Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa
File:                     53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa (raw, json)
Hash identifier:          j7oDudNtnbXvan6+e10nW2vH4dBDgKjEBZePB4GbBm0=
Subject key identifier:   50:B8:0D:FB:31:66:19:27:32:D9:7A:DD:30:F7:A1:5B:EE:28:6E:DB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E559
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:01:18 +0000
ROA not before:           Sun 31 May 2026 17:01:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137591
IP address blocks:        36.255.64.0/22 maxlen: 24
                          103.41.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58713 (0xe559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:01:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c695e-d348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:75:a2:34:03:62:f2:b1:b4:66:aa:6f:8d:
                    8b:b6:fb:87:bc:23:dd:e2:5e:01:54:82:9b:32:c6:
                    86:19:93:52:f5:58:b9:42:cf:da:02:58:75:19:7a:
                    46:b8:ca:b9:de:1d:bb:f3:35:2a:a4:4c:fa:2a:5f:
                    78:74:8b:cc:ff:c6:ce:0e:61:de:42:28:8e:01:95:
                    23:81:72:d7:65:5e:39:e3:22:8b:66:93:9e:e4:82:
                    ea:41:b3:ef:2e:67:6d:4f:c2:b6:37:da:87:6b:a6:
                    20:2e:dc:fa:24:47:62:45:81:8f:77:0f:d8:e0:7a:
                    aa:bb:05:9a:1e:ba:a8:88:47:33:32:45:b1:4f:1f:
                    3a:d9:5b:5f:3c:59:2f:b4:c9:90:8c:b1:53:61:96:
                    36:5d:bc:4b:ee:b5:2f:81:f9:6d:fc:3b:d4:c7:03:
                    db:bd:e8:4a:3c:a0:98:ac:7e:3f:32:ef:6c:93:ea:
                    91:fd:23:b8:93:e3:70:93:b7:68:84:76:69:74:79:
                    33:ea:69:2e:97:b8:b1:2c:ed:7c:8e:72:d7:7d:86:
                    45:52:4f:f9:81:88:f5:69:69:8b:83:08:44:c5:d7:
                    be:2a:e9:a6:a3:a6:85:4c:3f:f0:8b:9c:05:72:6c:
                    d1:b9:1f:95:e6:28:55:6d:d2:b8:9d:dc:ad:fc:88:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B8:0D:FB:31:66:19:27:32:D9:7A:DD:30:F7:A1:5B:EE:28:6E:DB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F16A0CEF4F11EF9CB3CA35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.64.0/22
                  103.41.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:b8:6d:29:b7:51:54:85:49:c9:d4:f4:bd:46:d5:b2:f1:
         a7:78:44:22:72:4f:07:ff:aa:1a:6b:5b:43:e1:d2:ca:91:89:
         8c:ec:44:c2:2c:49:3d:12:c9:96:1a:81:ba:d2:9c:b9:f7:4e:
         c5:53:30:f5:bb:21:ef:01:05:cf:e3:eb:d9:4f:e7:84:dd:d6:
         7a:ee:58:33:7e:a2:36:ac:da:4d:e8:be:7d:4c:fd:09:2c:86:
         b9:1c:44:8f:70:2b:27:e3:4f:c7:64:68:6f:20:5f:ae:31:23:
         b3:17:92:ca:6f:10:02:ec:13:c8:6d:68:ec:52:65:be:7a:ca:
         e8:82:7b:bf:60:dd:33:12:8f:06:cd:e8:ac:6e:07:8a:96:15:
         d4:e8:cb:b9:05:1b:47:fa:26:e5:8e:3f:5e:3f:67:44:75:cd:
         33:34:b6:bc:c9:1f:5d:16:d2:9d:9b:1c:20:30:26:bf:4d:e5:
         05:ee:54:c5:53:8f:98:03:b4:d4:5b:62:c5:0c:34:8e:6b:1f:
         78:2a:20:01:1a:dd:46:ef:e2:54:ec:35:4f:59:b4:e3:20:38:
         28:36:94:99:73:e3:26:2a:e4:68:ca:48:06:9d:ef:0c:37:63:
         33:4c:6a:d7:19:1c:f9:f1:12:c0:ec:a9:57:28:ff:5c:4b:b1:
         a7:fb:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:19 2026 by rpki-client