Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D36E1CE02A3211EFA7554C59C4F9AE02.roa
File:                     D36E1CE02A3211EFA7554C59C4F9AE02.roa (raw, json)
Hash identifier:          s6TGCCNMojg+eyCd+4yo25OhfEDNNwbNEyznpNQc+pk=
Subject key identifier:   EA:D0:17:CF:35:50:4F:CB:4F:64:59:C6:8F:90:E4:9E:F1:3F:C9:3E
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       099B
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D36E1CE02A3211EFA7554C59C4F9AE02.roa
Signing time:             Sat 10 Oct 2026 22:43:51 +0000
ROA not before:           Sat 10 Oct 2026 22:43:51 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     141750
IP address blocks:        163.53.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 22:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct 10 22:43:51 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acabfa7-286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:82:27:00:d5:ec:fe:da:3e:1a:6c:56:b7:
                    1f:5f:e6:f9:52:5d:c8:85:70:da:5a:43:12:e0:d0:
                    61:40:60:29:f7:66:0a:f8:04:d8:8a:ed:ed:fa:de:
                    8c:36:23:9e:99:72:02:e8:9a:ff:20:cd:b1:07:33:
                    15:7e:ee:84:cc:8f:2d:35:e1:3d:5e:f1:3e:d3:99:
                    99:12:3a:e4:bc:0f:c4:5b:d5:55:d6:eb:e5:4e:72:
                    2e:15:de:97:53:cf:f6:04:80:0c:3d:a4:54:04:c0:
                    29:36:21:95:5a:41:3b:4b:d2:6f:c1:cf:6a:cf:d2:
                    90:72:6b:1b:2f:93:77:6d:0d:ec:01:4c:09:5c:e0:
                    97:79:a3:ee:bd:e0:58:fc:61:aa:7b:f9:69:1f:58:
                    83:e9:6f:00:73:1d:73:c2:82:0d:8a:d5:7d:32:5a:
                    18:d2:04:5c:c5:f9:39:5b:9e:45:e9:56:b4:df:b0:
                    53:26:b3:aa:2b:07:45:f1:01:2f:07:8c:ed:84:f7:
                    99:82:af:99:a9:4c:f0:d0:d1:5e:9d:f2:b3:df:f7:
                    db:0b:d1:37:9c:68:4e:da:d8:32:01:79:cb:54:f8:
                    62:4f:ef:22:ec:63:6f:86:a8:9a:92:2a:a8:dc:21:
                    5a:42:8e:c3:30:82:af:a8:16:d9:a8:a1:56:ae:17:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D0:17:CF:35:50:4F:CB:4F:64:59:C6:8F:90:E4:9E:F1:3F:C9:3E
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D36E1CE02A3211EFA7554C59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:e3:07:d3:65:1d:29:e1:82:7a:28:4e:61:12:19:5c:70:
         5a:63:5e:ca:fc:e5:b8:c3:ab:9f:21:e9:b5:13:d2:38:35:b0:
         59:b7:ac:22:53:b2:0c:c7:c2:ed:86:18:78:21:31:a4:c4:81:
         62:b6:05:40:ae:c9:07:f6:28:af:52:77:3d:a6:6a:12:d3:e4:
         56:3f:59:c7:74:57:7f:bb:8a:ec:03:51:ae:39:75:b8:61:5e:
         1d:7c:1c:8a:dc:2a:8c:65:7e:ea:90:4c:42:b3:5c:9c:fe:14:
         06:5b:76:7c:24:46:78:4f:80:29:db:c2:f9:a7:1d:b0:f5:22:
         4a:81:e2:fa:fc:46:e7:08:84:75:8b:41:a3:b1:a6:aa:1c:3c:
         a0:f5:e7:cd:43:b2:0e:99:df:1d:56:82:92:13:03:10:98:5f:
         03:0a:3a:e0:4c:0e:25:a4:5a:37:5f:ea:97:9e:0a:a5:7c:79:
         f5:34:73:55:89:c9:9d:d3:d5:ba:db:54:bb:c2:ba:7c:4b:0a:
         63:1d:7a:34:26:17:e5:6a:a5:60:46:bd:ec:bc:77:9a:aa:7b:
         9c:2e:2a:c7:19:fd:31:d8:17:65:d2:7f:50:b3:d9:3d:ed:31:
         18:de:1b:d7:ec:14:57:72:2f:3e:d5:73:4d:98:4d:02:92:8c:
         53:a6:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:16:15 2026 by rpki-client