Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
File:                     53224C1ADDA311ECA6964F20C4F9AE02.roa (raw, json)
Hash identifier:          bQMzJivgeDG/wNPjtddFIl5YfZWO1LwIp1brxtXdfws=
Subject key identifier:   81:68:9D:D5:29:0E:8F:A8:53:64:52:FF:3E:E4:D7:7F:D2:94:11:38
Certificate issuer:       /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial:       0947
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:47:48 +0000
ROA not before:           Fri 20 Jun 2025 21:18:34 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55286
IP address blocks:        45.249.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375 (0x947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
        Validity
            Not Before: Jun 20 21:18:34 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47bc3-fffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:ef:96:e2:57:a1:25:95:dd:98:89:2f:fc:
                    f4:35:3a:0c:4e:b9:7d:ce:a5:d0:af:54:af:b8:a9:
                    60:a5:86:41:2c:c1:f7:03:08:de:56:ff:fd:0f:d8:
                    0b:0a:14:9b:be:a2:29:1b:43:c9:4e:8f:93:5f:c0:
                    18:7a:77:c9:bb:d6:0b:f4:ed:d1:72:5f:11:96:20:
                    0e:2f:7f:55:db:d4:83:ca:14:be:19:aa:24:15:19:
                    7d:fb:0d:16:f4:b8:c1:3d:50:a2:4e:4f:77:df:89:
                    3b:2e:e7:d9:bb:4e:6c:4f:b7:81:c4:61:89:37:20:
                    47:9f:71:d0:2c:6e:3f:0f:bf:58:07:ae:a3:ee:6b:
                    8e:9b:9e:42:0f:4d:c7:20:4b:75:01:9c:de:0e:41:
                    12:6e:34:60:88:ee:02:dd:91:ad:3d:f9:23:29:c6:
                    54:b2:24:85:23:fb:36:24:7f:66:da:1f:8f:ee:7a:
                    ce:a3:66:0b:ce:9d:c2:08:ef:75:de:8f:c2:ff:b6:
                    9d:4f:52:f4:a7:75:4d:ab:a5:e2:5d:68:42:75:9d:
                    ec:8e:51:c0:47:6d:3b:2c:d8:22:a9:9a:d6:93:a3:
                    31:89:4f:4b:80:32:1f:d1:23:9c:f0:3d:e9:b2:9f:
                    6e:d6:57:c7:3a:28:22:56:53:a0:3a:6d:30:36:3e:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:68:9D:D5:29:0E:8F:A8:53:64:52:FF:3E:E4:D7:7F:D2:94:11:38
            X509v3 Authority Key Identifier:
                keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:ae:fc:e3:1d:03:58:2d:09:b3:64:26:f0:c1:60:06:8d:
         8e:63:ff:ea:1d:a0:99:85:14:c1:7e:8a:d7:af:03:1e:d3:b3:
         1f:0b:fb:da:bf:a4:07:b0:cf:1d:f3:f7:77:62:81:98:e8:35:
         29:8d:f3:b0:89:ca:2d:58:62:7b:f4:90:be:57:e4:ef:0a:a7:
         ce:bd:e8:8e:b7:1a:bc:2f:5b:fb:97:77:d4:58:3d:93:95:48:
         69:fe:cc:d2:bd:70:c4:42:5b:84:1a:a0:dd:c4:9d:4a:8e:22:
         bd:9d:e5:27:cf:9b:1f:50:a0:46:10:3d:3a:69:9f:1c:bc:20:
         60:99:0b:d6:93:8c:13:03:dc:38:f1:77:3b:ad:33:52:c3:ce:
         6d:60:94:b6:4c:b0:47:1a:f4:88:b8:c8:7d:bb:b6:08:de:79:
         0e:4d:a3:bf:92:58:68:76:78:35:c5:32:5f:fc:0a:31:e9:7e:
         ea:d9:b8:91:5c:a0:f8:8f:0e:02:28:28:fd:ad:58:d3:d2:6a:
         71:da:66:98:43:b8:8c:5e:a0:75:b5:d7:7e:3f:05:a5:1c:39:
         ef:f0:28:8f:3e:a7:7d:5d:3f:6e:dc:23:c5:2f:2b:97:32:ca:
         77:d1:6c:89:2a:cb:87:ce:65:64:ba:f4:ca:f2:82:c9:50:39:
         7e:89:eb:ad
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw
REE2NTJERTQwHhcNMjUwNjIwMjExODM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2JjMy1mZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FXvluJXoSWV3ZiJL/z0NToMTrl9zqXQr1SvuKlgpYZBLMH3AwjeVv/9D9gL
ChSbvqIpG0PJTo+TX8AYenfJu9YL9O3Rcl8RliAOL39V29SDyhS+GaokFRl9+w0W
9LjBPVCiTk9334k7LufZu05sT7eBxGGJNyBHn3HQLG4/D79YB66j7muOm55CD03H
IEt1AZzeDkESbjRgiO4C3ZGtPfkjKcZUsiSFI/s2JH9m2h+P7nrOo2YLzp3CCO91
3o/C/7adT1L0p3VNq6XiXWhCdZ3sjlHAR207LNgiqZrWk6MxiU9LgDIf0SOc8D3p
sp9u1lfHOigiVlOgOm0wNj7pUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIFondUp
Do+oU2RS/z7k13/SlBE4MB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw
MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE2NEYvM0M5RTJCNUNDMDE0MTFFQTgxNjg5MDY1QzRGOUFFMDIvNTMyMjRDMUFE
REEzMTFFQ0E2OTY0RjIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBLfk2MA0GCSqGSIb3DQEBCwUAA4IBAQCpMa784x0DWC0Js2Qm8MFg
Bo2OY//qHaCZhRTBforXrwMe07MfC/vav6QHsM8d8/d3YoGY6DUpjfOwicotWGJ7
9JC+V+TvCqfOveiOtxq8L1v7l3fUWD2TlUhp/szSvXDEQluEGqDdxJ1KjiK9neUn
z5sfUKBGED06aZ8cvCBgmQvWk4wTA9w48Xc7rTNSw85tYJS2TLBHGvSIuMh9u7YI
3nkOTaO/klhodng1xTJf/Aox6X7q2biRXKD4jw4CKCj9rVjT0mpx2maYQ7iMXqB1
tdd+PwWlHDnv8CiPPqd9XT9u3CPFLyuXMsp30WyJKsuHzmVkuvTK8oLJUDl+ieut
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:12 2026 by rpki-client