Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
File:                     B728544E843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          BoFNm+faDxlrNXahftmc3z/P1BHBF3TaYlLc/KehAvw=
Subject key identifier:   00:7D:A9:FA:3A:2C:B7:11:8F:D7:E6:93:43:51:1C:21:3C:70:22:BF
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1948
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:32:45 +0000
ROA not before:           Wed 30 Jul 2025 16:55:26 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45454
IP address blocks:        163.53.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6472 (0x1948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 16:55:26 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5917d-6777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:ab:61:a6:be:c2:22:96:91:cc:e3:f1:37:
                    f7:bb:a9:45:17:97:0e:7a:8f:69:fa:63:33:4e:ce:
                    f4:e3:f3:05:3b:f9:d8:df:0c:c0:80:5a:52:73:74:
                    ce:2f:14:9d:e5:fd:7a:d6:d8:cd:2f:0d:af:22:04:
                    14:3b:50:15:06:a1:57:b6:e4:72:82:93:9b:b0:04:
                    42:4e:2e:94:1e:8c:6b:33:c1:18:5b:af:3a:86:56:
                    cc:be:91:dd:f3:b9:8c:7c:69:d7:67:81:7a:80:d2:
                    bf:c8:87:4d:b7:0c:e5:23:cd:6c:84:5f:3d:ab:70:
                    b5:47:cd:aa:9f:55:d7:61:52:ec:04:98:9d:0c:a8:
                    75:54:70:7f:d6:33:79:46:78:0b:4b:62:c9:6a:5f:
                    fd:ed:44:05:dc:44:68:7d:2e:84:ea:2a:48:88:f9:
                    e7:23:fc:4c:8b:bc:4d:22:b3:f9:ac:ff:f1:8f:3f:
                    b8:73:ac:85:ce:b4:db:45:a6:1d:69:5c:ee:fd:92:
                    b5:51:ed:bd:ff:6f:24:59:e4:ec:12:6a:f2:76:d8:
                    41:14:18:54:ab:9c:d2:38:68:aa:28:55:a8:79:9a:
                    97:06:46:ce:3d:a9:8d:fe:86:b5:79:ed:ef:42:b4:
                    6c:be:2b:91:45:1a:f5:78:1d:55:ea:fc:51:e8:a5:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:A9:FA:3A:2C:B7:11:8F:D7:E6:93:43:51:1C:21:3C:70:22:BF
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:b4:ee:db:fe:95:3f:c5:6c:c0:a3:cf:44:9f:e4:0a:be:a2:
         77:22:7e:1d:98:60:14:27:f4:40:36:4a:a9:31:30:ea:04:70:
         ed:cb:6f:e2:ec:33:54:17:e6:24:51:64:05:76:74:3b:f5:1e:
         54:08:9c:e9:49:a4:e3:f0:73:9c:3b:b0:07:4b:e1:35:dd:39:
         dd:54:37:a1:b1:c8:8d:63:cb:ca:9e:58:3a:56:8a:bd:41:38:
         e6:14:10:5b:4d:e9:6b:c4:f9:1b:9d:38:50:2e:5d:81:d0:81:
         04:0f:a7:0d:59:1c:2e:ac:24:34:92:b6:a7:eb:b7:c5:25:d6:
         f7:65:fa:84:53:bd:77:5d:2a:10:ac:1a:2d:f2:51:13:7e:19:
         ab:f2:fb:ff:df:04:00:d8:5c:ad:b7:65:f8:d2:e3:ad:7c:03:
         85:1c:f6:c5:c4:03:e4:2e:36:5f:e6:77:6f:16:d4:55:65:ef:
         fd:b6:cf:68:af:15:2b:0c:d3:a1:2a:bc:12:85:f8:69:6f:b1:
         22:6c:60:fd:0e:bc:18:27:b7:bc:4a:fd:aa:19:66:fc:85:e5:
         cd:03:0b:01:cf:58:4e:5b:8b:b8:be:46:1d:93:ee:fe:5c:ba:
         d9:a5:68:ff:05:d5:8a:e2:92:b5:82:40:1f:bc:e8:4e:8e:04:
         ac:a5:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:57:35 2026 by rpki-client