Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa
File:                     53AA1B3C1B7511F0A0944466C4F9AE02.roa (raw, json)
Hash identifier:          DfkuV9nM3HNeo7drTwq3TAT7e54gjfOZNrgu9TW48Co=
Subject key identifier:   B5:C8:9F:12:61:AB:54:77:AB:5B:0F:E7:84:40:5A:F5:E6:6A:F9:74
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6ED1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:33:42 +0000
ROA not before:           Fri 02 Oct 2026 15:33:42 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153713
IP address blocks:        163.223.152.0/23 maxlen: 23
                          2001:df5:43c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28369 (0x6ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:33:42 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfced6-ec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:28:e1:12:48:48:1d:33:50:86:cd:a1:4e:
                    1b:e5:d8:6b:35:5b:e9:88:29:85:70:33:7b:7f:a9:
                    f7:92:5f:82:fe:5e:f0:a0:43:3c:38:65:9f:cc:3a:
                    30:9b:d6:19:33:4b:25:37:51:08:2f:09:9a:4b:2b:
                    00:3d:5b:71:05:7c:63:33:47:be:50:34:4b:63:cc:
                    10:0c:48:20:62:e5:b9:14:90:af:fd:6f:ed:e5:6d:
                    eb:29:b4:e7:22:2b:76:cd:25:4f:6f:91:e0:fe:b3:
                    d7:90:d4:3c:31:f7:dd:42:62:7d:ff:be:01:9f:b3:
                    b0:64:2b:5f:41:9d:a1:9d:10:4e:a5:47:2d:b3:fa:
                    1a:c7:e3:2e:25:b5:14:1b:65:d1:29:b1:fe:f4:28:
                    e8:d8:44:1f:56:2f:9c:aa:f7:06:d8:15:e6:ac:d6:
                    2b:c9:42:01:b8:cb:fc:62:44:8e:d4:ba:30:96:7c:
                    3f:11:6b:48:3e:62:70:b7:25:85:c6:88:3d:bd:4b:
                    96:46:28:02:16:f4:4e:d5:7f:02:28:ea:c5:9a:e5:
                    cc:62:2c:94:63:7e:70:80:02:f8:f2:63:79:74:19:
                    69:70:4d:a8:a5:c0:2e:0f:5f:ca:1e:f6:1a:43:67:
                    2c:3f:83:20:06:59:c3:ee:62:f1:5f:39:90:2a:f4:
                    51:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:9F:12:61:AB:54:77:AB:5B:0F:E7:84:40:5A:F5:E6:6A:F9:74
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.152.0/23
                IPv6:
                  2001:df5:43c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:90:06:ba:b7:8a:d8:e9:f1:dc:54:a9:04:10:a8:88:c0:43:
         43:22:e0:26:86:f0:01:30:f5:9f:c5:8b:ba:05:7d:68:b6:e5:
         2a:f9:40:1e:03:cc:cf:6a:eb:a1:a4:34:15:9d:72:13:61:6b:
         8c:66:b4:7c:f6:9f:28:02:8e:11:4b:a0:ca:51:b9:9c:c1:34:
         7e:81:e4:5f:2a:73:2e:79:62:49:6e:b1:0b:15:b2:e7:0f:9a:
         44:cf:2b:1c:3b:d4:04:4c:63:f8:47:70:12:47:03:1e:e4:b9:
         a9:13:c3:70:d6:5c:a0:47:56:2f:12:d4:7b:23:44:e9:66:bf:
         7c:96:61:27:19:03:60:b0:a2:d6:b4:c2:c9:aa:0c:53:b6:84:
         20:01:42:9d:98:a6:2f:56:1a:48:bf:ab:ca:94:84:09:7d:60:
         ec:6e:d2:2f:aa:b5:8f:b3:84:2d:08:48:06:3b:27:ff:98:e3:
         36:70:c3:48:e3:ce:57:25:55:7f:6b:83:09:9e:bb:a3:41:c9:
         ae:ee:4d:31:2b:5d:19:c3:3d:cc:79:70:ba:54:2a:1d:82:bd:
         29:c9:9c:77:44:3f:25:43:d0:3d:e5:ba:5c:7a:91:86:8d:7c:
         15:51:04:ba:9f:93:1b:5f:a2:46:bd:ae:df:ba:a7:fe:ee:63:
         63:f0:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:20:23 2026 by rpki-client