Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/5E5FD4943A3D11F1BA9A26A3A0833773.roa
File:                     5E5FD4943A3D11F1BA9A26A3A0833773.roa (raw, json)
Hash identifier:          Jcy8NpWeyxlsek4l2QzVuwefebsXZYDny/VqxXJLrWg=
Subject key identifier:   0A:4F:A8:75:91:8C:10:DB:BB:75:43:23:AA:4A:CA:C7:A3:56:1B:46
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       3612
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/5E5FD4943A3D11F1BA9A26A3A0833773.roa
Signing time:             Fri 17 Apr 2026 09:11:08 +0000
ROA not before:           Fri 17 Apr 2026 09:11:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38264
IP address blocks:        58.27.128.0/17 maxlen: 17
                          58.27.128.0/24 maxlen: 24
                          58.27.129.0/24 maxlen: 24
                          58.27.130.0/24 maxlen: 24
                          58.27.131.0/24 maxlen: 24
                          58.27.132.0/22 maxlen: 22
                          58.27.132.0/24 maxlen: 24
                          58.27.133.0/24 maxlen: 24
                          58.27.134.0/24 maxlen: 24
                          58.27.135.0/24 maxlen: 24
                          58.27.136.0/22 maxlen: 22
                          58.27.140.0/24 maxlen: 24
                          58.27.141.0/24 maxlen: 24
                          58.27.142.0/24 maxlen: 24
                          58.27.144.0/22 maxlen: 22
                          58.27.144.0/23 maxlen: 24
                          58.27.146.0/24 maxlen: 24
                          58.27.147.0/24 maxlen: 24
                          58.27.148.0/22 maxlen: 22
                          58.27.148.0/24 maxlen: 24
                          58.27.149.0/24 maxlen: 24
                          58.27.150.0/23 maxlen: 23
                          58.27.152.0/21 maxlen: 22
                          58.27.152.0/22 maxlen: 23
                          58.27.156.0/24 maxlen: 24
                          58.27.157.0/24 maxlen: 24
                          58.27.158.0/24 maxlen: 24
                          58.27.159.0/24 maxlen: 24
                          58.27.160.0/21 maxlen: 22
                          58.27.160.0/24 maxlen: 24
                          58.27.164.0/24 maxlen: 24
                          58.27.168.0/21 maxlen: 22
                          58.27.168.0/23 maxlen: 23
                          58.27.170.0/24 maxlen: 24
                          58.27.171.0/24 maxlen: 24
                          58.27.172.0/24 maxlen: 24
                          58.27.176.0/20 maxlen: 20
                          58.27.184.0/22 maxlen: 22
                          58.27.188.0/24 maxlen: 24
                          58.27.189.0/24 maxlen: 24
                          58.27.190.0/24 maxlen: 24
                          58.27.192.0/19 maxlen: 19
                          58.27.192.0/21 maxlen: 21
                          58.27.192.0/24 maxlen: 24
                          58.27.193.0/24 maxlen: 24
                          58.27.194.0/23 maxlen: 23
                          58.27.195.0/24 maxlen: 24
                          58.27.196.0/23 maxlen: 24
                          58.27.198.0/24 maxlen: 24
                          58.27.199.0/24 maxlen: 24
                          58.27.200.0/22 maxlen: 22
                          58.27.200.0/24 maxlen: 24
                          58.27.201.0/24 maxlen: 24
                          58.27.202.0/24 maxlen: 24
                          58.27.203.0/24 maxlen: 24
                          58.27.204.0/22 maxlen: 22
                          58.27.204.0/24 maxlen: 24
                          58.27.205.0/24 maxlen: 24
                          58.27.206.0/24 maxlen: 24
                          58.27.207.0/24 maxlen: 24
                          58.27.208.0/20 maxlen: 20
                          58.27.208.0/22 maxlen: 22
                          58.27.208.0/24 maxlen: 24
                          58.27.209.0/24 maxlen: 24
                          58.27.210.0/24 maxlen: 24
                          58.27.211.0/24 maxlen: 24
                          58.27.212.0/22 maxlen: 22
                          58.27.212.0/24 maxlen: 24
                          58.27.213.0/24 maxlen: 24
                          58.27.215.0/24 maxlen: 24
                          58.27.216.0/24 maxlen: 24
                          58.27.217.0/24 maxlen: 24
                          58.27.218.0/24 maxlen: 24
                          58.27.219.0/24 maxlen: 24
                          58.27.220.0/24 maxlen: 24
                          58.27.221.0/24 maxlen: 24
                          58.27.222.0/24 maxlen: 24
                          58.27.223.0/24 maxlen: 24
                          58.27.224.0/19 maxlen: 19
                          58.27.224.0/20 maxlen: 20
                          58.27.224.0/24 maxlen: 24
                          58.27.225.0/24 maxlen: 24
                          58.27.226.0/24 maxlen: 24
                          58.27.227.0/24 maxlen: 24
                          58.27.228.0/24 maxlen: 24
                          58.27.229.0/24 maxlen: 24
                          58.27.230.0/24 maxlen: 24
                          58.27.231.0/24 maxlen: 24
                          58.27.232.0/21 maxlen: 21
                          58.27.232.0/22 maxlen: 22
                          58.27.232.0/24 maxlen: 24
                          58.27.233.0/24 maxlen: 24
                          58.27.234.0/24 maxlen: 24
                          58.27.235.0/24 maxlen: 24
                          58.27.236.0/23 maxlen: 24
                          58.27.238.0/24 maxlen: 24
                          58.27.239.0/24 maxlen: 24
                          58.27.240.0/21 maxlen: 21
                          58.27.240.0/24 maxlen: 24
                          58.27.241.0/24 maxlen: 24
                          58.27.242.0/24 maxlen: 24
                          58.27.243.0/24 maxlen: 24
                          58.27.244.0/24 maxlen: 24
                          58.27.245.0/24 maxlen: 24
                          58.27.246.0/24 maxlen: 24
                          58.27.247.0/24 maxlen: 24
                          58.27.248.0/22 maxlen: 22
                          58.27.248.0/24 maxlen: 24
                          58.27.249.0/24 maxlen: 24
                          58.27.250.0/24 maxlen: 24
                          58.27.251.0/24 maxlen: 24
                          58.27.252.0/22 maxlen: 23
                          58.27.255.0/24 maxlen: 24
                          110.36.0.0/19 maxlen: 24
                          110.36.32.0/20 maxlen: 24
                          110.36.48.0/21 maxlen: 24
                          110.36.56.0/24 maxlen: 24
                          110.36.64.0/18 maxlen: 24
                          110.36.128.0/18 maxlen: 24
                          110.36.208.0/23 maxlen: 24
                          110.36.216.0/23 maxlen: 24
                          110.36.218.0/24 maxlen: 24
                          110.36.220.0/22 maxlen: 24
                          110.36.224.0/24 maxlen: 24
                          110.36.227.0/24 maxlen: 24
                          110.36.228.0/22 maxlen: 24
                          110.36.234.0/24 maxlen: 24
                          110.36.236.0/24 maxlen: 24
                          110.37.0.0/18 maxlen: 24
                          110.37.64.0/18 maxlen: 24
                          110.37.128.0/18 maxlen: 24
                          110.37.192.0/18 maxlen: 24
                          110.38.0.0/16 maxlen: 19
                          110.38.0.0/17 maxlen: 24
                          110.38.128.0/18 maxlen: 24
                          110.38.192.0/19 maxlen: 24
                          110.38.224.0/20 maxlen: 24
                          110.39.0.0/16 maxlen: 24
                          2402:fd00::/32 maxlen: 32
                          2402:fd00:100::/44 maxlen: 44
                          2402:fd00:110::/48 maxlen: 48
                          2402:fd00:111::/48 maxlen: 48
                          2402:fd00:113::/48 maxlen: 48
                          2402:fd00:114::/48 maxlen: 48
                          2402:fd00:11f::/48 maxlen: 48
                          2402:fd00:130::/44 maxlen: 44
                          2402:fd00:1e0::/44 maxlen: 44
                          2402:fd00:1f0::/48 maxlen: 48
                          2402:fd00:300::/40 maxlen: 40
                          2402:fd00:4000::/40 maxlen: 40
                          2402:fd00:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13842 (0x3612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Apr 17 09:11:08 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69e1f92b-ccb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:99:0c:95:e6:a8:41:8a:47:3b:66:14:ab:
                    5d:19:42:d0:b4:63:ad:d0:fa:0e:28:5d:e9:92:07:
                    ca:23:af:f0:ed:6d:6b:95:fc:ca:44:b6:71:e4:70:
                    ab:4a:42:a7:49:2e:01:b9:5a:91:83:31:01:04:95:
                    45:2c:88:ec:1d:46:19:12:a3:31:9b:cb:ce:6b:2d:
                    1f:85:cd:61:5d:e0:80:30:6b:f9:8a:b7:10:2f:2e:
                    6a:bd:ba:5c:d2:9c:57:af:55:72:19:08:32:12:58:
                    bd:94:d5:c8:69:09:22:a5:37:a1:55:52:34:e9:45:
                    6b:f5:ed:7f:fe:49:64:5b:4a:15:6f:53:4e:d5:aa:
                    d3:82:33:58:01:2a:ce:6d:18:be:29:7a:a8:e6:da:
                    c3:7c:7c:43:0d:d5:1b:a6:2d:73:62:39:d8:3b:a8:
                    92:e9:8e:2a:a4:f5:5b:31:98:6d:20:fe:d7:52:ff:
                    7e:2c:02:b7:63:db:42:58:63:6a:a5:fb:ea:04:94:
                    3f:f0:05:0b:a1:57:2a:de:03:25:c6:ff:ac:fa:66:
                    b5:8e:5a:a1:61:76:8f:0a:a6:3c:cb:ac:bb:dc:f7:
                    fc:ec:84:63:46:ab:19:67:bb:b5:75:ac:f7:01:bb:
                    c9:62:5b:8c:ff:8a:51:9b:43:6b:4c:68:c2:0b:1c:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:A8:75:91:8C:10:DB:BB:75:43:23:AA:4A:CA:C7:A3:56:1B:46
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/5E5FD4943A3D11F1BA9A26A3A0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.27.128.0/17
                  110.36.0.0-110.36.56.255
                  110.36.64.0-110.36.191.255
                  110.36.208.0/23
                  110.36.216.0-110.36.218.255
                  110.36.220.0-110.36.224.255
                  110.36.227.0-110.36.231.255
                  110.36.234.0/24
                  110.36.236.0/24
                  110.37.0.0-110.39.255.255
                IPv6:
                  2402:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:17:85:50:e7:5e:32:70:81:e4:88:88:79:13:b9:58:24:
         46:91:06:7e:00:38:38:d9:f8:be:34:cd:b1:9a:ba:a3:60:5a:
         e6:9c:4d:4e:c2:88:25:06:32:47:36:fd:37:b5:8b:de:31:32:
         e5:1c:1e:b6:dd:c4:5e:c4:83:dd:1d:79:75:3b:96:7f:6c:db:
         e3:fd:92:69:f2:dc:c3:14:7c:a8:00:ca:bb:7e:13:22:28:6c:
         5d:8e:56:f8:2e:e4:ec:e5:7b:75:95:24:e2:5d:29:ee:ab:f6:
         7c:cf:f9:7a:b8:45:0b:6a:ee:d9:d2:10:ad:6c:eb:9c:8f:e7:
         a6:e4:55:4e:84:13:99:93:f3:36:73:f1:9b:05:30:b3:cc:15:
         ca:24:d1:ce:db:c7:2c:7b:0b:66:79:69:89:b5:2b:4c:be:f6:
         f4:a5:1e:6c:a0:39:12:d3:e3:64:4e:79:9a:1e:ca:7b:83:f2:
         0e:be:3c:f3:e6:ec:1e:3d:4c:16:5a:8f:d1:28:da:11:9b:8e:
         94:04:a6:ec:ef:05:f8:e7:c8:29:ee:a3:b6:96:ab:83:3e:d4:
         15:50:21:e7:53:92:6b:fb:e3:17:0a:e6:9e:27:fd:d3:d4:e8:
         bf:8d:a0:9c:ba:47:75:bb:0c:c7:2f:ce:20:e2:41:f9:d8:bf:
         90:8e:a2:ed
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgICNhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0
MzEzMEMzRjIwHhcNMjYwNDE3MDkxMTA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUxZjkyYi1jY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAeZDJXmqEGKRztmFKtdGULQtGOt0PoOKF3pkgfKI6/w7W1rlfzKRLZx5HCr
SkKnSS4BuVqRgzEBBJVFLIjsHUYZEqMxm8vOay0fhc1hXeCAMGv5ircQLy5qvbpc
0pxXr1VyGQgyEli9lNXIaQkipTehVVI06UVr9e1//klkW0oVb1NO1arTgjNYASrO
bRi+KXqo5trDfHxDDdUbpi1zYjnYO6iS6Y4qpPVbMZhtIP7XUv9+LAK3Y9tCWGNq
pfvqBJQ/8AULoVcq3gMlxv+s+ma1jlqhYXaPCqY8y6y73Pf87IRjRqsZZ7u1daz3
AbvJYluM/4pRm0NrTGjCCxxiuQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFApPqHWR
jBDbu3VDI6pKysejVhtGMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE
OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0ZGQjAvRTU1N0MwMDAxRDkyMTFFMjkzM0EyMUY2MDhCMDJDRDIvNUU1RkQ0OTQz
QTNEMTFGMUJBOUEyNkEzQTA4MzM3NzMucm9hMIGTBggrBgEFBQcBBwEB/wSBgzCB
gDBvBAIAATBpAwQHOhuAMAsDAwJuJAMEAG4kODAMAwQGbiRAAwQGbiSAAwQBbiTQ
MAwDBANuJNgDBABuJNowDAMEAm4k3AMEAG4k4DAMAwQAbiTjAwQDbiTgAwQAbiTq
AwQAbiTsMAoDAwBuJQMDA24gMA0EAgACMAcDBQAkAv0AMA0GCSqGSIb3DQEBCwUA
A4IBAQAuHBeFUOdeMnCB5IiIeRO5WCRGkQZ+ADg42fi+NM2xmrqjYFrmnE1Owogl
BjJHNv03tYveMTLlHB623cRexIPdHXl1O5Z/bNvj/ZJp8tzDFHyoAMq7fhMiKGxd
jlb4LuTs5Xt1lSTiXSnuq/Z8z/l6uEULau7Z0hCtbOucj+em5FVOhBOZk/M2c/Gb
BTCzzBXKJNHO28csewtmeWmJtStMvvb0pR5soDkS0+NkTnmaHsp7g/IOvjzz5uwe
PUwWWo/RKNoRm46UBKbs7wX458gp7qO2lquDPtQVUCHnU5Jr++MXCuaeJ/3T1Oi/
jaCcukd1uwzHL84g4kH52L+QjqLt
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:07 2026 by rpki-client