Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
File:                     54098620A37B11EFAC4F8E3CC4F9AE02.roa (raw, json)
Hash identifier:          SETDgSSjufmhfsxB9BdsWp+M1dD0A3n7br+cido47bY=
Subject key identifier:   BC:77:C1:35:D5:09:FC:EC:89:06:76:80:48:E7:FD:38:A4:A6:0C:17
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B29
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa
Signing time:             Tue 30 Jun 2026 20:23:46 +0000
ROA not before:           Tue 30 Jun 2026 20:23:46 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     150371
IP address blocks:        123.253.93.0/24 maxlen: 24
                          123.253.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Jun 30 20:23:46 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a4425d2-dd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:fc:48:a4:7a:f5:0b:98:04:1d:8b:4c:21:
                    99:d9:6a:35:ba:8d:21:5f:61:d6:5e:82:a3:01:ca:
                    9e:f8:ca:bd:d4:85:55:92:8e:c0:2f:cb:83:f4:fa:
                    3d:c6:c9:56:f8:c8:a1:80:36:9c:d3:aa:27:e8:c0:
                    66:ef:5f:0d:ee:a8:07:7f:30:dc:01:3e:a7:4f:65:
                    95:e9:5c:c2:f1:5b:9a:08:c4:34:6e:04:9c:7e:ae:
                    80:58:9d:af:c7:47:6b:b9:b4:16:f7:ac:56:b3:92:
                    db:62:b4:d2:ea:98:08:ec:11:30:c9:ce:9e:5d:2a:
                    c8:ab:cc:b5:82:97:ff:bb:1c:ae:79:0e:56:88:31:
                    a6:d0:ef:c5:8a:ad:64:42:02:8b:78:c8:e8:0d:8a:
                    67:5b:94:53:26:b6:94:e0:ff:fa:fe:54:1a:0e:6a:
                    08:a3:c9:83:1a:7b:cd:c2:81:69:a1:c6:9e:7b:2f:
                    53:37:9e:83:4a:8a:ae:bd:a4:c2:2d:23:9f:e7:d2:
                    e4:a3:36:e5:58:9f:7a:a5:9b:ef:c5:bf:42:d0:76:
                    37:b1:03:49:63:e2:77:b7:d0:fa:1a:03:b8:fe:e6:
                    8e:f7:68:95:12:f1:de:7c:97:37:b7:fa:42:54:40:
                    64:59:5b:83:14:a0:e1:53:b3:3c:25:36:56:4e:ab:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:77:C1:35:D5:09:FC:EC:89:06:76:80:48:E7:FD:38:A4:A6:0C:17
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/54098620A37B11EFAC4F8E3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.93.0/24
                  123.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:ce:5a:af:b7:43:1e:b2:8e:0f:44:33:3e:0f:e0:1b:55:
         73:08:a7:7d:68:8e:3c:34:ff:16:8a:93:aa:7e:3c:06:60:b9:
         5e:57:e8:b4:bf:e8:6a:99:d9:9f:a3:86:63:b1:28:51:42:ce:
         2b:a8:07:17:a5:df:ed:b5:21:bf:38:59:9b:e5:74:c1:9c:65:
         d7:a4:d6:0f:50:f8:15:93:6c:29:5d:72:13:68:18:e1:5b:4b:
         9c:be:e8:1f:9e:13:41:99:0d:06:56:94:fd:fe:15:05:d5:77:
         c2:ba:93:f7:07:92:94:2e:33:61:f4:f2:dc:82:92:61:c2:0a:
         f9:d3:c3:3a:f5:84:4b:3a:c9:68:41:65:49:1b:ac:5e:b6:37:
         ac:e8:54:1e:cd:68:4f:a3:f0:90:60:8f:29:5c:c8:a5:46:93:
         f0:2c:0c:cc:5c:4d:ec:ff:6e:ee:bf:d2:e2:32:35:d9:e8:b5:
         7f:55:a8:2a:cf:ac:6e:09:5d:75:75:f2:26:11:70:37:d7:d4:
         c5:65:bd:59:73:82:5b:ae:ba:6e:82:2d:a3:b0:d9:5d:61:6e:
         f1:b8:b0:94:b1:b7:d4:30:8a:6a:0c:6d:c6:d9:5e:3a:79:4c:
         f6:c5:c4:18:da:9b:99:63:06:48:95:91:cf:68:f6:94:4e:10:
         01:49:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:37:55 2026 by rpki-client