Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/52577150319811F1AB2694AFAC833773.roa
File:                     52577150319811F1AB2694AFAC833773.roa (raw, json)
Hash identifier:          LOZlkdczQyWa6NLrVEgxrJ/n+qi1LfNaLpjILaisoZI=
Subject key identifier:   B8:0A:6E:C4:C1:A4:2B:B4:A9:14:9C:8D:36:B0:7B:63:F1:E9:0C:C2
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       21CB
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/52577150319811F1AB2694AFAC833773.roa
Signing time:             Mon 06 Apr 2026 09:09:31 +0000
ROA not before:           Mon 06 Apr 2026 09:09:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142549
IP address blocks:        165.101.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 04:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8651 (0x21cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr  6 09:09:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69d3784b-29d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:5a:55:b0:bc:0c:83:98:db:c1:0d:c7:14:
                    77:a7:ff:67:37:3c:d9:90:cd:8f:bc:ad:a6:47:05:
                    85:7c:9e:29:7c:62:7d:85:a7:2b:45:a0:76:6a:e6:
                    f8:5b:99:66:71:0e:33:d5:03:ee:7c:fb:f1:71:8e:
                    4c:4d:3e:51:11:18:6a:f9:04:87:74:e7:58:b3:e6:
                    8e:bb:88:8f:53:db:18:e1:ac:f2:ac:02:47:b2:94:
                    8b:5e:54:64:56:51:7e:f8:3a:f9:19:37:d1:c9:75:
                    53:5e:26:26:b6:ce:46:5f:48:c3:98:69:ab:2c:98:
                    34:7c:52:47:1a:4d:9c:f5:47:42:74:3b:08:a3:10:
                    31:d9:3f:0c:0b:bf:39:c2:a7:da:ff:a1:b9:84:ec:
                    aa:c9:20:62:7c:a2:49:59:be:8a:bc:bd:4d:2a:83:
                    81:dc:30:fb:ed:9f:f9:e6:31:59:11:04:4b:df:91:
                    88:90:5c:d7:ea:db:12:38:6f:61:41:f0:d3:e1:10:
                    19:b7:55:3a:8f:85:29:9f:12:3d:99:84:7c:3e:7d:
                    2e:33:83:b9:a1:c8:5c:f2:a8:dc:89:67:6b:49:14:
                    af:6e:0b:11:6a:0e:9d:49:fe:02:8b:4c:ef:11:56:
                    46:da:9f:7e:8a:fb:49:b7:c7:62:96:ed:74:d3:05:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:6E:C4:C1:A4:2B:B4:A9:14:9C:8D:36:B0:7B:63:F1:E9:0C:C2
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/52577150319811F1AB2694AFAC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:cb:c8:d5:13:ab:91:89:df:a9:88:26:51:9a:1d:ff:79:d9:
         0e:90:a5:14:ec:68:3c:4f:c4:6a:68:0a:ca:81:aa:13:4b:4e:
         ae:aa:b0:35:1c:76:37:8c:76:b5:e6:92:ed:64:40:e2:06:af:
         e2:58:a7:41:bb:b0:3e:d2:bc:da:2d:b6:78:82:29:65:89:df:
         95:8c:a9:8b:30:e1:b7:66:f7:f7:0c:c0:99:06:b6:6a:cb:a6:
         b5:33:3a:b0:1d:7f:56:d8:92:3f:45:1e:d4:92:49:6e:71:c1:
         40:4e:63:d0:b8:aa:94:02:c4:31:a9:a9:82:7a:c7:7f:24:9b:
         93:6f:5d:a7:c9:b9:83:da:4f:6b:50:db:9e:75:c0:20:89:67:
         80:a8:73:49:93:91:cb:d0:87:46:ee:cc:14:cb:1f:32:27:82:
         37:8a:df:ee:b5:6f:3e:7d:c2:fd:10:c6:a7:b6:ef:c7:d0:03:
         d3:d9:40:53:82:84:ef:54:bd:42:dd:5d:01:34:e5:e1:b8:62:
         ee:8f:c6:a0:28:7c:e5:d6:58:b2:bc:82:16:1d:8a:e6:4e:14:
         b0:32:48:83:de:d8:3c:d9:f5:93:78:ef:e4:98:a9:48:6e:03:
         9e:4b:82:18:00:56:de:82:4b:c1:7b:3e:fb:8e:0f:ae:06:fe:
         14:6f:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:31 2026 by rpki-client