Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/89327BEACEF311F1B660064D1B66CEF9.roa
File:                     89327BEACEF311F1B660064D1B66CEF9.roa (raw, json)
Hash identifier:          yxEL3j+Rk8I7950MRO+nV9/LHdDi07l+CJ+SCJvupR0=
Subject key identifier:   0D:19:9F:1F:D8:E1:14:18:C5:8D:AB:F9:F2:F5:CE:1E:EA:61:05:9A
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       017E
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/89327BEACEF311F1B660064D1B66CEF9.roa
Signing time:             Fri 23 Oct 2026 15:08:00 +0000
ROA not before:           Fri 23 Oct 2026 15:08:00 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     142115
IP address blocks:        72.57.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct 23 15:08:00 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6adb7850-ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:4b:10:a3:f7:b0:8d:b4:d4:5d:51:74:53:
                    18:28:6d:4a:67:5c:3e:bc:59:f5:2d:28:7e:51:8d:
                    45:4c:be:19:76:1a:04:60:1d:b1:ed:4d:2c:e5:70:
                    cb:c2:b2:ef:17:d5:b7:3c:df:be:dd:4a:5b:4b:35:
                    f1:1f:96:b7:9e:5b:2a:b4:a5:f6:48:b6:98:62:ed:
                    f0:d0:3d:66:dd:e5:81:aa:d2:5b:3e:8b:e7:de:ea:
                    65:90:76:34:a6:c9:04:e3:15:eb:e4:51:db:93:08:
                    0e:29:9a:53:68:1e:46:22:b2:83:fe:bf:2e:f1:fb:
                    57:d9:cf:70:85:82:2e:fb:3f:7e:83:e4:f5:27:c7:
                    02:93:8e:5b:ac:3f:68:bf:3c:0e:0d:0c:1f:05:98:
                    fc:53:68:a5:38:ff:0b:86:24:b6:31:b5:7f:3f:22:
                    fc:59:67:e7:91:6f:17:62:39:90:2b:67:c5:1c:59:
                    51:de:2f:fd:d5:b3:76:46:b6:cf:7a:70:5d:6e:79:
                    0f:66:84:af:83:4b:d6:66:ce:0f:c4:9d:19:9a:0a:
                    e0:b9:99:3b:a6:38:46:85:5c:45:7d:3d:12:5f:d8:
                    47:ca:03:56:6d:f2:65:0c:88:d3:31:d7:f3:f5:cf:
                    59:f0:8e:a7:5f:49:14:e7:60:c2:89:c7:7a:3e:80:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:9F:1F:D8:E1:14:18:C5:8D:AB:F9:F2:F5:CE:1E:EA:61:05:9A
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/89327BEACEF311F1B660064D1B66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.57.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:15:47:38:93:9f:ee:4e:c1:be:3f:26:4a:ea:fe:b6:91:
         14:a9:36:9e:73:6e:8a:e8:d6:76:c7:17:e6:c3:74:0a:0a:49:
         65:51:42:12:38:75:66:06:05:a6:cd:93:11:7f:ef:69:ce:cd:
         2c:3c:11:0b:6e:02:d0:7b:df:48:3b:58:3d:bb:64:01:1f:95:
         fb:0f:7f:13:5d:23:bd:58:6a:8b:0d:70:5d:2a:64:38:69:4d:
         be:a6:21:17:d0:01:2f:c8:c3:19:11:68:ee:5c:03:8f:03:bc:
         5b:b4:fd:5a:84:f6:fd:8a:26:02:c6:87:66:de:91:fc:d7:67:
         f8:5c:1e:5b:4e:48:90:1d:86:c9:9f:56:61:35:e9:fc:31:c0:
         78:0b:7b:3b:20:b1:e6:ae:ec:5e:87:66:31:71:a0:a5:6f:5e:
         c9:e3:2e:52:fa:07:20:98:54:49:9f:0f:d4:15:5f:34:20:2a:
         e4:79:a9:5f:81:f9:27:46:c0:77:4e:01:b3:da:e1:d2:69:92:
         f6:2b:0b:53:78:2e:52:95:6b:2c:32:1e:49:da:0d:42:03:37:
         63:8b:4e:2b:bd:f4:16:75:a9:b2:8d:3f:f1:b0:5a:d4:99:63:
         0d:1c:e1:8e:07:96:2a:76:9b:40:48:2f:37:02:bf:3e:81:a2:
         c8:60:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:39 2026 by rpki-client