Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/E53A0A54450911EBBA450A64C4F9AE02.roa
File:                     E53A0A54450911EBBA450A64C4F9AE02.roa (raw, json)
Hash identifier:          QsNfjyBldTeeXZxbYWBlEhOqNtrvsHdGyA494jCXWak=
Subject key identifier:   DB:CE:08:D8:9E:93:CF:93:E7:97:F9:AD:66:85:C3:BC:35:C7:97:D3
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       1419
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/E53A0A54450911EBBA450A64C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:56:22 +0000
ROA not before:           Mon 02 Feb 2026 15:11:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141180
IP address blocks:        167.179.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5145 (0x1419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Feb  2 15:11:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47dc5-5b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:a4:bd:ec:5e:84:01:d6:cc:f2:59:81:2d:
                    40:1f:02:37:72:65:93:54:75:e9:f0:01:3e:21:1f:
                    55:da:c4:f7:3c:e1:2e:4f:61:33:1a:d8:08:ff:80:
                    0e:f3:56:e5:2d:31:f2:0a:20:2b:2d:ce:d9:f1:21:
                    bc:e2:8f:1a:c0:ec:9f:48:96:b3:31:be:5a:29:12:
                    e1:d9:e8:41:39:a2:cd:63:9f:fb:1c:c6:86:ea:47:
                    f6:1f:48:e0:2b:51:a2:ca:a3:bb:eb:91:75:28:77:
                    22:f9:3d:8c:e2:b2:61:d2:45:c6:c4:13:ae:56:cf:
                    6b:df:75:75:ef:48:c2:70:7d:c3:76:fc:67:d2:df:
                    b3:6f:72:dc:52:62:36:fa:1f:cb:37:3e:cc:d6:06:
                    fc:7a:96:a7:43:d7:09:29:89:e6:0a:49:2f:c6:62:
                    1e:6e:89:73:39:8d:78:78:d5:d2:43:1e:ff:dd:22:
                    95:57:76:8a:0d:f7:00:37:fc:22:c9:5f:03:1a:7f:
                    18:39:b5:53:96:67:fd:70:05:95:84:d0:7c:ad:d2:
                    d3:17:dd:e2:d0:0b:a9:35:f7:3e:bf:32:33:88:ae:
                    45:8d:ae:b1:ae:3d:41:66:b0:79:f3:9d:55:f1:f2:
                    23:89:7a:09:b4:5d:05:40:1a:79:c5:4c:a1:9c:be:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:08:D8:9E:93:CF:93:E7:97:F9:AD:66:85:C3:BC:35:C7:97:D3
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/E53A0A54450911EBBA450A64C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:26:da:07:0f:bb:aa:0c:ff:d2:6d:7a:7a:c8:80:5e:c5:
         27:18:36:3a:7a:c2:f0:0c:7f:53:70:63:72:86:0c:ac:3e:c9:
         64:58:db:bf:6d:8f:79:c5:63:e6:62:9d:60:61:8c:b3:5b:70:
         c7:e0:fa:0f:3e:cf:bb:30:e9:c6:bf:ad:02:e6:e9:41:a6:9e:
         84:b7:85:f8:07:62:3a:25:9f:ff:54:ce:e5:1c:2a:a5:3e:38:
         6a:27:39:18:96:ab:d9:e3:b9:2a:a8:7b:48:c9:e8:f4:92:e5:
         dd:09:0d:9a:4e:8d:34:cd:e6:10:ca:20:12:fd:aa:dc:e4:ae:
         40:8f:af:16:6f:a5:2e:9f:1b:ff:90:fc:7b:6c:c2:3f:2e:01:
         1c:1b:f8:8c:45:55:7a:6a:72:95:c7:a9:62:25:4e:67:a0:93:
         df:bb:3c:30:eb:2a:f9:69:15:86:c7:29:1b:5e:f6:9b:2e:e9:
         a3:c5:2c:14:45:ec:0d:83:ca:62:8d:0c:29:6d:d7:64:00:20:
         c3:f6:78:4a:1b:97:50:ac:33:1f:e7:c9:52:66:31:a0:65:f1:
         b7:c0:bc:26:be:bd:a9:18:d0:92:8c:28:eb:a1:8a:ab:6a:3f:
         e6:46:1c:3e:53:8f:12:b8:61:a5:ae:b9:7a:ff:90:5c:47:1c:
         a4:dd:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:33 2026 by rpki-client