Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AD8CB30C13AA11F18EF746AE023D8C67.roa
File:                     AD8CB30C13AA11F18EF746AE023D8C67.roa (raw, json)
Hash identifier:          xR9dyet6M3yhzaWKBokSOwpVBO1qiMyahz7ytMB6dN8=
Subject key identifier:   CF:EF:FB:5F:35:09:9D:06:FF:92:74:43:AE:A0:E1:F1:DD:C3:51:47
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       360B
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AD8CB30C13AA11F18EF746AE023D8C67.roa
Signing time:             Sun 01 Mar 2026 18:56:28 +0000
ROA not before:           Fri 27 Feb 2026 07:05:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     55423
IP address blocks:        58.82.128.0/18 maxlen: 18
                          58.82.128.0/21 maxlen: 24
                          58.82.136.0/21 maxlen: 24
                          58.82.144.0/21 maxlen: 24
                          58.82.152.0/21 maxlen: 24
                          58.82.160.0/20 maxlen: 20
                          58.82.160.0/21 maxlen: 24
                          58.82.168.0/21 maxlen: 24
                          58.82.176.0/20 maxlen: 20
                          58.82.176.0/21 maxlen: 23
                          58.82.176.0/23 maxlen: 24
                          58.82.179.0/24 maxlen: 24
                          58.82.180.0/22 maxlen: 24
                          58.82.184.0/21 maxlen: 21
                          58.82.184.0/24 maxlen: 24
                          103.247.60.0/22 maxlen: 24
                          182.50.80.0/22 maxlen: 22
                          182.50.80.0/24 maxlen: 24
                          182.50.83.0/24 maxlen: 24
                          182.50.86.0/24 maxlen: 24
                          182.50.88.0/22 maxlen: 22
                          182.50.88.0/24 maxlen: 24
                          203.130.129.80/28 maxlen: 28
                          203.130.131.240/28 maxlen: 28
                          203.130.140.0/24 maxlen: 24
                          203.130.152.0/24 maxlen: 24
                          203.147.6.0/24 maxlen: 24
                          203.147.26.0/24 maxlen: 24
                          203.147.30.0/23 maxlen: 23
                          203.147.46.0/23 maxlen: 23
                          203.147.46.0/24 maxlen: 24
                          203.147.47.0/24 maxlen: 24
                          203.156.0.0/22 maxlen: 22
                          203.156.8.0/21 maxlen: 21
                          203.156.9.0/24 maxlen: 24
                          203.156.16.0/24 maxlen: 24
                          203.156.24.0/24 maxlen: 24
                          203.156.25.0/24 maxlen: 24
                          203.156.26.0/24 maxlen: 24
                          203.156.27.0/24 maxlen: 24
                          203.156.28.0/24 maxlen: 24
                          203.156.31.0/24 maxlen: 24
                          203.156.40.0/22 maxlen: 22
                          203.156.46.0/23 maxlen: 23
                          203.156.48.0/23 maxlen: 23
                          203.156.51.0/24 maxlen: 24
                          203.156.52.0/24 maxlen: 24
                          203.156.57.0/24 maxlen: 24
                          203.156.59.0/24 maxlen: 24
                          203.156.60.0/24 maxlen: 24
                          203.156.61.0/24 maxlen: 24
                          203.156.62.0/24 maxlen: 24
                          203.156.64.0/24 maxlen: 24
                          203.156.96.0/23 maxlen: 23
                          203.156.101.0/24 maxlen: 24
                          203.156.102.0/23 maxlen: 23
                          203.156.108.0/24 maxlen: 24
                          203.156.109.0/24 maxlen: 24
                          203.156.110.0/23 maxlen: 23
                          203.156.110.0/24 maxlen: 24
                          203.156.111.0/24 maxlen: 24
                          203.156.112.0/24 maxlen: 24
                          203.156.113.0/24 maxlen: 24
                          203.156.114.0/23 maxlen: 23
                          203.156.119.0/24 maxlen: 24
                          203.156.120.0/21 maxlen: 21
                          203.156.143.0/24 maxlen: 24
                          203.156.150.0/24 maxlen: 24
                          203.156.176.0/23 maxlen: 23
                          203.156.183.0/24 maxlen: 24
                          2404:4a00:1::/64 maxlen: 64
                          2404:4a00:2::/64 maxlen: 64
                          2404:4a00:3::/64 maxlen: 64
                          2404:4a00:4::/64 maxlen: 64
                          2404:4a00:1000::/48 maxlen: 48
                          2404:4a00:2094::/48 maxlen: 48
                          2404:4a00:5542::/48 maxlen: 48
                          2404:4a00:5542:3::/64 maxlen: 64
                          2404:4a00:5542:3a1::/64 maxlen: 64
                          2404:4a00:5542:3001::/64 maxlen: 64
                          2404:4a00:5542:3002::/64 maxlen: 64
                          2404:4a00:5542:3003::/64 maxlen: 64
                          2404:4a00:6000::/64 maxlen: 64
                          2404:4a00:6500::/64 maxlen: 64
                          2404:4a00:6501::/64 maxlen: 64
                          2404:4a00:6a00::/64 maxlen: 64
                          2404:4a00:7000::/64 maxlen: 64
                          2404:4a00:7500::/64 maxlen: 64
                          2404:4a00:7a00::/64 maxlen: 64
                          2404:4a00:8000::/64 maxlen: 64
                          2404:4a00:8500::/64 maxlen: 64
                          2404:4a00:8a00::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13835 (0x360b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb 27 07:05:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bdc-454d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:dc:22:9a:c5:9a:53:8e:a1:f8:67:a8:8d:
                    24:68:1c:49:5b:79:e9:8d:c6:39:1a:ee:ce:af:5a:
                    80:7c:3b:91:43:cd:35:b5:6e:28:c9:d4:9e:00:d9:
                    41:0a:76:64:02:c4:18:92:52:43:cd:db:c7:1b:72:
                    5d:10:f2:2f:26:62:4a:6d:8c:ea:3e:0a:21:47:9a:
                    4f:0b:23:e0:52:54:3b:ca:e0:e9:1b:a0:66:eb:f5:
                    0a:c7:3a:b1:36:35:5a:de:b6:b1:1c:47:6d:bf:59:
                    6e:7f:6b:e4:c2:f8:46:66:ae:9d:ad:99:d6:bf:dd:
                    ba:07:d3:32:7c:71:dc:2c:df:d3:32:fa:38:fb:9e:
                    dc:f2:2a:d7:d1:ff:fc:43:b4:15:19:28:e9:b5:a0:
                    96:fa:4e:7d:d1:5e:0d:e0:0f:65:0f:80:fd:d5:7f:
                    8a:54:81:c4:8b:9b:f8:d8:cc:53:5d:ba:79:4b:7d:
                    ea:ed:0f:19:10:a4:5e:69:81:eb:79:dd:c0:37:0e:
                    19:20:6d:6f:00:d5:59:c4:6d:9f:34:03:b9:ae:03:
                    87:8b:40:f8:9c:a4:0e:7b:ec:55:da:9c:34:fe:3f:
                    10:46:a6:d0:0c:75:25:ab:65:fa:eb:78:29:77:8e:
                    8b:85:a4:0d:b5:52:22:8d:91:a7:5b:54:36:22:b4:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:FB:5F:35:09:9D:06:FF:92:74:43:AE:A0:E1:F1:DD:C3:51:47
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AD8CB30C13AA11F18EF746AE023D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.82.128.0/18
                  103.247.60.0/22
                  182.50.80.0/22
                  182.50.86.0/24
                  182.50.88.0/22
                  203.130.129.80/28
                  203.130.131.240/28
                  203.130.140.0/24
                  203.130.152.0/24
                  203.147.6.0/24
                  203.147.26.0/24
                  203.147.30.0/23
                  203.147.46.0/23
                  203.156.0.0/22
                  203.156.8.0-203.156.16.255
                  203.156.24.0-203.156.28.255
                  203.156.31.0/24
                  203.156.40.0/22
                  203.156.46.0-203.156.49.255
                  203.156.51.0-203.156.52.255
                  203.156.57.0/24
                  203.156.59.0-203.156.62.255
                  203.156.64.0/24
                  203.156.96.0/23
                  203.156.101.0-203.156.103.255
                  203.156.108.0-203.156.115.255
                  203.156.119.0-203.156.127.255
                  203.156.143.0/24
                  203.156.150.0/24
                  203.156.176.0/23
                  203.156.183.0/24
                IPv6:
                  2404:4a00:1::/64
                  2404:4a00:2::/64
                  2404:4a00:3::/64
                  2404:4a00:4::/64
                  2404:4a00:1000::/48
                  2404:4a00:2094::/48
                  2404:4a00:5542::/48
                  2404:4a00:6000::/64
                  2404:4a00:6500::/64
                  2404:4a00:6501::/64
                  2404:4a00:6a00::/64
                  2404:4a00:7000::/64
                  2404:4a00:7500::/64
                  2404:4a00:7a00::/64
                  2404:4a00:8000::/64
                  2404:4a00:8500::/64
                  2404:4a00:8a00::/64

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:7f:69:ca:19:c2:30:32:84:e7:bf:61:d5:b8:fd:d3:70:
         38:b3:a0:f6:b3:47:fe:49:c7:a5:ed:6b:8d:f6:ce:ff:70:28:
         34:39:92:69:d3:d1:d4:96:b6:06:83:99:99:23:1d:63:f6:48:
         76:4d:5a:9f:41:40:4d:02:a9:33:93:cd:1c:19:83:4f:42:b9:
         89:62:43:37:b2:ca:ee:6a:b5:e4:eb:d2:62:1f:18:e1:f4:72:
         d4:c0:d5:14:d0:43:62:a2:b2:c7:a0:36:c7:e6:4f:d5:46:ae:
         62:e9:9c:1d:4b:c0:0c:48:57:76:0f:d3:90:0e:a5:eb:de:80:
         af:3c:c9:1c:7c:22:20:c9:7a:d5:5a:1e:dd:2b:49:14:25:50:
         0b:53:92:a0:32:5f:c1:64:3e:08:11:63:18:cc:00:d8:c8:47:
         f9:a0:81:99:31:aa:8b:a6:85:53:97:28:8a:61:16:4a:10:cc:
         3f:8e:61:39:3d:3e:7e:19:05:1b:c8:42:dc:9b:75:12:a9:5c:
         62:96:37:d6:d3:84:59:44:c5:e6:72:57:fc:56:36:8f:75:e8:
         e2:a3:33:5c:d3:d2:a4:47:05:5b:74:37:7e:5b:53:89:0a:74:
         7d:8f:10:ab:80:15:75:ca:c3:64:4d:19:a9:bd:59:37:01:b6:
         71:a7:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:02 2026 by rpki-client