Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/533200D026D411EEA82C8A38C4F9AE02.roa
File:                     533200D026D411EEA82C8A38C4F9AE02.roa (raw, json)
Hash identifier:          1+FeGN7/5ZQ3EY/0zpEcBQ4MJe9C6NybEMH9vk4Omh0=
Subject key identifier:   89:C6:D2:AE:6F:18:84:EC:95:0B:EA:2B:FA:39:82:F8:AF:9A:35:C7
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       0601
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/533200D026D411EEA82C8A38C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 23:30:22 +0000
ROA not before:           Thu 30 Apr 2026 23:30:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55470
IP address blocks:        144.16.144.0/20 maxlen: 20
                          144.16.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Apr 30 23:30:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3e60e-3e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:36:85:a8:f2:d4:0e:c1:4b:f7:de:ea:6f:
                    23:aa:68:f8:fc:f8:48:64:17:ac:c2:21:fc:50:5b:
                    01:23:8f:82:38:fc:01:4c:05:fb:4d:15:e2:58:fe:
                    f6:e5:92:92:6f:fa:af:ff:9a:cc:a2:bc:18:41:36:
                    59:d0:b2:c9:a1:a4:b3:67:e7:98:da:80:10:be:82:
                    3a:cc:85:d2:74:3b:9a:81:af:17:6e:46:8d:0c:e4:
                    29:e0:99:3e:0f:b0:c6:04:51:79:a0:8f:b2:26:bc:
                    84:18:65:3b:0c:7a:47:7d:04:a6:74:45:f7:2d:2f:
                    0e:fe:5e:26:db:6d:b9:d8:44:05:e3:70:7b:eb:4b:
                    22:c3:6e:6f:b0:d2:c7:29:7f:24:d7:fb:75:59:41:
                    13:9e:1d:b7:55:4e:99:2b:40:e8:c3:ae:d8:ae:c5:
                    01:3c:ec:4d:9b:b1:71:60:7c:40:eb:cd:53:fe:02:
                    79:12:1a:66:18:ac:45:26:a9:82:d9:9f:5b:9c:98:
                    00:a3:7e:51:bb:e8:2c:d0:58:01:8b:51:a7:a7:9d:
                    5a:d9:90:e7:14:7a:b3:b4:5a:a5:e7:99:b2:01:68:
                    45:cb:9d:7b:2b:e8:92:51:da:00:b3:42:2c:bc:41:
                    d7:7e:39:0a:90:65:00:b6:46:2c:71:68:92:1e:97:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C6:D2:AE:6F:18:84:EC:95:0B:EA:2B:FA:39:82:F8:AF:9A:35:C7
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/533200D026D411EEA82C8A38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.16.144.0-144.16.175.255

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:f5:13:da:6d:bb:d7:f1:69:c9:dc:23:9a:dc:82:80:5f:
         15:88:2a:f3:15:c7:ca:8c:0e:89:fd:64:b0:a4:1d:c9:c3:74:
         10:2b:39:7a:6c:b5:c3:f8:e1:9d:c2:fb:6b:f6:51:e0:87:e5:
         25:d4:48:9f:74:34:2d:a0:5e:b4:25:21:25:f0:b1:56:40:d3:
         c2:02:e0:15:d9:a3:95:27:f7:3b:c7:51:7a:48:34:1c:43:5a:
         bd:e6:53:d7:d8:55:56:31:6c:26:38:4b:90:08:57:ea:bb:07:
         55:4f:b4:12:9c:86:c7:95:dd:85:0e:ec:34:ac:10:36:e2:53:
         cb:4a:d7:4d:5b:a2:74:b2:97:70:10:7b:b0:9f:55:46:ed:6b:
         2f:26:aa:fa:28:f2:4a:9f:9e:69:a6:09:49:ca:9d:1d:89:ed:
         89:21:3e:b1:08:0b:d4:d1:36:9f:f6:74:7b:a3:6a:06:4a:d0:
         5c:25:0c:b7:b2:02:22:21:f5:5d:aa:6a:9c:e1:04:41:be:7a:
         db:33:b0:7f:b6:12:f7:f1:e5:38:db:87:8f:2c:2f:51:fb:78:
         e6:fd:b3:79:99:52:e9:56:32:6a:5d:62:a9:24:05:69:34:b0:
         13:a0:ed:72:b6:bc:0f:52:b4:35:66:fc:31:df:23:b5:fe:db:
         8a:90:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:10 2026 by rpki-client