Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2829EA645E3711F08BB53F42C4F9AE02.roa
File:                     2829EA645E3711F08BB53F42C4F9AE02.roa (raw, json)
Hash identifier:          QtWuWUuGsQyq/PPP6NohNns0Lc/Dd8/dMAmSGdP1Npk=
Subject key identifier:   A8:93:58:43:94:36:1A:C8:1C:B7:FF:AA:5F:7D:95:9E:47:E0:89:2C
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       06C1
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2829EA645E3711F08BB53F42C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:59 +0000
ROA not before:           Thu 28 Aug 2025 14:51:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153983
IP address blocks:        165.101.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:59 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d0f-b098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:a7:86:44:70:37:c5:8e:be:2b:39:83:cb:
                    17:df:b0:58:1c:b3:9d:2b:17:d7:cd:74:43:76:90:
                    fb:0d:5e:23:cc:f4:ea:10:fc:db:c1:bc:bf:c2:88:
                    fc:91:2f:9e:1e:8f:ba:68:7e:b7:91:e5:ad:6a:05:
                    e3:41:cb:0d:52:74:d5:09:ba:77:b9:3a:9b:42:63:
                    d9:d7:82:88:e9:54:37:da:68:99:f3:51:83:0a:77:
                    4d:11:a5:e5:b8:57:b7:4f:f9:cf:64:10:1d:73:78:
                    ed:28:1d:96:b8:6c:ab:94:71:9d:f6:3c:e4:ed:87:
                    aa:1e:8a:ff:d2:67:17:04:c1:6a:db:d7:1f:61:2c:
                    01:e6:6a:3f:13:be:e2:5b:9f:ca:01:63:a5:e0:74:
                    a6:7e:79:86:0c:a9:17:34:ca:ed:92:3b:92:c9:be:
                    59:5a:db:2f:2c:9d:75:ec:23:35:13:46:24:0f:60:
                    05:a7:b4:ea:ac:80:a4:34:6a:b2:9b:96:63:74:fc:
                    09:f4:6b:78:36:34:b3:9d:99:4c:90:17:3b:68:40:
                    7c:ea:f1:99:6b:4b:63:fc:3f:41:39:97:2e:44:25:
                    bc:b4:f3:60:99:a9:45:c8:b5:aa:0a:2d:f9:08:5c:
                    73:78:5d:bd:a4:84:51:00:ac:3d:ae:2c:0e:be:d3:
                    31:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:58:43:94:36:1A:C8:1C:B7:FF:AA:5F:7D:95:9E:47:E0:89:2C
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2829EA645E3711F08BB53F42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:62:0e:aa:14:e3:a7:64:04:2f:b1:54:60:88:3e:9a:34:
         16:d2:83:89:8d:42:d1:64:c2:6c:43:7b:88:1e:8d:45:da:ac:
         33:09:e4:3e:10:86:83:52:6c:8c:34:0d:15:45:72:0e:1a:73:
         6d:f3:5e:6f:ab:56:a6:8e:ca:d1:7a:44:23:72:6b:31:46:aa:
         be:4f:fe:98:6c:32:12:0f:e3:fc:8d:bb:82:c3:ec:9a:3b:b8:
         c5:98:4f:f1:52:3c:d7:33:38:80:97:e0:67:9e:db:de:0d:9b:
         53:ca:4c:0b:c6:ef:62:e6:8d:c1:ff:1a:33:5d:a2:17:15:1e:
         23:c9:63:74:fa:03:63:b7:9c:86:70:db:92:ce:28:3f:89:99:
         0a:ee:0e:b6:64:2e:b1:87:bb:46:5a:cd:a7:40:46:ae:a3:69:
         5b:0a:29:2d:c3:0a:18:29:0b:8e:82:d6:b2:ad:04:0f:a7:52:
         69:c6:d2:7d:17:92:9c:25:b3:b1:d2:32:df:2f:3f:27:a3:66:
         92:d2:aa:58:3c:93:5f:3f:08:3d:ea:ed:ae:95:81:2a:6c:18:
         be:36:22:c6:63:0f:f7:51:d4:e0:a3:50:73:10:0f:06:e8:bd:
         93:61:61:c9:b1:31:c5:f8:16:26:e9:6b:20:4c:e1:fe:80:a2:
         33:7a:87:85
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmQwZi1iMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnZenhkRwN8WOvis5g8sX37BYHLOdKxfXzXRDdpD7DV4jzPTqEPzbwby/woj8
kS+eHo+6aH63keWtagXjQcsNUnTVCbp3uTqbQmPZ14KI6VQ32miZ81GDCndNEaXl
uFe3T/nPZBAdc3jtKB2WuGyrlHGd9jzk7YeqHor/0mcXBMFq29cfYSwB5mo/E77i
W5/KAWOl4HSmfnmGDKkXNMrtkjuSyb5ZWtsvLJ117CM1E0YkD2AFp7TqrICkNGqy
m5ZjdPwJ9Gt4NjSznZlMkBc7aEB86vGZa0tj/D9BOZcuRCW8tPNgmalFyLWqCi35
CFxzeF29pIRRAKw9riwOvtMx7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKiTWEOU
NhrIHLf/ql99lZ5H4IksMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMjgyOUVBNjQ1
RTM3MTFGMDhCQjUzRjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGlZS4wDQYJKoZIhvcNAQELBQADggEBACldYg6qFOOnZAQv
sVRgiD6aNBbSg4mNQtFkwmxDe4gejUXarDMJ5D4QhoNSbIw0DRVFcg4ac23zXm+r
VqaOytF6RCNyazFGqr5P/phsMhIP4/yNu4LD7Jo7uMWYT/FSPNczOICX4Gee294N
m1PKTAvG72LmjcH/GjNdohcVHiPJY3T6A2O3nIZw25LOKD+JmQruDrZkLrGHu0Za
zadARq6jaVsKKS3DChgpC46C1rKtBA+nUmnG0n0Xkpwls7HSMt8vPyejZpLSqlg8
k18/CD3q7a6VgSpsGL42IsZjD/dR1OCjUHMQDwbovZNhYcmxMcX4FibpayBM4f6A
ojN6h4U=
-----END CERTIFICATE-----
Generated at Sun Sep 7 00:35:17 2025 by rpki-client