Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
File:                     B53FD334575411ECAA094876C4F9AE02.roa (raw, json)
Hash identifier:          MOniPA3OWYxjKNJDubnO0OYiVfTrXRb7jdXls0wzzCE=
Subject key identifier:   80:CE:63:66:F7:4C:E0:3A:A8:03:94:9D:33:21:89:AB:88:D8:2F:40
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26FF
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa
Signing time:             Tue 10 Mar 2026 17:22:52 +0000
ROA not before:           Tue 10 Mar 2026 17:22:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     65535
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9983 (0x26ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 10 17:22:52 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69b0536c-6403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:ab:63:94:93:02:ea:e2:59:94:d8:a3:fa:
                    aa:25:3a:e2:01:ab:13:e6:fb:9f:34:28:8b:60:ed:
                    cb:71:07:47:2f:5e:fa:5a:60:ff:a2:c1:4c:3b:e4:
                    65:69:0c:62:f9:c1:cc:d7:42:e9:da:29:eb:9a:df:
                    31:2f:f0:aa:67:c8:d5:87:13:8c:da:38:10:6e:ed:
                    da:83:be:b4:ba:d9:e8:03:97:b3:02:84:12:6c:ef:
                    e4:0f:1b:f8:ce:b4:33:f0:2f:50:68:1b:68:65:70:
                    cc:c5:ae:04:a6:8e:a0:15:92:9c:66:a0:10:40:59:
                    67:ec:ef:46:37:e1:1c:45:e5:96:3f:0a:11:f5:cc:
                    a7:1a:d4:3e:60:ab:93:52:f2:84:05:74:65:4a:ce:
                    56:08:14:e8:d7:f1:51:1a:ef:8d:e9:c8:8f:70:96:
                    1f:e6:cd:0e:a0:8d:de:1f:07:98:87:6e:28:47:3e:
                    58:8a:13:17:22:40:e4:47:3c:83:ec:7b:3c:61:6f:
                    48:af:cc:70:24:0a:48:84:79:c9:5e:b5:8b:ae:4a:
                    d2:39:e0:95:42:32:6c:00:20:93:c5:31:a9:78:f5:
                    07:95:23:c1:f8:05:21:5b:0c:33:be:be:e1:4a:0d:
                    6e:20:e2:0a:6c:96:27:24:2a:9f:9f:3c:65:d9:0a:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:63:66:F7:4C:E0:3A:A8:03:94:9D:33:21:89:AB:88:D8:2F:40
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/B53FD334575411ECAA094876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:fe:a7:2f:0b:2d:58:06:e8:5b:24:26:45:e5:c9:06:20:cb:
         ca:7a:08:70:e2:d8:86:3d:b2:ad:bd:5d:7a:77:5c:d5:87:6e:
         6f:e1:23:f9:04:6a:ce:23:49:36:2a:a5:9a:37:0a:d6:0a:90:
         9f:3a:96:86:3c:bc:77:45:4b:c7:dd:0d:ad:ed:67:bc:cb:80:
         a2:e9:42:e8:c1:f2:d3:15:83:08:1c:bf:7f:b8:39:cd:60:fb:
         47:6b:85:3b:33:2c:aa:94:4b:97:7d:12:55:11:00:46:e5:6a:
         de:ad:84:e6:72:55:68:7c:c3:a7:c9:e9:90:66:cf:d3:28:de:
         10:7a:b0:45:3a:a0:19:fa:05:3a:7f:23:f0:89:d8:27:eb:a4:
         fa:79:c9:42:f6:de:f6:46:63:90:8e:09:22:d3:46:e5:ad:93:
         af:43:bf:3f:6f:ed:e5:59:0a:d0:02:48:0d:04:00:4a:a1:93:
         1b:51:d9:14:77:ea:5a:f4:70:47:4c:56:70:41:24:6e:1a:15:
         c6:53:2f:a9:5a:c3:c3:46:1a:b5:0a:0b:f0:8c:b0:e2:6a:4c:
         8b:8e:df:fc:56:97:35:f0:33:a0:42:54:8a:7c:97:34:46:3c:
         04:4c:b0:7e:f7:c1:dc:88:bf:e9:2b:9d:31:df:67:30:83:3c:
         0d:9b:42:7a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjYwMzEwMTcyMjUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIwNTM2Yy02NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjirY5STAuriWZTYo/qqJTriAasT5vufNCiLYO3LcQdHL176WmD/osFMO+Rl
aQxi+cHM10Lp2inrmt8xL/CqZ8jVhxOM2jgQbu3ag760utnoA5ezAoQSbO/kDxv4
zrQz8C9QaBtoZXDMxa4Epo6gFZKcZqAQQFln7O9GN+EcReWWPwoR9cynGtQ+YKuT
UvKEBXRlSs5WCBTo1/FRGu+N6ciPcJYf5s0OoI3eHweYh24oRz5YihMXIkDkRzyD
7Hs8YW9Ir8xwJApIhHnJXrWLrkrSOeCVQjJsACCTxTGpePUHlSPB+AUhWwwzvr7h
Sg1uIOIKbJYnJCqfnzxl2QpJMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIDOY2b3
TOA6qAOUnTMhiauI2C9AMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvQjUzRkQzMzQ1
NzU0MTFFQ0FBMDk0ODc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4rSMA0GCSqGSIb3DQEBCwUAA4IBAQB5/qcvCy1YBuhbJCZF5ckG
IMvKeghw4tiGPbKtvV16d1zVh25v4SP5BGrOI0k2KqWaNwrWCpCfOpaGPLx3RUvH
3Q2t7We8y4Ci6ULowfLTFYMIHL9/uDnNYPtHa4U7MyyqlEuXfRJVEQBG5WrerYTm
clVofMOnyemQZs/TKN4QerBFOqAZ+gU6fyPwidgn66T6eclC9t72RmOQjgki00bl
rZOvQ78/b+3lWQrQAkgNBABKoZMbUdkUd+pa9HBHTFZwQSRuGhXGUy+pWsPDRhq1
CgvwjLDiakyLjt/8Vpc18DOgQlSKfJc0RjwETLB+98HciL/pK50x32cwgzwNm0J6
-----END CERTIFICATE-----
Generated at Thu Mar 19 11:43:24 2026 by rpki-client