Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/54338F04B19111F0A5C55920C4F9AE02.roa
File:                     54338F04B19111F0A5C55920C4F9AE02.roa (raw, json)
Hash identifier:          VAbU71B2XEsYfqVheCzITEvVgtvLRWd8as3ki+anaVY=
Subject key identifier:   C1:07:60:E5:6B:FA:89:5E:BC:E0:F7:0A:9C:C9:E2:B4:AC:F8:B2:DC
Certificate issuer:       /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Certificate serial:       D0
Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/54338F04B19111F0A5C55920C4F9AE02.roa
Signing time:             Mon 05 Oct 2026 07:55:32 +0000
ROA not before:           Mon 05 Oct 2026 07:55:32 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     154223
IP address blocks:        123.253.180.0/24 maxlen: 24
                          123.253.181.0/24 maxlen: 24
                          2402:2b20::/48 maxlen: 48
                          2402:2b20:1::/48 maxlen: 48
                          2402:2b20:2::/48 maxlen: 48
                          2402:2b20:3::/48 maxlen: 48
                          2402:2b20:4::/48 maxlen: 48
                          2402:2b20:5::/48 maxlen: 48
                          2402:2b20:6::/48 maxlen: 48
                          2402:2b20:7::/48 maxlen: 48
                          2402:2b20:8::/48 maxlen: 48
                          2402:2b20:80::/48 maxlen: 48
                          2402:2b20:81::/48 maxlen: 48
                          2402:2b20:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
        Validity
            Not Before: Oct  5 07:55:32 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac357f4-00cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:49:51:c2:ca:6a:d0:62:59:ea:ac:de:44:
                    1b:69:48:ae:f0:d0:27:92:dc:53:50:fd:4a:9a:fc:
                    73:8a:05:c0:99:ac:76:ee:ca:ec:ea:b3:b6:a1:2a:
                    8e:d0:3b:e6:c7:58:42:2c:15:43:b9:47:36:83:6a:
                    29:ac:0f:65:ce:3f:63:06:b0:c5:0e:41:20:72:d0:
                    9c:ca:a2:4c:4f:d2:2e:e0:ed:04:9d:3d:17:1b:f9:
                    b6:ce:7e:81:a6:39:8e:9b:a1:0e:fe:7c:67:d0:db:
                    d9:ac:09:55:47:f3:4f:54:67:21:38:67:96:ec:07:
                    3a:d2:86:58:46:ea:26:4f:f9:4d:10:ce:a8:45:85:
                    6f:b2:ce:02:70:1d:e7:7d:42:2a:0e:84:17:79:28:
                    ec:d0:6f:2b:1d:45:93:61:32:21:0a:a5:ec:4e:b1:
                    c1:4f:d3:5f:a3:80:8c:81:c2:8f:58:85:59:1c:d2:
                    13:b0:05:f2:12:17:c2:33:7d:ee:09:34:ed:c1:f2:
                    ef:40:57:95:58:38:1f:34:30:4d:37:00:ff:a8:ec:
                    44:03:cc:0e:5b:6a:89:e2:b3:3f:d8:1b:e2:7b:58:
                    3c:3f:32:58:6e:0c:dd:f8:9c:17:8b:19:78:e1:da:
                    74:b5:ce:b5:8b:e8:fd:7b:71:df:d6:b9:99:08:b4:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:07:60:E5:6B:FA:89:5E:BC:E0:F7:0A:9C:C9:E2:B4:AC:F8:B2:DC
            X509v3 Authority Key Identifier:
                keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/54338F04B19111F0A5C55920C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.180.0/23
                IPv6:
                  2402:2b20::-2402:2b20:8:ffff:ffff:ffff:ffff:ffff
                  2402:2b20:80::-2402:2b20:82:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:67:50:b8:a6:2a:3f:a7:e4:f3:70:a5:98:cc:1f:fa:a8:
         00:88:96:59:be:14:88:5a:86:a3:d3:95:8e:84:df:86:14:23:
         8d:7c:08:44:53:11:83:13:2b:3f:f0:31:07:1e:41:69:0c:22:
         7b:c4:b9:a1:c9:18:96:56:42:44:79:69:5d:ee:6e:2f:52:55:
         2a:61:c3:73:9f:fd:b0:b1:64:77:db:7b:97:61:33:35:d8:a9:
         c2:4c:d9:64:28:8d:b2:f5:4b:1a:ff:d9:f1:89:54:f0:cc:91:
         15:47:55:56:4a:a8:d9:3d:e3:a4:6c:ba:82:fb:de:27:43:ee:
         27:bd:92:a2:0c:80:01:88:3e:32:f8:54:4e:18:3e:05:f1:5d:
         5b:31:7f:7e:33:85:6f:0a:2f:0f:55:e5:0c:5a:41:0f:cf:d5:
         bb:e2:d8:72:46:7a:74:99:cd:40:d5:34:25:61:e5:1a:90:e4:
         38:88:f0:dc:1a:13:9e:70:0b:b8:98:df:1b:b4:cd:0f:a0:f3:
         db:f0:94:5d:c0:1d:0d:a0:86:6d:b3:e8:45:44:32:43:bb:ad:
         57:fd:00:74:b8:db:d2:11:f2:6c:13:d2:4b:96:5a:d5:ba:77:
         0d:6a:e5:8f:92:b3:b8:fb:f1:b6:5a:e9:4f:66:89:5e:c0:9d:
         e4:61:24:2a
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3MjcxMTAvBgNVBAUTKERFNkNEQTY5QUIxQUM4OUFFNzVGNzY1Q0U3NzI3M0Ux
MUI3RkQ2N0UwHhcNMjYxMDA1MDc1NTMyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMzNTdmNC0wMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApThJUcLKatBiWeqs3kQbaUiu8NAnktxTUP1KmvxzigXAmax27srs6rO2oSqO
0Dvmx1hCLBVDuUc2g2oprA9lzj9jBrDFDkEgctCcyqJMT9Iu4O0EnT0XG/m2zn6B
pjmOm6EO/nxn0NvZrAlVR/NPVGchOGeW7Ac60oZYRuomT/lNEM6oRYVvss4CcB3n
fUIqDoQXeSjs0G8rHUWTYTIhCqXsTrHBT9Nfo4CMgcKPWIVZHNITsAXyEhfCM33u
CTTtwfLvQFeVWDgfNDBNNwD/qOxEA8wOW2qJ4rM/2Bvie1g8PzJYbgzd+JwXixl4
4dp0tc61i+j9e3Hf1rmZCLQOLQIDAQABo4ICjjCCAoowHQYDVR0OBBYEFMEHYOVr
+olevOD3CpzJ4rSs+LLcMB8GA1UdIwQYMBaAFN5s2mmrGsia5192XOdyc+Ebf9Z+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyNy8yNTQzMjQ0Qzky
MDcxMUYwQTgzNzQxNENDNEY5QUUwMi8zbXphYWFzYXlKcm5YM1pjNTNKejRSdF8x
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNtemFhYXNheUpyblgzWmM1M0p6NFJ0XzFuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU3MjcvMjU0MzI0NEM5MjA3MTFGMEE4Mzc0MTRDQzRGOUFFMDIvNTQzMzhGMDRC
MTkxMTFGMEE1QzU1OTIwQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAM
BAIAATAGAwQBe/20MCwEAgACMCYwEAMFBSQCKyADBwAkAisgAAgwEgMHByQCKyAA
gAMHACQCKyAAgjANBgkqhkiG9w0BAQsFAAOCAQEAX7FnULimKj+n5PNwpZjMH/qo
AIiWWb4UiFqGo9OVjoTfhhQjjXwIRFMRgxMrP/AxBx5BaQwie8S5ockYllZCRHlp
Xe5uL1JVKmHDc5/9sLFkd9t7l2EzNdipwkzZZCiNsvVLGv/Z8YlU8MyRFUdVVkqo
2T3jpGy6gvveJ0PuJ72SogyAAYg+MvhUThg+BfFdWzF/fjOFbwovD1XlDFpBD8/V
u+LYckZ6dJnNQNU0JWHlGpDkOIjw3BoTnnALuJjfG7TND6Dz2/CUXcAdDaCGbbPo
RUQyQ7utV/0AdLjb0hHybBPSS5Za1bp3DWrlj5KzuPvxtlrpT2aJXsCd5GEkKg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:23:31 2026 by rpki-client