Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/A44814E8EF8411F087F172675F6F56BC.roa
File:                     A44814E8EF8411F087F172675F6F56BC.roa (raw, json)
Hash identifier:          FAPPLKPyuVPEstzxKhq8xMCTFyCQPBtS0uf8CxBtLms=
Subject key identifier:   3F:6A:34:4A:F7:C8:51:26:5A:43:5B:37:95:F0:91:08:92:61:8A:E7
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       2384
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/A44814E8EF8411F087F172675F6F56BC.roa
Signing time:             Thu 04 Jun 2026 16:19:02 +0000
ROA not before:           Thu 04 Jun 2026 16:19:02 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154462
IP address blocks:        59.153.30.0/23 maxlen: 23
                          59.153.30.0/24 maxlen: 24
                          59.153.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9092 (0x2384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Jun  4 16:19:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21a576-f9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:b9:d8:50:81:5a:89:68:e5:97:be:4e:36:
                    11:4f:a0:78:5f:ee:55:56:b8:09:34:2a:dd:aa:91:
                    40:e5:e4:8e:36:08:1f:cd:e2:af:6f:43:79:ef:f2:
                    f7:57:96:cb:58:7e:e8:05:f1:fe:58:3b:84:36:69:
                    38:ec:a8:2f:d2:7a:db:a3:98:2f:95:9c:89:8a:d9:
                    e0:5e:41:32:ab:47:d8:b8:69:04:9a:0b:50:07:70:
                    3b:0e:5b:9b:d0:e5:2b:13:3c:c0:49:8f:a2:2c:7c:
                    c4:fb:7b:eb:36:f1:df:ea:07:cc:cc:50:88:49:18:
                    90:22:7f:4e:ee:ed:dd:f1:0f:de:c7:8d:88:43:10:
                    94:ce:91:e9:e7:00:3d:7f:86:b6:07:ea:c6:a4:e5:
                    1d:29:06:b9:57:c1:a3:55:62:ad:b3:5d:79:80:db:
                    06:48:0f:46:9f:fc:27:6c:3f:31:9c:ca:de:28:3e:
                    80:ac:b0:fd:5f:5e:5a:49:10:01:95:44:0f:7f:27:
                    23:ac:44:44:3b:8b:99:2a:fc:9e:55:c1:72:6b:5b:
                    08:e0:12:39:7e:b9:eb:ff:3d:bc:f7:13:72:b8:81:
                    5c:02:5b:bb:a0:99:3e:b3:fe:01:c5:99:71:9c:df:
                    83:ae:a9:b8:5d:bd:73:6e:6d:b5:18:ae:8d:28:8b:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6A:34:4A:F7:C8:51:26:5A:43:5B:37:95:F0:91:08:92:61:8A:E7
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/A44814E8EF8411F087F172675F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:fd:2b:e2:1b:01:6a:4c:ea:b5:a8:b8:b3:63:fb:89:d7:
         6c:f1:cb:2d:97:ee:26:d3:3d:ce:b3:38:7e:27:95:85:c7:aa:
         f1:75:a9:0a:de:33:28:cb:d9:27:48:54:37:cd:0f:82:8e:1e:
         4d:92:f2:39:e3:ca:08:f7:fa:78:01:2e:4b:8d:5c:2f:94:5b:
         29:cc:2d:93:b7:8b:86:72:c9:17:90:55:5a:b3:93:2d:f9:48:
         2c:d8:00:c3:2a:90:e8:c8:03:81:9c:b6:13:ff:c1:3d:2a:9f:
         cd:f5:89:39:ac:82:22:d8:67:61:7d:66:a1:4d:a7:b1:59:a0:
         d1:ed:c6:e6:6b:23:be:fa:21:54:3f:ad:f0:cf:2c:73:7a:f9:
         9a:00:28:cc:4e:59:4b:27:b7:9e:6f:52:08:d5:9f:ea:f9:32:
         db:50:f5:f5:0d:7a:42:6d:8b:fc:aa:8c:b5:ac:97:8b:dc:82:
         2f:21:7f:7c:18:48:e4:b2:ce:dd:9e:4f:00:1d:aa:9f:dc:ce:
         e4:86:e5:16:de:43:3e:06:21:b4:85:9e:8e:35:20:80:e9:00:
         74:c1:b2:92:9c:0e:d2:67:f6:14:99:0a:83:1b:d0:aa:8e:ad:
         1c:0d:c4:6f:21:85:30:41:19:b3:b0:e9:54:4b:5e:55:bb:dc:
         19:69:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:18 2026 by rpki-client