:85:9f:43:12:0c:c8:e6:01:41:
         41:cc:75:bb:02:fe:8a:35:9b:21:42:9d:a4:8e:26:be:95:e8:
         72:b2:09:c3:26:26:4b:cf:41:cc:5a:f2:ec:2e:33:62:fa:c4:
         64:d1:fc:08:20:a5:b2:92:74:25:9e:b7:d9:85:bd:ca:a7:be:
         59:fb:6f:01:c2:27:55:84:52:fc:ce:c8:18:2c:db:ed:f5:52:
         e2:dd:6c:55:1c:74:7e:dd:14:15:40:d2:8c:de:b0:3c:99:34:
         73:90:fe:ad:84:0c:59:aa:21:03:d0:77:56:c3:67:9b:6b:b4:
         2c:96:83:52:6e:62:0a:39:f3:d9:b7:a1:70:9d:b5:56:78:c0:
         61:e4:43:4b:ab:19:46:2c:1f:2a:b1:e9:5b:71:da:06:33:bc:
         14:a6:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:28:05 2026 by rpki-client