Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
File:                     54098620A37B11EFAC4F8E3CC4F9AE02.roa (raw, json)
Hash identifier:          AzvWvbrPiuhKiBHdJfjBxy5Ra/OUuOns6Vjq7S/FHI8=
Subject key identifier:   99:9B:D5:2B:B7:67:54:FE:BA:93:D4:0C:CD:B8:05:54:1C:33:1A:25
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0AE4
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:00:37 +0000
ROA not before:           Sat 28 Jun 2025 19:54:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150371
IP address blocks:        123.253.93.0/24 maxlen: 24
                          123.253.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jun 28 19:54:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44685-39d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:ff:e7:36:91:6d:b1:65:85:da:99:d2:38:
                    71:24:f7:4b:33:ef:7b:05:8e:2d:9c:9c:40:83:cd:
                    76:d4:22:d7:a1:ea:34:a9:9e:82:23:79:4a:b8:5a:
                    59:6a:bc:a9:4a:ff:92:1d:de:5b:2f:f3:4c:a3:fc:
                    45:c2:bc:13:d0:8c:d6:44:10:d6:7d:3f:d6:41:c4:
                    26:f4:9c:f2:29:df:e8:2f:3d:c6:a1:25:e9:f0:94:
                    ee:ad:39:f3:e8:b3:ee:37:43:05:77:5a:62:00:b4:
                    fc:4b:3a:3b:36:1c:51:26:44:2a:4d:3c:1c:8d:d1:
                    00:04:83:aa:84:ed:2a:46:e0:14:50:04:c5:0f:2a:
                    31:25:28:3c:f7:99:85:f6:38:ec:98:78:b6:8f:ac:
                    b6:b7:5a:be:ca:9e:85:27:74:1c:6b:84:1f:27:d8:
                    da:b6:e1:e8:2d:b1:7d:5d:d4:31:db:89:85:cf:89:
                    ab:00:f4:a1:3b:32:94:f9:b1:41:f5:7c:60:80:85:
                    f2:26:ed:0e:5f:ac:de:8c:38:43:7f:41:ab:be:21:
                    77:3a:f9:bd:0e:9a:c4:c8:a8:3a:05:a5:39:9a:81:
                    83:cb:fe:8c:5f:61:ca:78:2a:99:e6:33:7d:cb:5f:
                    e1:7f:c6:d0:c6:5a:2a:98:62:d3:1b:1d:49:af:91:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:D5:2B:B7:67:54:FE:BA:93:D4:0C:CD:B8:05:54:1C:33:1A:25
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.93.0/24
                  123.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:25:95:49:4e:d2:5f:a0:44:db:c9:e1:61:e0:20:8a:7f:cd:
         d6:3d:27:ce:c9:3e:3b:d6:17:7c:88:ae:17:1f:c0:5a:f0:76:
         e3:4b:73:6d:80:b3:fe:c9:b8:ba:3d:96:97:20:71:31:a2:7a:
         4e:c2:48:99:49:c8:85:87:64:65:ea:30:a9:73:f6:3d:0d:1d:
         30:10:32:1d:9d:0a:41:fc:bd:b0:b9:da:10:c9:65:71:7c:8b:
         c2:2c:79:97:e8:50:e8:66:ec:9c:3c:59:8f:9d:cc:70:a9:3f:
         45:c3:7a:a6:3d:e6:39:73:14:fc:79:df:7e:02:4d:86:1c:fe:
         72:d8:66:91:34:0c:eb:ab:90:ce:a6:b0:b9:f8:7e:a1:bd:6c:
         dc:f9:df:84:d3:04:c7:68:bc:a4:6d:ca:5e:0d:15:55:88:32:
         79:b7:41:62:ae:8d:59:fc:8b:62:d9:46:79:77:ec:24:4a:8e:
         d6:12:83:51:a1:4a:7d:45:65:ec:bb:64:82:5b:72:04:53:de:
         63:4b:8d:d2:2d:0a:f1:d5:19:d7:61:91:7e:a6:81:6f:03:a3:
         c2:3c:b1:54:8d:b7:bf:a7:9a:0d:a9:78:8a:a1:97:2a:c0:5b:
         ba:13:79:9f:30:65:29:7a:03:54:18:5f:ec:6a:18:7b:e7:4f:
         cd:d7:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:29 2026 by rpki-client