Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4CE392F2C14511F1972FD06E4D11F970.roa
File:                     4CE392F2C14511F1972FD06E4D11F970.roa (raw, json)
Hash identifier:          vrUWOWfDdRvWyAZ3IB1nBNp5fYp4K0mz07uBB4Ylzts=
Subject key identifier:   60:39:C1:5F:3A:11:0B:E5:B8:94:42:56:C0:92:27:0E:1E:0E:86:07
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       095F
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4CE392F2C14511F1972FD06E4D11F970.roa
Signing time:             Tue 06 Oct 2026 05:18:01 +0000
ROA not before:           Tue 06 Oct 2026 05:18:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45753
IP address blocks:        103.1.224.0/22 maxlen: 22
                          103.1.224.0/24 maxlen: 24
                          103.1.225.0/24 maxlen: 24
                          103.1.226.0/24 maxlen: 24
                          103.1.227.0/24 maxlen: 24
                          103.199.104.0/22 maxlen: 24
                          112.121.160.0/19 maxlen: 19
                          112.121.160.0/20 maxlen: 20
                          112.121.160.0/21 maxlen: 21
                          112.121.160.0/22 maxlen: 22
                          112.121.160.0/23 maxlen: 24
                          112.121.162.0/24 maxlen: 24
                          112.121.163.0/24 maxlen: 24
                          112.121.164.0/24 maxlen: 24
                          112.121.165.0/24 maxlen: 24
                          112.121.166.0/24 maxlen: 24
                          112.121.167.0/24 maxlen: 24
                          112.121.168.0/24 maxlen: 24
                          112.121.169.0/24 maxlen: 24
                          112.121.170.0/24 maxlen: 24
                          112.121.172.0/24 maxlen: 24
                          112.121.173.0/24 maxlen: 24
                          112.121.174.0/24 maxlen: 24
                          112.121.175.0/24 maxlen: 24
                          112.121.176.0/24 maxlen: 24
                          112.121.177.0/24 maxlen: 24
                          112.121.178.0/24 maxlen: 24
                          112.121.179.0/24 maxlen: 24
                          112.121.180.0/24 maxlen: 24
                          112.121.181.0/24 maxlen: 24
                          112.121.182.0/24 maxlen: 24
                          112.121.183.0/24 maxlen: 24
                          112.121.184.0/24 maxlen: 24
                          112.121.185.0/24 maxlen: 24
                          112.121.186.0/24 maxlen: 24
                          112.121.187.0/24 maxlen: 24
                          112.121.188.0/24 maxlen: 24
                          112.121.189.0/24 maxlen: 24
                          112.121.190.0/24 maxlen: 24
                          112.121.191.0/24 maxlen: 24
                          137.59.20.0/22 maxlen: 24
                          180.178.32.0/19 maxlen: 19
                          180.178.32.0/20 maxlen: 20
                          180.178.32.0/21 maxlen: 21
                          180.178.32.0/22 maxlen: 22
                          180.178.32.0/23 maxlen: 24
                          180.178.34.0/24 maxlen: 24
                          180.178.35.0/24 maxlen: 24
                          180.178.36.0/24 maxlen: 24
                          180.178.37.0/24 maxlen: 24
                          180.178.38.0/24 maxlen: 24
                          180.178.39.0/24 maxlen: 24
                          180.178.40.0/24 maxlen: 24
                          180.178.41.0/24 maxlen: 24
                          180.178.42.0/24 maxlen: 24
                          180.178.43.0/24 maxlen: 24
                          180.178.44.0/24 maxlen: 24
                          180.178.45.0/24 maxlen: 24
                          180.178.46.0/24 maxlen: 24
                          180.178.47.0/24 maxlen: 24
                          180.178.48.0/24 maxlen: 24
                          180.178.49.0/24 maxlen: 24
                          180.178.50.0/24 maxlen: 24
                          180.178.51.0/24 maxlen: 24
                          180.178.52.0/24 maxlen: 24
                          180.178.53.0/24 maxlen: 24
                          180.178.54.0/24 maxlen: 24
                          180.178.55.0/24 maxlen: 24
                          180.178.56.0/24 maxlen: 24
                          180.178.57.0/24 maxlen: 24
                          180.178.58.0/24 maxlen: 24
                          180.178.59.0/24 maxlen: 24
                          180.178.60.0/24 maxlen: 24
                          180.178.61.0/24 maxlen: 24
                          180.178.62.0/24 maxlen: 24
                          180.178.63.0/24 maxlen: 24
                          182.16.0.0/17 maxlen: 17
                          182.16.0.0/18 maxlen: 18
                          182.16.0.0/19 maxlen: 19
                          182.16.0.0/20 maxlen: 20
                          182.16.0.0/21 maxlen: 21
                          182.16.0.0/22 maxlen: 22
                          182.16.0.0/23 maxlen: 24
                          182.16.2.0/24 maxlen: 24
                          182.16.3.0/24 maxlen: 24
                          182.16.4.0/24 maxlen: 24
                          182.16.5.0/24 maxlen: 24
                          182.16.6.0/24 maxlen: 24
                          182.16.7.0/24 maxlen: 24
                          182.16.8.0/24 maxlen: 24
                          182.16.9.0/24 maxlen: 24
                          182.16.10.0/24 maxlen: 24
                          182.16.11.0/24 maxlen: 24
                          182.16.12.0/24 maxlen: 24
                          182.16.13.0/24 maxlen: 24
                          182.16.14.0/24 maxlen: 24
                          182.16.15.0/24 maxlen: 24
                          182.16.16.0/24 maxlen: 24
                          182.16.17.0/24 maxlen: 24
                          182.16.18.0/24 maxlen: 24
                          182.16.19.0/24 maxlen: 24
                          182.16.20.0/24 maxlen: 24
                          182.16.21.0/24 maxlen: 24
                          182.16.22.0/24 maxlen: 24
                          182.16.23.0/24 maxlen: 24
                          182.16.24.0/24 maxlen: 24
                          182.16.25.0/24 maxlen: 24
                          182.16.26.0/24 maxlen: 24
                          182.16.27.0/24 maxlen: 24
                          182.16.28.0/24 maxlen: 24
                          182.16.29.0/24 maxlen: 24
                          182.16.30.0/24 maxlen: 24
                          182.16.31.0/24 maxlen: 24
                          182.16.32.0/24 maxlen: 24
                          182.16.33.0/24 maxlen: 24
                          182.16.34.0/24 maxlen: 24
                          182.16.35.0/24 maxlen: 24
                          182.16.36.0/24 maxlen: 24
                          182.16.37.0/24 maxlen: 24
                          182.16.38.0/24 maxlen: 24
                          182.16.39.0/24 maxlen: 24
                          182.16.40.0/24 maxlen: 24
                          182.16.41.0/24 maxlen: 24
                          182.16.42.0/24 maxlen: 24
                          182.16.43.0/24 maxlen: 24
                          182.16.44.0/24 maxlen: 24
                          182.16.45.0/24 maxlen: 24
                          182.16.46.0/24 maxlen: 24
                          182.16.47.0/24 maxlen: 24
                          182.16.48.0/24 maxlen: 24
                          182.16.49.0/24 maxlen: 24
                          182.16.50.0/24 maxlen: 24
                          182.16.51.0/24 maxlen: 24
                          182.16.52.0/24 maxlen: 24
                          182.16.53.0/24 maxlen: 24
                          182.16.54.0/24 maxlen: 24
                          182.16.55.0/24 maxlen: 24
                          182.16.56.0/24 maxlen: 24
                          182.16.57.0/24 maxlen: 24
                          182.16.58.0/24 maxlen: 24
                          182.16.59.0/24 maxlen: 24
                          182.16.60.0/24 maxlen: 24
                          182.16.61.0/24 maxlen: 24
                          182.16.62.0/24 maxlen: 24
                          182.16.63.0/24 maxlen: 24
                          182.16.64.0/21 maxlen: 21
                          182.16.64.0/24 maxlen: 24
                          182.16.65.0/24 maxlen: 24
                          182.16.66.0/24 maxlen: 24
                          182.16.67.0/24 maxlen: 24
                          182.16.68.0/24 maxlen: 24
                          182.16.69.0/24 maxlen: 24
                          182.16.70.0/24 maxlen: 24
                          182.16.71.0/24 maxlen: 24
                          182.16.72.0/24 maxlen: 24
                          182.16.73.0/24 maxlen: 24
                          182.16.74.0/24 maxlen: 24
                          182.16.75.0/24 maxlen: 24
                          182.16.76.0/24 maxlen: 24
                          182.16.77.0/24 maxlen: 24
                          182.16.78.0/24 maxlen: 24
                          182.16.79.0/24 maxlen: 24
                          182.16.80.0/24 maxlen: 24
                          182.16.81.0/24 maxlen: 24
                          182.16.82.0/24 maxlen: 24
                          182.16.83.0/24 maxlen: 24
                          182.16.84.0/24 maxlen: 24
                          182.16.85.0/24 maxlen: 24
                          182.16.86.0/24 maxlen: 24
                          182.16.87.0/24 maxlen: 24
                          182.16.88.0/24 maxlen: 24
                          182.16.89.0/24 maxlen: 24
                          182.16.90.0/24 maxlen: 24
                          182.16.91.0/24 maxlen: 24
                          182.16.92.0/24 maxlen: 24
                          182.16.93.0/24 maxlen: 24
                          182.16.94.0/24 maxlen: 24
                          182.16.95.0/24 maxlen: 24
                          182.16.96.0/24 maxlen: 24
                          182.16.97.0/24 maxlen: 24
                          182.16.98.0/24 maxlen: 24
                          182.16.100.0/24 maxlen: 24
                          182.16.101.0/24 maxlen: 24
                          182.16.102.0/24 maxlen: 24
                          182.16.103.0/24 maxlen: 24
                          182.16.104.0/24 maxlen: 24
                          182.16.105.0/24 maxlen: 24
                          182.16.106.0/24 maxlen: 24
                          182.16.107.0/24 maxlen: 24
                          182.16.108.0/24 maxlen: 24
                          182.16.109.0/24 maxlen: 24
                          182.16.110.0/24 maxlen: 24
                          182.16.111.0/24 maxlen: 24
                          182.16.112.0/24 maxlen: 24
                          182.16.113.0/24 maxlen: 24
                          182.16.114.0/24 maxlen: 24
                          182.16.115.0/24 maxlen: 24
                          182.16.116.0/24 maxlen: 24
                          182.16.117.0/24 maxlen: 24
                          182.16.118.0/24 maxlen: 24
                          182.16.119.0/24 maxlen: 24
                          182.16.120.0/24 maxlen: 24
                          182.16.121.0/24 maxlen: 24
                          182.16.122.0/24 maxlen: 24
                          182.16.123.0/24 maxlen: 24
                          182.16.124.0/24 maxlen: 24
                          182.16.125.0/24 maxlen: 24
                          182.16.126.0/24 maxlen: 24
                          182.16.127.0/24 maxlen: 24
                          2406:8680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Oct  6 05:18:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac48489-8bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:a6:a0:c4:e2:61:ec:ad:7e:e4:ad:bc:67:
                    35:05:e0:b9:fe:6c:a6:8e:6e:7c:e4:d1:25:a6:d3:
                    c9:03:53:93:a1:e1:63:31:4e:e8:bb:46:77:1d:05:
                    d7:ad:01:67:47:77:55:7e:eb:18:ca:39:6c:e9:6e:
                    ee:22:04:6a:e2:b3:25:02:bf:52:9d:6a:87:ca:58:
                    ad:35:7c:4a:9d:b7:e2:d5:3f:cc:ed:0a:f6:79:8c:
                    05:c5:e2:21:bc:70:a5:ff:cf:ec:4f:14:c4:be:27:
                    80:20:57:14:c1:e6:94:7e:81:c5:af:a2:33:28:9c:
                    58:81:4b:84:ea:6f:57:07:0a:37:2c:82:29:cb:f0:
                    2a:86:cc:8b:53:60:91:78:2a:8a:a1:8f:bf:34:af:
                    70:e1:47:19:21:95:8b:e5:96:e3:4c:cf:c1:31:8b:
                    42:27:56:f6:ba:54:a0:e7:95:71:62:f2:38:53:a6:
                    9d:5d:71:0d:9f:79:9a:ef:61:78:f7:de:be:ef:ed:
                    6b:16:55:c7:85:9f:4c:81:2f:a8:fe:3c:f3:c8:18:
                    86:cb:5f:37:86:59:99:8c:21:99:b2:4d:65:33:d9:
                    fa:cc:55:87:07:66:45:9c:94:cc:f9:f1:c2:9c:04:
                    74:73:19:e3:55:fe:85:04:4b:83:4f:bc:c8:fc:07:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:C1:5F:3A:11:0B:E5:B8:94:42:56:C0:92:27:0E:1E:0E:86:07
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4CE392F2C14511F1972FD06E4D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.224.0/22
                  103.199.104.0/22
                  112.121.160.0/19
                  137.59.20.0/22
                  180.178.32.0/19
                  182.16.0.0/17
                IPv6:
                  2406:8680::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:61:80:79:5c:5b:ce:8f:8c:aa:38:57:b5:ca:c7:3d:89:29:
         55:ed:f9:9a:0d:92:dd:40:14:ee:f1:18:71:fb:2c:c2:8e:ad:
         51:b0:09:1f:f6:b0:46:91:e6:92:18:46:98:2f:de:e9:c6:4b:
         50:ad:54:25:f5:61:f4:f6:fc:16:07:13:a1:d5:16:49:8f:22:
         77:75:61:18:11:7d:f3:58:3a:03:b0:c7:ee:07:0d:ba:fe:fd:
         ab:c7:07:cf:85:ce:46:15:1d:c2:ec:24:f9:f5:cb:df:44:08:
         26:b6:8c:d7:86:d1:f4:32:13:3c:65:fe:20:f1:87:6d:59:4a:
         5e:cc:66:5a:29:b2:8d:e4:54:ce:1f:27:fc:ee:34:70:e2:36:
         75:f7:8f:04:37:f1:67:5f:c8:49:17:14:29:b0:9b:ab:fd:25:
         41:98:05:90:c0:7c:bc:dc:db:00:da:39:da:f1:2d:f4:8b:fe:
         93:6f:d5:44:72:cc:e2:f9:fc:17:b3:e3:49:49:e4:d3:e6:d0:
         21:74:52:60:6e:26:c9:9f:96:6e:c2:cf:13:ba:07:d3:be:33:
         39:b7:a9:64:20:c3:38:70:03:63:de:e9:26:a2:cc:d7:63:7b:
         87:19:22:3a:ae:d4:bc:13:bb:94:c8:35:53:04:f0:be:92:4b:
         39:64:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:59 2026 by rpki-client