Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E0545560A69911F19356F80F3411F970.roa
File:                     E0545560A69911F19356F80F3411F970.roa (raw, json)
Hash identifier:          SjYLGZr4+ZOZ/u3aSGi0yftLThB18UNy/uh/0relhEs=
Subject key identifier:   03:08:D6:32:0F:6A:5B:41:65:3F:27:2A:BF:FE:48:75:A5:88:21:BF
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       23C7
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E0545560A69911F19356F80F3411F970.roa
Signing time:             Wed 02 Sep 2026 06:45:25 +0000
ROA not before:           Wed 02 Sep 2026 06:45:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134128
IP address blocks:        59.153.28.0/23 maxlen: 24
                          2402:3b80::/32 maxlen: 32
                          2402:3b80::/48 maxlen: 48
                          2402:3b80:1::/48 maxlen: 48
                          2402:3b80:2::/48 maxlen: 48
                          2402:3b80:3::/48 maxlen: 48
                          2402:3b80:4::/48 maxlen: 48
                          2402:3b80:5::/48 maxlen: 48
                          2402:3b80:6::/48 maxlen: 48
                          2402:3b80:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9159 (0x23c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Sep  2 06:45:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a97c605-45d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:f1:ea:39:82:49:15:ba:fb:98:ee:77:3a:
                    21:c1:5b:00:a9:1d:d5:ac:29:fd:db:18:54:da:99:
                    e4:66:55:73:62:6c:64:ab:66:4d:37:31:6e:1a:87:
                    ea:05:90:21:32:61:46:54:d3:86:a8:bb:4e:cd:3b:
                    9c:01:f1:58:2d:49:67:ae:79:13:e2:56:40:83:69:
                    1e:06:de:4c:08:25:96:4a:62:3f:0d:5f:31:9a:f1:
                    ac:15:99:e1:53:de:0b:df:29:69:35:4e:4e:50:2f:
                    c2:3a:eb:fd:38:da:bc:fd:8c:f9:04:98:08:b6:bc:
                    54:72:21:e8:46:65:a0:bc:68:9a:7f:bb:67:5e:df:
                    60:62:d3:e9:49:c5:05:85:10:fd:7f:d3:1e:6e:66:
                    c5:d8:f6:7e:16:9a:34:73:bc:6b:8a:97:e9:eb:ea:
                    d6:64:8c:8f:18:36:a6:9f:1e:79:68:80:71:8d:2c:
                    86:00:da:52:df:51:b5:d4:78:da:7d:87:b5:1e:33:
                    c4:ff:f7:ea:ca:75:72:3e:28:7c:41:dd:04:26:e5:
                    8c:12:b8:bd:53:d8:38:51:63:73:8f:b6:43:4a:8a:
                    79:32:e3:4d:d9:e8:2c:66:fd:8f:73:aa:2a:92:b8:
                    f9:a6:38:c5:89:25:c6:f2:56:ec:25:04:00:42:10:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:08:D6:32:0F:6A:5B:41:65:3F:27:2A:BF:FE:48:75:A5:88:21:BF
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E0545560A69911F19356F80F3411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.28.0/23
                IPv6:
                  2402:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:0d:5d:a9:27:b2:62:86:ca:b2:7f:01:b3:76:b3:aa:70:b6:
         ac:12:27:77:ac:ab:c2:02:84:69:ee:cd:59:63:03:6e:fb:6c:
         d3:ee:db:af:60:c9:10:a1:e7:b6:45:a7:da:19:44:15:c6:ad:
         2b:31:05:6c:9a:6d:16:49:a1:72:8d:1e:fc:36:cd:04:9a:7e:
         f4:3f:f4:4d:f0:a7:e6:4c:d8:0e:7f:53:9a:b1:58:d0:1a:f2:
         c8:fa:36:79:de:ac:79:ed:fa:68:45:4e:83:3e:7e:5b:0d:5f:
         1c:69:bc:5d:32:43:a4:9b:4e:bf:c9:10:cc:1e:d0:c7:7b:2b:
         7e:06:cc:cc:f4:be:a3:5f:7f:6a:8b:91:87:2e:40:58:c5:8d:
         59:80:b6:4c:93:38:16:be:ea:4e:d7:40:bc:da:33:0d:b6:fb:
         60:28:43:5e:ed:f9:fd:f5:dc:dd:1e:f9:5c:d4:1d:77:49:ec:
         33:1b:bc:54:db:ee:5c:1d:6c:7c:0b:f1:55:cf:2a:1e:ee:1a:
         5e:d4:a8:71:b2:62:37:24:b8:82:fb:ab:07:47:31:51:87:bd:
         61:08:c4:0f:c0:0a:a2:71:8f:7e:78:41:c5:02:7c:6d:76:49:
         b0:8a:3a:60:48:05:01:76:31:c3:62:f1:06:72:1a:91:fd:7a:
         ed:71:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:41 2026 by rpki-client