Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
File:                     ED7D926622C511EE8579CC72C4F9AE02.roa (raw, json)
Hash identifier:          h6nFBPT46PWIJvwvBtgNlWqgwNbUJ4z0xCkNAkUmRsc=
Subject key identifier:   1B:1E:89:CA:63:11:BD:D9:CF:8F:EC:78:01:41:1B:84:6D:8A:90:68
Certificate issuer:       /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial:       1400
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 17:21:14 +0000
ROA not before:           Thu 02 Apr 2026 17:21:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9902
IP address blocks:        103.23.136.0/22 maxlen: 22
                          103.23.136.0/24 maxlen: 24
                          103.23.137.0/24 maxlen: 24
                          103.23.138.0/24 maxlen: 24
                          103.23.139.0/24 maxlen: 24
                          103.25.92.0/24 maxlen: 24
                          103.25.93.0/24 maxlen: 24
                          103.25.94.0/24 maxlen: 24
                          103.25.95.0/24 maxlen: 24
                          103.244.248.0/22 maxlen: 22
                          103.244.248.0/24 maxlen: 24
                          103.244.249.0/24 maxlen: 24
                          103.244.250.0/24 maxlen: 24
                          103.244.251.0/24 maxlen: 24
                          110.235.220.0/22 maxlen: 22
                          110.235.220.0/24 maxlen: 24
                          110.235.221.0/24 maxlen: 24
                          110.235.222.0/24 maxlen: 24
                          110.235.223.0/24 maxlen: 24
                          123.108.248.0/21 maxlen: 21
                          123.108.248.0/24 maxlen: 24
                          123.108.249.0/24 maxlen: 24
                          123.108.250.0/24 maxlen: 24
                          123.108.251.0/24 maxlen: 24
                          123.108.252.0/24 maxlen: 24
                          123.108.253.0/24 maxlen: 24
                          123.108.254.0/23 maxlen: 24
                          124.199.112.0/20 maxlen: 20
                          124.199.112.0/24 maxlen: 24
                          124.199.113.0/24 maxlen: 24
                          124.199.114.0/24 maxlen: 24
                          124.199.115.0/24 maxlen: 24
                          124.199.116.0/24 maxlen: 24
                          124.199.117.0/24 maxlen: 24
                          124.199.118.0/24 maxlen: 24
                          124.199.119.0/24 maxlen: 24
                          124.199.120.0/24 maxlen: 24
                          124.199.121.0/24 maxlen: 24
                          124.199.122.0/24 maxlen: 24
                          124.199.123.0/24 maxlen: 24
                          124.199.124.0/24 maxlen: 24
                          124.199.125.0/24 maxlen: 24
                          124.199.126.0/24 maxlen: 24
                          124.199.127.0/24 maxlen: 24
                          163.53.196.0/22 maxlen: 22
                          163.53.196.0/24 maxlen: 24
                          163.53.197.0/24 maxlen: 24
                          163.53.198.0/24 maxlen: 24
                          163.53.199.0/24 maxlen: 24
                          202.124.32.0/24 maxlen: 24
                          202.124.33.0/24 maxlen: 24
                          202.124.34.0/24 maxlen: 24
                          202.124.35.0/24 maxlen: 24
                          202.124.36.0/24 maxlen: 24
                          202.124.37.0/24 maxlen: 24
                          202.124.38.0/24 maxlen: 24
                          202.124.39.0/24 maxlen: 24
                          202.124.40.0/21 maxlen: 21
                          202.124.40.0/24 maxlen: 24
                          202.124.41.0/24 maxlen: 24
                          202.124.42.0/24 maxlen: 24
                          202.124.43.0/24 maxlen: 24
                          202.124.44.0/24 maxlen: 24
                          202.124.45.0/24 maxlen: 24
                          202.124.46.0/24 maxlen: 24
                          202.124.47.0/24 maxlen: 24
                          203.80.160.0/21 maxlen: 21
                          203.80.160.0/24 maxlen: 24
                          203.80.161.0/24 maxlen: 24
                          203.80.162.0/24 maxlen: 24
                          203.80.163.0/24 maxlen: 24
                          203.80.164.0/24 maxlen: 24
                          203.80.165.0/24 maxlen: 24
                          203.80.166.0/24 maxlen: 24
                          203.80.167.0/24 maxlen: 24
                          203.167.16.0/22 maxlen: 24
                          2402:5100::/32 maxlen: 32
                          2402:5100::/48 maxlen: 48
                          2402:5100:1::/48 maxlen: 48
                          2402:5100:2::/48 maxlen: 48
                          2402:5100:3::/48 maxlen: 48
                          2402:5100:4::/48 maxlen: 48
                          2402:5100:5::/48 maxlen: 48
                          2402:5100:6::/47 maxlen: 47
                          2402:5100:6::/48 maxlen: 48
                          2402:5100:8::/45 maxlen: 45
                          2402:5100:10::/44 maxlen: 44
                          2402:5100:20::/43 maxlen: 43
                          2402:5100:40::/42 maxlen: 42
                          2402:5100:80::/41 maxlen: 41
                          2402:5100:100::/40 maxlen: 40
                          2402:5100:200::/39 maxlen: 39
                          2402:5100:400::/38 maxlen: 38
                          2402:5100:800::/37 maxlen: 37
                          2402:5100:a61:9160::/64 maxlen: 64
                          2402:5100:1000::/36 maxlen: 36
                          2402:5100:109a:9c00::/54 maxlen: 54
                          2402:5100:13e4::/49 maxlen: 49
                          2402:5100:19c5:7b1a::/63 maxlen: 63
                          2402:5100:2000::/35 maxlen: 35
                          2402:5100:2000::/36 maxlen: 44
                          2402:5100:2000::/48 maxlen: 48
                          2402:5100:2878:a000::/51 maxlen: 51
                          2402:5100:3051:faf0::/61 maxlen: 61
                          2402:5100:34fa:4000::/50 maxlen: 50
                          2402:5100:3ca1::/52 maxlen: 52
                          2402:5100:4000::/34 maxlen: 34
                          2402:5100:440a:6c00::/54 maxlen: 54
                          2402:5100:4858:8798::/62 maxlen: 62
                          2402:5100:49af:7378::/62 maxlen: 62
                          2402:5100:4dc9:200::/55 maxlen: 55
                          2402:5100:5a54::/48 maxlen: 48
                          2402:5100:5ad0:e000::/51 maxlen: 51
                          2402:5100:5adf:ff00::/56 maxlen: 56
                          2402:5100:5b82:c640::/58 maxlen: 58
                          2402:5100:5f51:8000::/50 maxlen: 50
                          2402:5100:633d:8000::/49 maxlen: 49
                          2402:5100:7944:6230::/60 maxlen: 60
                          2402:5100:7c59:3040::/59 maxlen: 59
                          2402:5100:8000::/33 maxlen: 33
                          2402:5100:82ec:1000::/52 maxlen: 52
                          2402:5100:8a2c:fa80::/58 maxlen: 58
                          2402:5100:8c49:1daf::/64 maxlen: 64
                          2402:5100:913d:267c::/63 maxlen: 63
                          2402:5100:92a8:d800::/53 maxlen: 53
                          2402:5100:92d3:d000::/59 maxlen: 59
                          2402:5100:92ed:82a0::/59 maxlen: 59
                          2402:5100:9674:9800::/53 maxlen: 53
                          2402:5100:968b:9fd0::/61 maxlen: 61
                          2402:5100:96f4:35f2::/63 maxlen: 63
                          2402:5100:97d1:bab4::/62 maxlen: 62
                          2402:5100:9839:d180::/64 maxlen: 64
                          2402:5100:9839:d18b::/64 maxlen: 64
                          2402:5100:98c5::/50 maxlen: 50
                          2402:5100:9a3e:d560::/59 maxlen: 59
                          2402:5100:9ae1:9640::/58 maxlen: 58
                          2402:5100:9b45::/48 maxlen: 48
                          2402:5100:9c24::/48 maxlen: 48
                          2402:5100:9e92:7000::/52 maxlen: 52
                          2402:5100:9f87:ca0::/60 maxlen: 60
                          2402:5100:a595::/49 maxlen: 49
                          2402:5100:a5af:9200::/55 maxlen: 55
                          2402:5100:a6d7:1cd8::/61 maxlen: 61
                          2402:5100:a8d2:8a00::/55 maxlen: 55
                          2402:5100:ac16:2800::/56 maxlen: 56
                          2402:5100:ad38:f128::/63 maxlen: 63
                          2402:5100:af3d:9780::/57 maxlen: 57
                          2402:5100:af82::/48 maxlen: 48
                          2402:5100:b344:1800::/53 maxlen: 53
                          2402:5100:baec::/49 maxlen: 49
                          2402:5100:bd4f::/48 maxlen: 48
                          2402:5100:be38:d980::/57 maxlen: 57
                          2402:5100:bf0d:425e::/64 maxlen: 64
                          2402:5100:c000::/48 maxlen: 48
                          2402:5100:c017:3e00::/57 maxlen: 57
                          2402:5100:c126::/48 maxlen: 48
                          2402:5100:c29b::/48 maxlen: 48
                          2402:5100:c42e:9728::/61 maxlen: 61
                          2402:5100:c8e5:e000::/51 maxlen: 51
                          2402:5100:ca6b:62b0::/60 maxlen: 60
                          2402:5100:d107::/48 maxlen: 48
                          2402:5100:d1a2:dc00::/56 maxlen: 56
                          2402:5100:d360:8000::/50 maxlen: 50
                          2402:5100:d3b2:b800::/53 maxlen: 53
                          2402:5100:d7f6::/48 maxlen: 48
                          2402:5100:d879:7e00::/60 maxlen: 60
                          2402:5100:d8e9:4a04::/62 maxlen: 62
                          2402:5100:dc0e::/54 maxlen: 54
                          2402:5100:dd4c::/48 maxlen: 48
                          2402:5100:e458::/48 maxlen: 48
                          2402:5100:e965:69c0::/58 maxlen: 58
                          2402:5100:ef12:8800::/54 maxlen: 54
                          2402:5100:f116:2200::/56 maxlen: 56
                          2402:5100:f23f:7a80::/57 maxlen: 57
                          2402:5100:f48e::/48 maxlen: 48
                          2402:5100:f71d:2000::/51 maxlen: 51
                          2402:5100:f9ee:8800::/55 maxlen: 55
                          2402:5100:fcbe:3000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5120 (0x1400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
        Validity
            Not Before: Apr  2 17:21:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cea58a-90f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:32:da:7d:75:7a:48:ef:02:50:6c:13:02:
                    ed:c0:3f:a8:c6:8f:22:c2:52:cf:29:a4:8f:52:2b:
                    6f:c3:20:54:0f:43:2c:57:b4:52:7b:3f:73:a8:fa:
                    18:54:b2:c9:66:59:57:01:58:fa:e1:b2:9b:b9:ec:
                    29:d8:1d:2f:a2:1c:4a:f2:d0:71:a9:0e:4a:dc:f3:
                    f2:47:5d:b1:94:ab:37:f7:e9:9d:49:88:10:84:72:
                    98:32:75:ea:37:33:4b:51:bc:49:b6:ca:6d:4c:bf:
                    de:21:73:70:2a:5b:d9:d7:44:17:8d:72:29:b3:48:
                    a0:a5:24:6b:99:25:dd:1e:17:2e:60:35:3b:19:fa:
                    90:70:48:f7:bb:71:9c:57:fa:d9:db:c4:1e:da:9d:
                    c3:69:ea:fe:c5:b8:ef:87:7c:d1:54:76:38:89:5e:
                    10:e9:94:c7:8c:2f:28:93:2c:7f:7a:ab:56:9f:58:
                    d8:a9:23:20:c5:f7:b7:6e:2b:ef:c2:97:f1:59:0a:
                    8f:b8:58:3e:59:ba:c0:07:8d:84:e3:a0:52:c0:00:
                    b1:8b:60:9f:56:bf:2a:1d:49:5e:e5:f3:38:45:74:
                    7a:2a:f2:46:01:6e:dc:c6:e3:b2:8e:64:46:b3:e8:
                    c2:dd:ea:17:c4:08:3e:ec:a1:6a:ac:86:c4:5d:cb:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:89:CA:63:11:BD:D9:CF:8F:EC:78:01:41:1B:84:6D:8A:90:68
            X509v3 Authority Key Identifier:
                keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.136.0/22
                  103.25.92.0/22
                  103.244.248.0/22
                  110.235.220.0/22
                  123.108.248.0/21
                  124.199.112.0/20
                  163.53.196.0/22
                  202.124.32.0/20
                  203.80.160.0/21
                  203.167.16.0/22
                IPv6:
                  2402:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:b4:92:50:81:40:55:5e:9b:cc:53:77:f5:4d:69:ed:22:
         be:43:c5:8e:08:c9:fc:a6:bb:9d:b7:44:c5:ec:b3:0b:7d:ef:
         93:49:5c:c4:e7:2e:7c:e3:e4:f6:d5:8e:0a:9b:3e:7d:02:6c:
         54:7e:12:ee:ae:bc:90:13:9d:20:e7:6c:4a:cb:2c:d1:5c:33:
         e1:2f:f6:8e:c9:3b:a5:20:fd:e8:fb:7b:33:d3:2e:8f:e1:6e:
         e8:53:cd:6b:1e:a6:88:bc:57:53:17:c3:7d:bf:d3:8a:db:56:
         7c:c9:71:7b:5b:da:f3:b6:29:c5:39:81:61:61:5e:6f:67:6b:
         8f:59:af:63:76:5c:dc:7c:6a:64:a9:98:b6:93:21:c7:69:57:
         ec:39:bf:cb:8b:f0:d2:9e:81:f3:9e:60:2f:e8:27:5e:ec:90:
         b9:e7:fc:92:98:f7:ed:d3:86:0d:0d:66:fe:74:61:86:b2:12:
         5c:24:0f:54:9b:f3:30:f4:92:af:76:36:60:60:6d:06:5a:25:
         88:47:a0:ae:6d:fc:6d:10:3c:8e:c3:9d:22:86:d3:0c:35:72:
         3a:ef:cc:40:89:b9:83:af:65:b9:31:2a:b9:00:4c:9f:c9:3f:
         4b:81:f6:b7:01:f8:de:58:bb:06:13:cb:d7:0d:42:3d:6a:5e:
         38:15:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:12 2026 by rpki-client