Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
File:                     B728544E843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          nv+kILeHPVWRL7W8EDcO4xWhZBu2GdM3HHAcm+9LYKs=
Subject key identifier:   95:81:E1:89:66:38:DB:48:DE:86:95:3E:A2:3E:CC:B9:F1:F6:D8:5A
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       19DB
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:29:29 +0000
ROA not before:           Thu 30 Jul 2026 17:29:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45454
IP address blocks:        163.53.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 16:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6619 (0x19db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 17:29:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b89f8-4f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:8e:1a:c3:a0:90:c4:79:63:1a:a3:8d:bb:
                    15:ac:8a:fc:bf:b2:04:ad:28:ba:f0:ff:43:7d:8c:
                    9c:be:bd:5c:fa:fa:51:31:82:91:46:bb:42:21:d6:
                    0d:4e:19:d8:c4:84:89:31:c1:85:db:35:19:d7:a6:
                    5f:61:8c:bc:a3:05:b3:c5:54:a0:8c:54:07:81:25:
                    ff:5a:8f:d9:1c:76:53:eb:44:73:75:e2:8a:84:51:
                    5d:9d:3f:37:a2:38:54:61:7d:f1:77:49:48:81:7b:
                    c7:2c:e2:69:99:af:81:dd:e3:8e:ca:5b:8f:39:b7:
                    2f:a1:6d:fd:de:80:0d:b7:0f:9f:7c:32:59:1c:5b:
                    68:64:90:04:98:2b:8b:41:0b:47:3d:7c:2e:ec:3d:
                    0e:4e:d5:68:1e:ff:98:bd:64:da:e8:83:3b:50:61:
                    da:ac:68:a8:18:69:ba:fb:48:a3:cf:3d:16:1c:6f:
                    db:2c:37:1d:e4:7a:80:a5:c6:01:73:90:f9:ef:fd:
                    65:e5:15:63:05:c8:91:7b:cd:bb:ff:e1:83:ac:eb:
                    fe:d9:94:7b:12:6f:f4:97:a8:d0:6a:09:cb:71:b5:
                    74:89:c0:fd:98:e3:05:83:0d:68:9d:8d:58:fb:8f:
                    bf:be:ef:32:7a:55:a3:86:12:07:d8:96:f0:9e:b6:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:81:E1:89:66:38:DB:48:DE:86:95:3E:A2:3E:CC:B9:F1:F6:D8:5A
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:a0:0b:7d:fc:f0:11:36:21:9e:29:ba:e7:e0:14:ec:96:
         18:42:da:6b:e3:a6:c1:46:74:b0:da:06:cc:38:fe:9d:4f:cc:
         f3:46:d7:70:bc:1f:65:f6:60:da:cb:e0:ff:89:4c:9c:0d:22:
         e1:18:51:fe:e2:fb:97:25:a1:9d:1b:7a:0d:e7:a5:3a:35:da:
         78:02:31:ca:b1:54:93:11:be:78:53:ce:c0:6c:47:34:23:db:
         41:d3:48:f3:da:af:02:72:7e:78:e2:ed:8b:42:f6:d7:d4:50:
         06:8b:bb:0c:74:d5:dc:34:de:55:55:2f:0c:94:48:65:c8:00:
         b6:82:d5:d7:0d:5f:58:03:ed:31:9e:07:bb:42:21:e4:e4:18:
         41:ed:a8:69:be:9d:dc:bb:02:dc:65:15:be:64:7b:77:e1:07:
         c4:d6:ca:93:f1:1d:40:8a:6c:30:b7:e3:ce:f7:d6:80:4c:13:
         ba:7e:59:01:07:af:f7:19:1d:dc:d9:83:61:a5:2b:9e:03:38:
         56:cc:f8:1a:01:df:1c:2a:b8:a3:b8:da:bc:2c:d3:ff:48:2c:
         de:4f:24:f6:0d:1e:f0:d4:8f:2b:4e:0a:c6:ff:ef:90:8c:9b:
         2d:67:c8:40:fd:d0:57:f1:76:2a:20:a3:63:44:b0:b8:ff:99:
         f1:5a:c3:17
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw
REQzQTMzRUMwHhcNMjYwNzMwMTcyOTI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiODlmOC00ZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDOOGsOgkMR5YxqjjbsVrIr8v7IErSi68P9DfYycvr1c+vpRMYKRRrtCIdYN
ThnYxISJMcGF2zUZ16ZfYYy8owWzxVSgjFQHgSX/Wo/ZHHZT60RzdeKKhFFdnT83
ojhUYX3xd0lIgXvHLOJpma+B3eOOyluPObcvoW393oANtw+ffDJZHFtoZJAEmCuL
QQtHPXwu7D0OTtVoHv+YvWTa6IM7UGHarGioGGm6+0ijzz0WHG/bLDcd5HqApcYB
c5D57/1l5RVjBciRe827/+GDrOv+2ZR7Em/0l6jQagnLcbV0icD9mOMFgw1onY1Y
+4+/vu8yelWjhhIH2Jbwnrbu8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJWB4Ylm
ONtI3oaVPqI+zLnx9thaMB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4
M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvQjcyODU0NEU4
NDMwMTFFQUI0MjcwQjgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCozX4MA0GCSqGSIb3DQEBCwUAA4IBAQB716ALffzwETYhnim65+AU
7JYYQtpr46bBRnSw2gbMOP6dT8zzRtdwvB9l9mDay+D/iUycDSLhGFH+4vuXJaGd
G3oN56U6Ndp4AjHKsVSTEb54U87AbEc0I9tB00jz2q8Ccn544u2LQvbX1FAGi7sM
dNXcNN5VVS8MlEhlyAC2gtXXDV9YA+0xnge7QiHk5BhB7ahpvp3cuwLcZRW+ZHt3
4QfE1sqT8R1Aimwwt+PO99aATBO6flkBB6/3GR3c2YNhpSueAzhWzPgaAd8cKrij
uNq8LNP/SCzeTyT2DR7w1I8rTgrG/++QjJstZ8hA/dBX8XYqIKNjRLC4/5nxWsMX
-----END CERTIFICATE-----
Generated at Thu Aug 6 15:38:44 2026 by rpki-client