Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/26DA1E16247411EA8E1A1178C4F9AE02.roa
File:                     26DA1E16247411EA8E1A1178C4F9AE02.roa (raw, json)
Hash identifier:          0DCItTKdRW8XZxl8sAeRR6hAdfjknJyDauG3M3/Il7w=
Subject key identifier:   6E:DC:0D:99:AF:B4:76:38:7F:CF:A0:FC:82:65:D5:49:BE:84:CF:28
Certificate issuer:       /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial:       11D1
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/26DA1E16247411EA8E1A1178C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:30 +0000
ROA not before:           Thu 27 Nov 2025 10:05:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     131269
IP address blocks:        49.204.0.0/19 maxlen: 20
                          49.204.32.0/19 maxlen: 19
                          49.204.45.0/24 maxlen: 24
                          49.204.96.0/20 maxlen: 20
                          49.204.96.0/22 maxlen: 22
                          49.204.100.0/22 maxlen: 22
                          49.204.104.0/22 maxlen: 22
                          49.204.108.0/22 maxlen: 22
                          49.204.112.0/20 maxlen: 20
                          49.204.128.0/20 maxlen: 20
                          49.204.143.0/24 maxlen: 24
                          49.204.144.0/20 maxlen: 20
                          49.204.160.0/19 maxlen: 24
                          49.204.192.0/20 maxlen: 20
                          49.204.192.0/23 maxlen: 23
                          49.204.194.0/23 maxlen: 23
                          49.204.196.0/23 maxlen: 23
                          49.204.198.0/23 maxlen: 23
                          49.204.200.0/23 maxlen: 23
                          49.204.202.0/24 maxlen: 24
                          49.204.203.0/24 maxlen: 24
                          49.204.204.0/23 maxlen: 23
                          49.204.206.0/23 maxlen: 23
                          49.204.208.0/20 maxlen: 22
                          49.204.232.0/21 maxlen: 22
                          49.205.0.0/19 maxlen: 19
                          49.205.0.0/21 maxlen: 21
                          49.205.32.0/19 maxlen: 19
                          49.205.66.0/23 maxlen: 23
                          49.205.88.0/23 maxlen: 24
                          49.205.90.0/23 maxlen: 24
                          49.205.96.0/20 maxlen: 20
                          49.205.96.0/22 maxlen: 23
                          49.205.100.0/22 maxlen: 23
                          49.205.104.0/22 maxlen: 24
                          49.205.108.0/22 maxlen: 23
                          49.205.128.0/19 maxlen: 19
                          49.205.160.0/22 maxlen: 22
                          49.205.160.0/24 maxlen: 24
                          49.205.161.0/24 maxlen: 24
                          49.205.162.0/24 maxlen: 24
                          49.205.163.0/24 maxlen: 24
                          49.205.164.0/23 maxlen: 23
                          49.205.166.0/24 maxlen: 24
                          49.205.167.0/24 maxlen: 24
                          49.205.168.0/24 maxlen: 24
                          49.205.208.0/23 maxlen: 23
                          49.205.210.0/23 maxlen: 23
                          49.205.212.0/24 maxlen: 24
                          49.205.213.0/24 maxlen: 24
                          49.205.214.0/24 maxlen: 24
                          49.205.215.0/24 maxlen: 24
                          49.206.112.0/21 maxlen: 22
                          49.206.128.0/19 maxlen: 19
                          49.206.160.0/19 maxlen: 19
                          49.206.160.0/22 maxlen: 22
                          49.206.164.0/22 maxlen: 22
                          49.206.168.0/22 maxlen: 22
                          49.206.172.0/22 maxlen: 22
                          49.206.176.0/22 maxlen: 22
                          49.206.180.0/22 maxlen: 22
                          49.206.184.0/22 maxlen: 22
                          49.206.188.0/22 maxlen: 22
                          49.207.16.0/20 maxlen: 20
                          49.207.44.0/24 maxlen: 24
                          49.207.64.0/18 maxlen: 18
                          49.207.192.0/18 maxlen: 18
                          106.51.4.0/24 maxlen: 24
                          106.51.6.0/24 maxlen: 24
                          106.51.44.0/24 maxlen: 24
                          106.51.48.0/22 maxlen: 24
                          106.51.113.0/24 maxlen: 24
                          106.51.114.0/24 maxlen: 24
                          106.51.124.0/24 maxlen: 24
                          106.51.125.0/24 maxlen: 24
                          106.51.152.0/22 maxlen: 24
                          106.51.156.0/24 maxlen: 24
                          106.51.157.0/24 maxlen: 24
                          106.51.160.0/19 maxlen: 20
                          106.51.255.0/24 maxlen: 24
                          124.123.24.0/24 maxlen: 24
                          124.123.25.0/24 maxlen: 24
                          124.123.26.0/24 maxlen: 24
                          124.123.60.0/22 maxlen: 22
                          124.123.60.0/24 maxlen: 24
                          124.123.61.0/24 maxlen: 24
                          124.123.62.0/24 maxlen: 24
                          124.123.63.0/24 maxlen: 24
                          124.123.94.0/24 maxlen: 24
                          124.123.95.0/24 maxlen: 24
                          124.123.124.0/23 maxlen: 23
                          124.123.126.0/24 maxlen: 24
                          124.123.127.0/24 maxlen: 24
                          124.123.128.0/19 maxlen: 19
                          124.123.216.0/21 maxlen: 22
                          124.123.224.0/19 maxlen: 19
                          124.123.224.0/21 maxlen: 21
                          124.123.232.0/21 maxlen: 21
                          124.123.240.0/21 maxlen: 21
                          124.123.248.0/21 maxlen: 21
                          183.82.1.0/24 maxlen: 24
                          183.82.2.0/24 maxlen: 24
                          183.82.3.0/24 maxlen: 24
                          183.82.4.0/24 maxlen: 24
                          183.82.5.0/24 maxlen: 24
                          183.82.6.0/24 maxlen: 24
                          183.82.7.0/24 maxlen: 24
                          183.82.8.0/24 maxlen: 24
                          183.82.9.0/24 maxlen: 24
                          183.82.10.0/24 maxlen: 24
                          183.82.11.0/24 maxlen: 24
                          183.82.12.0/24 maxlen: 24
                          183.82.13.0/24 maxlen: 24
                          183.82.14.0/24 maxlen: 24
                          183.82.15.0/24 maxlen: 24
                          183.82.64.0/19 maxlen: 19
                          183.82.160.0/20 maxlen: 20
                          183.82.176.0/22 maxlen: 22
                          183.82.204.0/22 maxlen: 22
                          183.82.208.0/20 maxlen: 20
                          183.82.224.0/20 maxlen: 20
                          183.82.250.0/23 maxlen: 24
                          183.83.0.0/19 maxlen: 19
                          183.83.33.0/24 maxlen: 24
                          183.83.35.0/24 maxlen: 24
                          183.83.48.0/24 maxlen: 24
                          183.83.96.0/19 maxlen: 19
                          183.83.148.0/22 maxlen: 22
                          183.83.156.0/22 maxlen: 22
                          183.83.184.0/21 maxlen: 21
                          183.83.240.0/22 maxlen: 24
                          183.83.247.0/24 maxlen: 24
                          202.83.27.0/24 maxlen: 24
                          202.83.28.0/24 maxlen: 24
                          202.83.30.0/24 maxlen: 24
                          202.83.31.0/24 maxlen: 24
                          2406:7400:30::/48 maxlen: 48
                          2406:7400:31::/48 maxlen: 48
                          2406:7400:34::/48 maxlen: 48
                          2406:7400:35::/48 maxlen: 48
                          2406:7400:38::/48 maxlen: 48
                          2406:7400:39::/48 maxlen: 48
                          2406:7400:3a::/48 maxlen: 48
                          2406:7400:3b::/48 maxlen: 48
                          2406:7400:3c::/48 maxlen: 48
                          2406:7400:3d::/48 maxlen: 48
                          2406:7400:48::/48 maxlen: 48
                          2406:7400:ff00::/48 maxlen: 48
                          2406:7400:ff01::/48 maxlen: 48
                          2406:7400:ff02::/48 maxlen: 48
                          2406:7400:ff03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4561 (0x11d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
        Validity
            Not Before: Nov 27 10:05:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4876a-d1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:f9:7f:d3:53:9a:cf:b2:53:ea:97:d8:65:
                    d1:c5:00:69:9d:c3:be:4d:fe:d9:69:25:d7:1d:be:
                    6a:6c:a0:f3:59:4f:33:d7:4f:f3:d6:d8:2a:fa:6c:
                    a0:ce:47:c4:7e:97:d7:30:97:28:59:0a:c7:2b:e8:
                    1a:18:04:4f:ec:24:71:7f:86:ea:93:a6:ce:ae:3c:
                    ba:e5:45:00:97:85:c1:40:51:68:3f:98:c0:79:1c:
                    58:79:8a:f2:bc:b4:9e:af:0d:1f:8c:cd:58:b4:75:
                    e4:cf:4e:fb:f8:8b:39:80:73:8c:b0:b1:09:9c:cc:
                    b5:bf:b0:3d:a3:70:cb:2b:8c:c6:75:8a:f4:26:12:
                    1e:4a:29:02:b8:36:43:6b:c8:6e:1c:a3:61:9a:ff:
                    71:fc:84:d1:5d:f1:5a:c8:c5:71:fc:e8:90:3a:f8:
                    23:61:60:3a:f1:a6:9b:24:59:ee:1c:9c:bf:ec:05:
                    d3:bc:83:97:e3:31:8e:bd:f9:93:70:89:a6:a6:fb:
                    28:3e:8d:30:53:6a:54:8b:cd:38:7b:d1:7d:78:41:
                    0d:ec:73:6f:97:ce:95:bd:b7:43:44:5e:d6:dd:1e:
                    0e:ad:85:f4:2c:72:55:18:2f:67:c2:29:b1:62:1d:
                    50:c6:8d:3e:25:b7:a6:df:02:0f:7b:0e:9d:00:ce:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DC:0D:99:AF:B4:76:38:7F:CF:A0:FC:82:65:D5:49:BE:84:CF:28
            X509v3 Authority Key Identifier:
                keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/26DA1E16247411EA8E1A1178C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.204.0.0/18
                  49.204.96.0-49.204.223.255
                  49.204.232.0/21
                  49.205.0.0/18
                  49.205.66.0/23
                  49.205.88.0/22
                  49.205.96.0/20
                  49.205.128.0-49.205.168.255
                  49.205.208.0/21
                  49.206.112.0/21
                  49.206.128.0/18
                  49.207.16.0/20
                  49.207.44.0/24
                  49.207.64.0/18
                  49.207.192.0/18
                  106.51.4.0/24
                  106.51.6.0/24
                  106.51.44.0/24
                  106.51.48.0/22
                  106.51.113.0-106.51.114.255
                  106.51.124.0/23
                  106.51.152.0-106.51.157.255
                  106.51.160.0/19
                  106.51.255.0/24
                  124.123.24.0-124.123.26.255
                  124.123.60.0/22
                  124.123.94.0/23
                  124.123.124.0-124.123.159.255
                  124.123.216.0-124.123.255.255
                  183.82.1.0-183.82.15.255
                  183.82.64.0/19
                  183.82.160.0-183.82.179.255
                  183.82.204.0-183.82.239.255
                  183.82.250.0/23
                  183.83.0.0/19
                  183.83.33.0/24
                  183.83.35.0/24
                  183.83.48.0/24
                  183.83.96.0/19
                  183.83.148.0/22
                  183.83.156.0/22
                  183.83.184.0/21
                  183.83.240.0/22
                  183.83.247.0/24
                  202.83.27.0-202.83.28.255
                  202.83.30.0/23
                IPv6:
                  2406:7400:30::/47
                  2406:7400:34::/47
                  2406:7400:38::-2406:7400:3d:ffff:ffff:ffff:ffff:ffff
                  2406:7400:48::/48
                  2406:7400:ff00::/46

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:80:6d:0b:23:35:62:51:cb:00:65:05:ed:d5:d3:88:2d:
         1b:4b:04:ac:41:b0:5f:ab:2d:27:b3:68:82:5a:67:07:49:b7:
         37:0a:11:6a:da:2e:97:32:17:e0:7c:0f:c1:bd:d1:55:09:80:
         e9:db:e9:17:d9:7d:b8:68:0d:39:91:74:e1:05:a3:77:dc:28:
         36:66:53:13:51:54:b1:c2:63:77:9e:c5:c0:f1:2c:74:ff:67:
         d4:1c:b5:19:44:96:02:19:99:98:18:49:26:8e:6f:4c:95:5b:
         02:35:68:f5:7f:24:d2:7e:c9:91:29:6b:12:45:0e:ed:1a:c6:
         4a:91:3a:ec:d7:6d:04:e8:a4:53:ab:4b:0b:b0:70:05:92:b7:
         7d:6b:03:60:62:8c:9c:62:90:b5:11:e1:0a:84:a0:d8:8a:84:
         bd:ff:e0:b9:88:da:f3:55:72:b4:4f:bd:06:c3:1a:78:7d:7a:
         b5:02:c5:ff:d5:b0:22:62:81:60:6c:bf:9d:02:33:35:6c:71:
         e6:87:d0:cf:65:2c:ce:19:eb:dd:6f:a7:d5:99:7e:2a:38:ff:
         8f:46:cc:2a:e3:5d:26:74:04:1b:b0:75:d0:c5:d2:05:2e:3a:
         ef:5e:f4:6a:79:eb:36:50:09:e6:bb:b5:4f:d2:af:ab:ce:5a:
         7e:70:fe:b0
-----BEGIN CERTIFICATE-----
MIIG6zCCBdOgAwIBAgICEdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDcxNTYxMTAvBgNVBAUTKDAzNDZCNjM0RjI2M0Y2MzY4NDIzOURCNkRGNjRCQkJB
Q0RGN0Y4QTQwHhcNMjUxMTI3MTAwNTE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODc2YS1kMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvef5f9NTms+yU+qX2GXRxQBpncO+Tf7ZaSXXHb5qbKDzWU8z10/z1tgq+myg
zkfEfpfXMJcoWQrHK+gaGARP7CRxf4bqk6bOrjy65UUAl4XBQFFoP5jAeRxYeYry
vLSerw0fjM1YtHXkz077+Is5gHOMsLEJnMy1v7A9o3DLK4zGdYr0JhIeSikCuDZD
a8huHKNhmv9x/ITRXfFayMVx/OiQOvgjYWA68aabJFnuHJy/7AXTvIOX4zGOvfmT
cImmpvsoPo0wU2pUi804e9F9eEEN7HNvl86VvbdDRF7W3R4OrYX0LHJVGC9nwimx
Yh1Qxo0+Jbem3wIPew6dAM7TLwIDAQABo4IEDzCCBAswHQYDVR0OBBYEFG7cDZmv
tHY4f8+g/IJl1Um+hM8oMB8GA1UdIwQYMBaAFANGtjTyY/Y2hCOdtt9ku7rN9/ik
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzE1Ni9COUYwODQ0Q0Yy
M0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlqYUVJNTIyMzJTN3VzMzMt
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EwYTJOUEpqOWphRUk1MjIzMlM3dXMzMy1LUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDcxNTYvQjlGMDg0NENGMjNEMTFFOUFGODQyNzI0QzRGOUFFMDIvMjZEQTFFMTYy
NDc0MTFFQThFMUExMTc4QzRGOUFFMDIucm9hMIIBzAYIKwYBBQUHAQcBAf8EggG7
MIIBtzCCAXMEAgABMIIBawMEBjHMADAMAwQFMcxgAwQFMczAAwQDMczoAwQGMc0A
AwQBMc1CAwQCMc1YAwQEMc1gMAwDBAcxzYADBAAxzagDBAMxzdADBAMxznADBAYx
zoADBAQxzxADBAAxzywDBAYxz0ADBAYxz8ADBABqMwQDBABqMwYDBABqMywDBAJq
MzAwDAMEAGozcQMEAGozcgMEAWozfDAMAwQDajOYAwQBajOcAwQFajOgAwQAajP/
MAwDBAN8exgDBAB8exoDBAJ8ezwDBAF8e14wDAMEAnx7fAMEBXx7gDALAwQDfHvY
AwMCfHgwDAMEALdSAQMEBLdSAAMEBbdSQDAMAwQFt1KgAwQCt1KwMAwDBAK3UswD
BAS3UuADBAG3UvoDBAW3UwADBAC3UyEDBAC3UyMDBAC3UzADBAW3U2ADBAK3U5QD
BAK3U5wDBAO3U7gDBAK3U/ADBAC3U/cwDAMEAMpTGwMEAMpTHAMEAcpTHjA+BAIA
AjA4AwcBJAZ0AAAwAwcBJAZ0AAA0MBIDBwMkBnQAADgDBwEkBnQAADwDBwAkBnQA
AEgDBwIkBnQA/wAwDQYJKoZIhvcNAQELBQADggEBAKzQgG0LIzViUcsAZQXt1dOI
LRtLBKxBsF+rLSezaIJaZwdJtzcKEWraLpcyF+B8D8G90VUJgOnb6RfZfbhoDTmR
dOEFo3fcKDZmUxNRVLHCY3eexcDxLHT/Z9QctRlElgIZmZgYSSaOb0yVWwI1aPV/
JNJ+yZEpaxJFDu0axkqROuzXbQTopFOrSwuwcAWSt31rA2BijJxikLUR4QqEoNiK
hL3/4LmI2vNVcrRPvQbDGnh9erUCxf/VsCJigWBsv50CMzVsceaH0M9lLM4Z691v
p9WZfio4/49GzCrjXSZ0BBuwddDF0gUuOu9e9Gp56zZQCea7tU/Sr6vOWn5w/rA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:53 2026 by rpki-client