Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa
File:                     53E9C44CFB2E11EFB488A95EC4F9AE02.roa (raw, json)
Hash identifier:          MuoY/HANEoSOUnddWlGk1c4k/GyWTmR3vLKDle/56lc=
Subject key identifier:   F1:2F:3E:9E:67:0A:FC:C8:85:6C:CB:5D:F3:53:B1:43:D9:3B:44:9A
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       CA
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:19:26 +0000
ROA not before:           Tue 27 Jan 2026 05:28:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133588
IP address blocks:        103.237.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: Jan 27 05:28:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4670e-78c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:cc:ee:46:72:32:dd:1c:6f:64:32:a6:b4:
                    f0:a0:fe:3e:69:07:ac:fb:9e:45:e3:3b:2c:41:66:
                    74:86:d7:13:ef:ea:04:9e:b5:a7:7d:bc:fe:a4:41:
                    1e:81:85:c3:5b:81:a4:41:32:1a:6c:92:55:32:f4:
                    be:5b:aa:53:43:e0:82:66:a7:f2:9c:a1:4f:1b:16:
                    92:26:65:27:d0:91:6b:e4:7e:9b:ac:0e:2b:73:21:
                    0a:02:a4:15:da:b4:d3:ae:df:ce:7d:d9:f6:d3:56:
                    12:54:be:8a:6c:51:b3:84:4a:8a:92:57:26:dd:17:
                    cd:6e:f5:48:20:5b:18:65:dc:b1:14:e1:1f:1f:9d:
                    eb:10:7f:8d:f2:42:74:b7:7b:c8:9b:6b:78:57:93:
                    17:bb:1b:49:bd:84:0e:ae:f5:00:1e:5e:fc:5c:cd:
                    d6:68:65:ce:a2:9c:44:3f:93:51:0a:51:ce:35:7c:
                    db:71:b6:0c:39:f2:45:74:1e:e2:9a:b6:27:3c:6e:
                    4b:39:13:be:ea:a0:eb:83:83:59:84:ce:57:d7:41:
                    75:13:e9:3b:90:bd:9c:b6:00:85:9e:a9:d2:d7:88:
                    76:fa:92:d2:15:72:5e:34:ad:98:3d:32:4a:3b:94:
                    07:02:4f:62:7c:99:ca:69:a6:5f:77:cd:3e:63:96:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2F:3E:9E:67:0A:FC:C8:85:6C:CB:5D:F3:53:B1:43:D9:3B:44:9A
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:b4:ab:4d:40:5d:7d:6c:eb:0d:10:5f:cb:41:38:d5:d9:
         04:b0:47:ce:97:6e:4b:97:e1:f2:64:77:eb:9e:3e:0b:99:a2:
         3c:b0:07:26:5c:49:9f:61:43:70:b1:cf:2f:e3:8d:cb:20:4f:
         48:ff:fe:99:df:57:88:b7:17:fe:d3:82:9a:cb:94:f3:dd:ed:
         26:d0:ea:85:ba:38:15:26:8b:85:a4:16:77:a5:61:8e:db:f8:
         90:47:1b:bf:f3:b3:79:75:66:76:08:4d:9d:4f:5c:04:52:46:
         2f:6f:0e:1f:6d:3f:ad:96:28:cc:c1:df:08:6c:60:6b:c7:9f:
         32:df:d2:6c:1a:00:c9:da:4b:27:a0:47:7d:a4:5f:d8:ae:fb:
         5a:00:d3:8a:d6:c0:82:a2:49:f1:1d:c9:5c:2f:04:4e:84:8b:
         77:74:70:cd:a5:9b:ee:fb:fe:55:7b:58:87:ba:d3:86:b9:94:
         8a:83:22:ca:49:d6:03:18:08:7c:19:fd:6c:58:30:67:2c:d2:
         54:1d:63:c0:83:c7:7a:33:72:2c:85:2f:b6:81:eb:2b:5c:ba:
         1a:8b:4a:c4:3f:99:9e:95:1a:f4:13:80:1b:bc:1b:d0:c1:af:
         93:7a:ba:0f:04:95:7f:f3:b0:d3:83:1f:0e:d0:2b:68:2d:41:
         ae:fa:f6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:13 2026 by rpki-client