Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/70A100D08ED811F09914A14BC4F9AE02.roa
File:                     70A100D08ED811F09914A14BC4F9AE02.roa (raw, json)
Hash identifier:          Li2fE8/3ocJiewIzAt3DcJuVmxmoC7Pg9P3fvagNkFo=
Subject key identifier:   EA:CA:B6:61:E2:FD:44:AE:53:DD:D5:0D:B6:F2:7B:CD:08:AB:C8:6E
Certificate issuer:       /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial:       0245
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/70A100D08ED811F09914A14BC4F9AE02.roa
Signing time:             Mon 13 Apr 2026 04:38:09 +0000
ROA not before:           Mon 13 Apr 2026 04:38:09 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     851
IP address blocks:        103.53.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
                          rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
        Validity
            Not Before: Apr 13 04:38:09 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69dc7331-29ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:8c:13:ae:27:af:46:37:da:75:e4:01:62:
                    b5:dd:05:13:9e:f8:7a:f8:a2:38:ba:24:8b:2c:e9:
                    05:ea:33:d7:9f:62:80:20:6f:c5:cb:c8:bb:82:dd:
                    c5:67:fe:6e:d6:b9:1b:0e:af:cf:b6:5d:9c:1d:ec:
                    48:82:81:32:cd:fc:b9:7b:4b:f9:2f:49:b8:01:6f:
                    74:47:88:03:be:38:af:7d:a1:da:77:fe:96:3b:7d:
                    65:e4:c6:cc:b1:15:bd:c8:b4:78:a7:9a:f4:67:c1:
                    4f:46:38:34:42:57:5d:76:38:ae:d1:6a:ae:d4:8f:
                    26:55:0c:28:1b:5c:41:c0:01:ec:92:67:bd:06:96:
                    02:de:1f:5d:42:11:fc:8e:47:a7:1f:ed:6a:f4:fb:
                    10:c9:ee:6b:ab:cb:65:3a:ba:56:77:e3:2d:19:6b:
                    8b:ae:3a:e5:88:95:7e:15:33:91:4e:63:31:19:b9:
                    ea:13:41:88:b2:51:eb:00:15:dc:e8:8b:24:5e:14:
                    9a:98:a7:b2:4f:fa:21:26:2a:50:9f:e6:30:33:c6:
                    ee:92:b4:bd:73:cc:56:8e:d0:2c:98:77:f3:ac:b5:
                    1b:6d:54:9b:8b:bc:42:eb:0f:72:2f:ff:20:45:6b:
                    63:b7:be:33:47:1b:bd:c4:58:d4:32:df:b6:e7:0e:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:B6:61:E2:FD:44:AE:53:DD:D5:0D:B6:F2:7B:CD:08:AB:C8:6E
            X509v3 Authority Key Identifier:
                keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/70A100D08ED811F09914A14BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:75:8c:4a:1d:06:66:90:42:4c:12:9d:54:af:3a:f0:24:77:
         2e:35:72:ae:a0:16:f4:f3:db:fa:bb:0b:6f:bc:a6:95:bd:48:
         6f:03:0b:a5:09:c0:c0:b0:70:ac:ea:51:e1:55:9c:82:0f:92:
         9a:94:e0:07:92:3d:89:e5:13:49:2e:16:df:3a:ac:77:28:d3:
         ea:6c:67:c0:cc:52:73:3c:b9:ee:a8:cf:d2:1b:63:75:c4:f2:
         32:5c:b7:ec:06:15:3b:8b:60:5d:06:ff:b4:ea:7e:6b:eb:b4:
         60:f9:ab:08:05:9e:1f:08:9d:3c:14:0b:de:62:b7:7c:ed:c2:
         d0:f9:6e:82:c7:db:50:fe:6b:e9:36:05:96:52:35:fe:fe:77:
         32:10:0f:5d:40:c6:6c:7e:15:03:be:ac:1f:a2:e2:09:2b:a0:
         bd:63:01:e3:5f:fb:5c:30:d8:33:0e:c8:a3:15:a6:8a:14:69:
         27:2a:ca:c4:53:de:43:59:2e:d8:76:b3:4e:ae:7e:e6:22:89:
         16:5e:a5:c0:d1:93:42:31:77:32:de:f9:01:77:41:58:ad:53:
         2f:24:46:9b:3d:d1:61:05:7f:4d:62:ea:80:fc:0b:e0:28:48:
         78:04:92:9e:09:35:4b:05:4c:6c:57:ae:07:0f:19:7a:2e:8b:
         ea:ad:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:34 2026 by rpki-client