Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
File:                     53B6182C213611EAB9F02B49C4F9AE02.roa (raw, json)
Hash identifier:          izUY6Ae+sLj52/D7TtSNZYQNZ3frnApzUhW5/pak4xw=
Subject key identifier:   42:BE:25:5F:3E:73:EE:47:E3:DC:EA:8E:B2:3A:61:A3:F5:FA:5C:30
Certificate issuer:       /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial:       0C50
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:43:22 +0000
ROA not before:           Thu 18 Sep 2025 19:29:35 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     58983
IP address blocks:        45.119.160.0/22 maxlen: 22
                          45.119.160.0/23 maxlen: 23
                          45.119.160.0/24 maxlen: 24
                          45.119.161.0/24 maxlen: 24
                          45.119.162.0/23 maxlen: 23
                          45.119.162.0/24 maxlen: 24
                          45.119.163.0/24 maxlen: 24
                          103.240.176.0/22 maxlen: 22
                          103.240.176.0/23 maxlen: 23
                          103.240.176.0/24 maxlen: 24
                          103.240.177.0/24 maxlen: 24
                          103.240.178.0/23 maxlen: 23
                          103.240.178.0/24 maxlen: 24
                          103.240.179.0/24 maxlen: 24
                          2400:5880::/32 maxlen: 32
                          2400:5880::/33 maxlen: 33
                          2400:5880:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
        Validity
            Not Before: Sep 18 19:29:35 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4508a-7a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:2f:5e:69:92:37:54:26:4b:a1:ce:5f:84:
                    c1:9e:e9:dc:61:61:22:84:fe:22:09:2a:84:df:c2:
                    35:f8:a0:fb:2e:f1:fc:bb:90:7a:1d:e3:96:02:dd:
                    b3:aa:3b:71:91:1c:04:cf:dd:e0:29:b7:4d:a7:89:
                    de:5a:60:83:fa:3c:d7:2f:48:aa:5c:44:14:b6:29:
                    58:a5:d1:0e:c9:a2:ef:46:33:af:a8:95:48:fe:5b:
                    48:f5:04:18:36:53:80:2f:42:73:35:b7:36:0b:06:
                    10:72:57:03:f3:d0:cc:e5:c6:e3:92:b2:aa:71:a8:
                    1d:c6:fd:ee:ab:54:48:9f:16:7f:fe:3d:e0:49:72:
                    8c:de:7b:66:72:11:b8:dd:f0:cd:c6:ef:a3:24:bc:
                    bf:89:e7:07:31:39:dd:81:bb:c1:64:46:50:3d:fc:
                    8d:60:38:14:13:bf:cf:a6:61:ed:25:6e:8e:f5:2a:
                    ee:2e:b6:67:f3:f4:b6:18:3d:45:79:d9:7f:10:cd:
                    71:62:b9:69:d4:d8:43:fe:c7:15:31:97:ac:20:66:
                    3e:a1:15:3d:7e:f0:8f:40:83:9f:96:be:51:af:3d:
                    71:bb:7e:85:af:6a:d0:1c:ce:50:05:3e:4d:16:00:
                    c7:02:fc:d8:3b:ed:bd:7b:d2:87:24:88:4a:55:71:
                    97:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:25:5F:3E:73:EE:47:E3:DC:EA:8E:B2:3A:61:A3:F5:FA:5C:30
            X509v3 Authority Key Identifier:
                keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.160.0/22
                  103.240.176.0/22
                IPv6:
                  2400:5880::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:aa:0d:ae:a4:71:d7:3b:d3:86:09:11:66:0b:06:31:1b:4d:
         6c:d4:8e:06:f6:66:f3:6a:c8:1a:e3:fb:ea:d0:f3:c1:51:a0:
         18:db:99:f5:a4:33:83:ab:36:2f:81:cb:75:f1:89:37:da:bb:
         d5:7b:67:f5:e7:60:b7:8a:fa:62:40:28:33:90:9b:93:a2:40:
         ea:fb:86:58:5a:76:26:3d:74:d3:77:a6:d7:5c:dd:fd:b8:d4:
         26:33:19:d4:99:6a:4e:9e:8d:e4:1e:c1:94:3d:5b:fa:43:f0:
         6b:d1:ce:ff:b9:a6:da:86:e5:a0:31:12:cf:4e:4c:ea:17:75:
         ab:03:f5:56:15:29:f2:fe:84:f7:a6:8c:b7:be:6d:b4:f1:7a:
         39:fb:0c:cc:ea:9b:fd:1f:72:12:5b:d7:07:2d:f6:b6:68:69:
         8b:d8:3d:3f:d9:ef:d2:0b:68:a0:2c:65:77:56:7e:cc:f5:ae:
         6b:50:13:1d:e3:23:fb:2b:16:9c:f8:93:f1:3f:6e:84:ca:ef:
         65:88:14:2e:bc:11:5e:ad:ba:93:08:f4:ea:d1:20:2d:0a:49:
         cb:d6:09:c9:d1:74:fe:99:01:a9:31:fc:57:63:f3:11:f2:58:
         9e:4f:72:95:c9:d3:68:6c:da:41:ff:fa:a7:b0:b3:74:b8:a2:
         39:37:1e:bf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF
NTUzNjUwMTQwHhcNMjUwOTE4MTkyOTM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTA4YS03YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjcvXmmSN1QmS6HOX4TBnuncYWEihP4iCSqE38I1+KD7LvH8u5B6HeOWAt2z
qjtxkRwEz93gKbdNp4neWmCD+jzXL0iqXEQUtilYpdEOyaLvRjOvqJVI/ltI9QQY
NlOAL0JzNbc2CwYQclcD89DM5cbjkrKqcagdxv3uq1RInxZ//j3gSXKM3ntmchG4
3fDNxu+jJLy/iecHMTndgbvBZEZQPfyNYDgUE7/PpmHtJW6O9SruLrZn8/S2GD1F
edl/EM1xYrlp1NhD/scVMZesIGY+oRU9fvCPQIOflr5Rrz1xu36Fr2rQHM5QBT5N
FgDHAvzYO+29e9KHJIhKVXGXzwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEK+JV8+
c+5H49zqjrI6YaP1+lwwMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx
MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODVDRjMvNEJERDUxOEUyMTM1MTFFQUJFNDg4NzQ3QzRGOUFFMDIvNTNCNjE4MkMy
MTM2MTFFQUI5RjAyQjQ5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLXegAwQCZ/CwMA0EAgACMAcDBQAkAFiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBXqg2upHHXO9OGCRFmCwYxG01s1I4G9mbzasga4/vq0PPBUaAY25n1pDOD
qzYvgct18Yk32rvVe2f152C3ivpiQCgzkJuTokDq+4ZYWnYmPXTTd6bXXN39uNQm
MxnUmWpOno3kHsGUPVv6Q/Br0c7/uabahuWgMRLPTkzqF3WrA/VWFSny/oT3poy3
vm208Xo5+wzM6pv9H3ISW9cHLfa2aGmL2D0/2e/SC2igLGV3Vn7M9a5rUBMd4yP7
Kxac+JPxP26Eyu9liBQuvBFerbqTCPTq0SAtCknL1gnJ0XT+mQGpMfxXY/MR8lie
T3KVydNobNpB//qnsLN0uKI5Nx6/
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:48 2026 by rpki-client