Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa
File:                     53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa (raw, json)
Hash identifier:          scsjF0sL2bzbhSp0YG1oQ/Fmmp1cKH8s8nqWuSQqJh4=
Subject key identifier:   BA:FB:81:9A:3B:CB:C7:E6:26:7B:B0:4D:94:95:18:C7:BC:BD:60:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F177
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:59:39 +0000
ROA not before:           Mon 06 Jul 2026 16:59:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137591
IP address blocks:        36.255.64.0/22 maxlen: 24
                          103.41.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61815 (0xf177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:59:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdefb-45a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:2b:20:87:70:04:53:74:e6:51:a4:b2:21:
                    5f:ae:a0:f9:3c:57:dc:11:79:6a:08:0d:09:a6:6d:
                    c0:a4:bb:26:2d:df:79:c0:89:7a:c9:ad:fc:52:92:
                    81:13:8e:97:9f:38:e0:48:e2:85:5a:ec:13:22:c0:
                    32:f6:75:7f:a2:21:d1:de:1f:6b:82:bc:01:ef:71:
                    b1:6c:af:a0:30:e3:4d:cb:76:bd:df:bc:29:22:93:
                    a0:15:b2:f9:ce:07:15:7c:8f:59:0f:1e:e9:34:41:
                    36:c3:c9:e3:bc:90:fe:33:05:65:32:17:23:05:5e:
                    f7:4c:2a:b3:a0:54:de:70:b3:c6:c6:e7:79:9a:f4:
                    78:05:72:b8:53:48:d8:33:bc:3a:73:f7:3d:6d:da:
                    21:e8:2d:26:5c:37:5c:c7:b0:de:03:a7:89:c4:3a:
                    b0:08:65:28:9e:37:19:86:02:ab:ce:9e:44:98:1c:
                    4c:ba:2a:18:a4:ab:bd:16:39:af:27:43:c2:59:0b:
                    81:d6:c4:17:7a:33:86:ed:cd:b3:da:3e:7b:55:0b:
                    97:a5:94:a5:0a:ee:93:ab:17:29:3d:10:ff:8e:4c:
                    40:77:27:0f:af:d6:ea:bb:7c:64:2e:3e:6e:91:cf:
                    1d:8e:6d:55:e1:c2:2a:f5:e1:b8:b2:43:a4:ad:57:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:81:9A:3B:CB:C7:E6:26:7B:B0:4D:94:95:18:C7:BC:BD:60:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.64.0/22
                  103.41.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:92:9f:4d:1b:f1:7d:44:12:ca:90:79:38:6e:11:5b:87:
         95:05:37:c5:5f:ed:3e:0a:31:cd:c5:61:8b:67:18:99:60:b2:
         0e:4f:3e:bd:be:e6:4b:b0:5f:89:94:01:d7:67:bc:a4:e5:45:
         ae:de:26:52:f1:34:d5:fa:e2:4c:e6:65:c9:9b:b5:a3:35:8b:
         ae:74:75:d2:66:87:51:fa:57:00:97:74:b9:b3:88:3b:2d:5d:
         17:86:9f:38:ae:ed:21:c3:4c:a0:d3:8d:4b:0f:4f:80:2b:f3:
         b8:38:7a:4f:ef:05:35:49:a4:8b:3d:6f:28:e9:e5:c5:d8:17:
         a0:ee:08:c2:4b:45:fe:22:c8:a5:bd:99:d0:c1:9e:86:ee:bd:
         61:58:1f:25:3b:95:fe:e7:73:7a:b0:16:14:ec:a6:51:00:d7:
         a1:58:e5:1b:e9:79:bb:64:49:7c:10:73:50:88:ac:56:3a:e5:
         f7:16:73:5d:79:a9:f4:1e:79:57:da:85:75:6c:0c:05:37:05:
         0d:f9:ab:6b:f3:66:ff:0a:9c:40:3b:6e:fa:be:32:83:61:fe:
         de:b7:ea:a0:0e:0b:07:c4:a8:21:43:af:af:f8:8a:15:72:7c:
         b7:58:9b:8e:b3:e2:22:de:4c:52:ab:1c:87:43:e6:34:2f:d7:
         61:74:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:36 2026 by rpki-client