Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BA2F94D37611F1B8404346FD65CEF9.roa
File:                     53BA2F94D37611F1B8404346FD65CEF9.roa (raw, json)
Hash identifier:          DuQfYh8wm+q0FFmhQ9nOwRfjD1nU9lhXYd454mQz8H0=
Subject key identifier:   90:97:04:D8:82:38:58:9B:6B:37:C7:13:2B:5F:AA:A2:4E:37:D4:51
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FEFA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BA2F94D37611F1B8404346FD65CEF9.roa
Signing time:             Thu 29 Oct 2026 09:00:56 +0000
ROA not before:           Thu 29 Oct 2026 09:00:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140884
IP address blocks:        123.253.70.0/24 maxlen: 24
                          2001:df7:abc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65274 (0xfefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 29 09:00:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ae30b48-0d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f5:df:c5:76:1f:54:1f:8d:bf:d0:b5:2e:8d:
                    a5:bf:0b:0f:30:c5:ae:01:2c:8c:b5:26:78:3a:2b:
                    17:10:9b:e0:c7:b5:55:17:20:45:7b:dc:ce:cb:80:
                    33:d3:f0:32:a5:15:c5:96:a0:5c:88:38:ed:f7:16:
                    b0:0f:ad:d6:6f:c0:93:37:0a:bf:91:47:07:76:98:
                    81:b6:3c:d6:c0:0f:36:c6:68:4c:b1:24:7f:dd:40:
                    03:b8:a9:f1:43:f1:85:85:81:8c:ef:5b:a1:6f:68:
                    7a:14:03:76:ee:18:be:54:8f:55:46:31:30:0e:33:
                    1d:f4:77:c5:26:3e:32:d8:e9:d2:69:d5:1a:a4:e4:
                    f9:2e:cb:f3:a9:e7:82:b5:16:c3:b3:a5:98:1c:3d:
                    15:d2:0d:0f:ed:4a:e3:2b:fa:1c:b6:b1:10:52:a5:
                    d8:f9:30:5b:f0:1f:6a:9e:48:fa:68:e0:1f:db:64:
                    99:f3:a4:8d:1a:50:2e:9c:d2:5c:a2:8f:25:8d:ce:
                    d9:a4:be:ae:8a:0a:c2:2a:2b:84:13:6f:50:6e:fa:
                    8a:b6:4c:48:79:10:46:34:76:cb:53:64:b8:bf:6c:
                    61:05:98:67:e3:57:95:8c:1a:10:f7:50:b6:82:24:
                    2d:c4:fc:2b:ef:6a:ea:f7:d0:bb:6b:ac:85:f0:a0:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:97:04:D8:82:38:58:9B:6B:37:C7:13:2B:5F:AA:A2:4E:37:D4:51
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53BA2F94D37611F1B8404346FD65CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.70.0/24
                IPv6:
                  2001:df7:abc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:38:52:39:50:fd:d8:e4:4e:bd:2c:54:80:31:8c:73:22:
         2a:dd:56:17:78:e1:35:5f:58:ea:6a:f8:99:1d:63:db:7f:ac:
         17:d6:52:3a:6d:94:02:92:c4:c9:0c:43:ff:3a:a0:54:de:4c:
         cd:82:8e:bc:85:df:8e:c1:77:ac:59:64:c5:75:05:fd:c4:89:
         c1:08:78:b4:b0:aa:c3:2a:1b:67:67:3d:a7:ed:9d:79:b2:3f:
         07:4f:06:f0:f4:eb:4c:e9:96:ef:df:cc:5a:9d:fa:f4:fc:92:
         61:79:ad:f1:55:78:15:4a:5b:c0:c2:3c:e3:76:22:ab:24:9f:
         da:c4:c1:32:a1:8d:c5:ee:84:a9:2e:f2:11:55:64:55:16:af:
         ca:78:3c:7d:a1:29:2e:07:a3:33:f4:0c:07:74:b9:bb:27:7e:
         5f:4e:0e:ba:21:2d:d9:7b:5c:a3:ea:20:bf:35:c8:65:43:9a:
         89:47:51:76:b2:aa:ac:69:6c:3d:32:a5:f9:64:dc:3e:28:cc:
         e3:3b:4f:89:07:46:4e:db:8b:5b:97:5e:60:55:65:97:2b:35:
         57:cc:ab:ad:75:4f:4b:6e:33:d3:b7:a3:0d:b3:df:fd:ca:53:
         a7:ba:bf:62:45:4a:b3:2b:87:33:73:fb:2d:3b:bc:fe:05:b8:
         e6:6b:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:59 2026 by rpki-client