Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
File:                     C483C80CDE4011EFB4A11D5CC4F9AE02.roa (raw, json)
Hash identifier:          ZX3gzuVVdSt9pwPI3aB1UqH4krxlC/IXAAYaCHcrBD8=
Subject key identifier:   06:6C:6C:BA:3F:B7:B1:45:F2:28:12:53:AB:53:72:BD:4F:FA:EA:96
Certificate issuer:       /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial:       01FF
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 20:40:03 +0000
ROA not before:           Fri 02 Oct 2026 20:40:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137432
IP address blocks:        103.153.52.0/23 maxlen: 23
                          103.153.52.0/24 maxlen: 24
                          103.153.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004
        Validity
            Not Before: Oct  2 20:40:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ac016a3-2298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:20:98:8a:44:96:0b:c1:44:94:ca:65:71:
                    fa:c8:8c:e9:8e:42:27:bf:55:b0:67:e1:65:91:e6:
                    61:82:04:4c:ac:87:a2:d7:e3:08:ee:91:7b:00:ad:
                    5d:fa:71:49:09:8f:1f:46:43:32:02:0a:ab:f3:54:
                    17:88:15:67:e7:e2:c7:b0:d5:5d:c2:0e:4d:03:0a:
                    3d:24:eb:8d:dc:71:a8:73:1e:0a:4d:6a:eb:2b:fa:
                    1f:d0:e9:4b:1b:72:b1:44:9d:94:07:38:26:a0:6e:
                    16:3e:f0:03:82:98:ab:71:55:38:c5:f8:a6:39:68:
                    eb:63:88:c4:4e:50:71:17:87:6f:81:90:bf:59:c9:
                    49:08:ac:cf:fe:d4:81:bc:9e:b5:87:a3:43:b4:51:
                    54:29:db:02:71:4d:65:67:5b:42:e5:bd:98:59:21:
                    3c:b9:e4:2a:6b:a7:36:08:5e:90:90:28:98:d0:da:
                    f1:0b:b3:98:e0:63:81:cb:5c:40:e2:aa:de:24:38:
                    f6:41:67:44:d3:9d:64:3f:90:ba:07:b8:d1:c3:3e:
                    c2:63:27:d8:a0:d1:77:da:2c:69:d7:fe:c1:68:b2:
                    e3:b6:03:39:49:e3:0b:3e:42:4a:6a:ef:75:ba:d3:
                    f3:d9:af:5e:b2:9f:ce:75:4f:76:d7:4d:3b:fc:b8:
                    c1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:6C:BA:3F:B7:B1:45:F2:28:12:53:AB:53:72:BD:4F:FA:EA:96
            X509v3 Authority Key Identifier:
                keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/C483C80CDE4011EFB4A11D5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:b5:51:db:f4:7a:ad:ae:fb:9f:b9:c6:5d:1c:25:aa:08:
         38:ff:5a:4a:5a:8b:4c:d9:dc:59:5c:4a:6e:be:85:e7:3e:fc:
         a0:1e:80:8f:83:62:76:80:1b:dc:f3:17:90:46:cc:98:04:a9:
         46:65:b9:2a:1d:bc:85:a3:17:e8:46:3d:20:2a:9a:77:b1:90:
         1c:31:9d:02:99:8f:65:63:08:74:b8:53:c9:ca:2e:c9:41:3f:
         5b:3c:66:78:4a:f2:01:ab:19:ed:08:cd:28:6f:12:7d:e1:3a:
         30:07:51:53:64:58:9e:18:b9:94:2f:a0:4b:84:7b:a2:54:92:
         20:2d:4e:ce:f3:b3:29:4e:7c:3f:2f:a5:4f:ff:de:a2:41:41:
         ad:a2:43:67:9a:08:46:4a:db:f8:3a:ba:7a:f9:d5:74:07:20:
         64:b7:fa:7b:fd:96:52:1c:8c:ae:8f:98:3b:ca:96:44:76:f0:
         14:67:dc:eb:ea:b2:ca:d0:a4:bf:9b:dd:90:b1:32:55:f2:96:
         a9:c8:c7:8f:e6:79:4e:e2:a1:e2:67:2d:6d:41:f0:f2:23:2f:
         36:02:64:e9:87:86:8a:c1:22:23:78:12:b9:49:e9:3f:2d:0b:
         82:17:c2:64:8e:39:74:be:79:de:8c:87:0c:f2:fa:7f:b2:52:
         f4:5d:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:59:08 2026 by rpki-client