Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
File:                     B53FD334575411ECAA094876C4F9AE02.roa (raw, json)
Hash identifier:          UaRE+G0ZSQYZm6MnpEmUdwAqD8stTNt+8kOP5D9wsjI=
Subject key identifier:   72:B2:02:99:4C:99:0B:C8:BD:EC:1C:84:C9:79:1D:1D:EA:69:74:67
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       278A
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 18:34:51 +0000
ROA not before:           Fri 02 Oct 2026 18:34:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     65535
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10122 (0x278a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Oct  2 18:34:51 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abff94a-eec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:92:78:27:50:83:01:a3:d6:5c:fc:42:e7:
                    5e:45:63:36:7d:e7:25:9f:6a:06:31:d9:17:82:ca:
                    23:16:bb:d7:48:4c:91:23:9f:95:42:ad:a2:8e:20:
                    ca:08:65:dc:02:bd:35:09:3b:d9:bb:af:b3:ab:05:
                    c4:1c:ac:f6:a4:1b:81:ab:70:06:d0:50:e7:4c:5d:
                    71:d2:94:9a:13:02:aa:dd:26:cf:3a:24:31:43:4c:
                    d3:da:7f:e8:86:f7:80:40:df:cd:90:fd:01:0c:e6:
                    0a:da:14:f2:0a:95:eb:58:62:c6:28:31:48:b3:54:
                    27:9a:3a:cb:3c:c9:51:3c:61:48:2f:59:bf:c9:d0:
                    d4:23:e8:bb:47:45:ee:17:1e:da:06:df:ad:cb:43:
                    e0:57:4c:02:e0:66:e8:ff:8f:c7:1a:21:a5:61:2e:
                    c0:b5:3f:b7:22:08:fe:5a:7a:1e:db:43:3b:b4:94:
                    fc:e2:2b:a4:e9:19:cb:d1:41:3a:ba:b1:9d:0b:34:
                    e2:a6:06:0a:d8:08:6a:6c:a6:f7:6b:07:4c:a7:57:
                    d3:4a:e5:fb:b2:a4:a5:d7:74:48:4a:f9:15:3f:44:
                    a4:e2:fd:bc:cc:50:8c:43:80:6b:ff:0d:27:70:bf:
                    77:12:6d:3b:a8:7d:c8:8a:e8:4e:e6:db:bc:30:79:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:02:99:4C:99:0B:C8:BD:EC:1C:84:C9:79:1D:1D:EA:69:74:67
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:15:18:a2:8f:2c:1c:86:4b:da:58:29:e8:69:9a:1d:25:a1:
         eb:8f:4a:7f:8c:e9:57:cb:55:6e:74:a7:c7:6a:7a:21:a7:eb:
         b8:ab:20:00:fb:f6:11:dc:8a:d9:27:cb:be:aa:a5:19:34:db:
         f7:be:48:5a:cd:6a:6d:47:d9:5e:04:4d:db:98:e7:60:18:f1:
         6c:76:54:50:e5:2e:2f:58:37:16:ab:08:5a:66:40:88:16:a5:
         5d:c9:34:b1:34:f8:12:ba:7c:6b:34:31:b5:98:58:93:7a:50:
         64:1f:41:24:e6:67:14:11:48:a1:15:a4:ea:c0:2e:83:49:a8:
         54:8f:89:f7:72:57:5a:bb:08:f0:31:d0:3d:46:48:03:99:38:
         85:ae:7e:49:34:ef:00:c9:79:a8:ca:76:51:c8:d1:40:40:79:
         7b:34:ab:36:c6:f8:27:5b:00:e7:4b:ad:ba:33:96:17:7f:22:
         60:55:ea:51:9c:30:0e:b3:ec:6a:2a:39:d1:b1:92:d7:69:54:
         6c:ac:b7:77:b5:7c:96:e1:9f:95:38:1f:1e:f4:39:b3:3c:8f:
         0d:68:c9:36:78:79:0c:79:49:7c:94:85:45:fc:6c:a0:b8:ff:
         4b:ab:ac:d1:fa:c1:66:36:89:7b:b0:89:c2:95:5d:c7:6d:b9:
         7a:e5:a4:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJ4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjYxMDAyMTgzNDUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZjk0YS1lZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCSSeCdQgwGj1lz8QudeRWM2fecln2oGMdkXgsojFrvXSEyRI5+VQq2ijiDK
CGXcAr01CTvZu6+zqwXEHKz2pBuBq3AG0FDnTF1x0pSaEwKq3SbPOiQxQ0zT2n/o
hveAQN/NkP0BDOYK2hTyCpXrWGLGKDFIs1QnmjrLPMlRPGFIL1m/ydDUI+i7R0Xu
Fx7aBt+ty0PgV0wC4Gbo/4/HGiGlYS7AtT+3Igj+Wnoe20M7tJT84iuk6RnL0UE6
urGdCzTipgYK2AhqbKb3awdMp1fTSuX7sqSl13RISvkVP0Sk4v28zFCMQ4Br/w0n
cL93Em07qH3IiuhO5tu8MHnXxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHKyAplM
mQvIvewchMl5HR3qaXRnMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvQjUzRkQzMzQ1
NzU0MTFFQ0FBMDk0ODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4rSMA0GCSqGSIb3DQEBCwUAA4IBAQAgFRiijywchkvaWCnoaZod
JaHrj0p/jOlXy1VudKfHanohp+u4qyAA+/YR3IrZJ8u+qqUZNNv3vkhazWptR9le
BE3bmOdgGPFsdlRQ5S4vWDcWqwhaZkCIFqVdyTSxNPgSunxrNDG1mFiTelBkH0Ek
5mcUEUihFaTqwC6DSahUj4n3cldauwjwMdA9RkgDmTiFrn5JNO8AyXmoynZRyNFA
QHl7NKs2xvgnWwDnS626M5YXfyJgVepRnDAOs+xqKjnRsZLXaVRsrLd3tXyW4Z+V
OB8e9DmzPI8NaMk2eHkMeUl8lIVF/GyguP9Lq6zR+sFmNol7sInClV3Hbbl65aTs
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:29:16 2026 by rpki-client