Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
File:                     536D53405D4811F0B045442CC4F9AE02.roa (raw, json)
Hash identifier:          yu/jXeL4GCozCWwPWZRNy4AVp3PWj2B/ZGYXjNlUgNs=
Subject key identifier:   9C:8F:A5:FE:C9:87:A2:17:B8:4A:86:C1:6C:8B:36:C8:31:91:DF:1A
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       212D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:21:51 +0000
ROA not before:           Thu 28 Aug 2025 14:52:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154003
IP address blocks:        165.101.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8493 (0x212d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:52:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b8e-56c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:0e:63:9e:53:a8:9c:e9:54:cf:7e:6f:2b:
                    af:ee:61:4b:75:7e:ab:75:41:86:e8:5d:de:82:bb:
                    f8:80:43:40:04:e1:5d:f4:93:7c:d3:29:1f:68:85:
                    22:58:71:2b:e8:b1:38:55:46:bf:72:fd:db:f7:75:
                    5e:af:1d:4a:63:40:5e:0d:cb:6f:64:9a:da:29:b3:
                    8a:83:b4:f1:1e:e3:40:d9:98:ea:6d:74:c0:34:d2:
                    45:d2:ad:b4:39:0b:82:e7:08:8f:0d:2f:0f:19:23:
                    d9:1e:5a:12:15:b2:8e:76:68:2d:77:69:48:d1:38:
                    b6:77:10:3f:61:62:4d:45:58:2d:1e:9b:68:53:33:
                    83:c2:0c:65:b3:a6:8b:8f:66:90:bb:ec:54:70:7c:
                    fb:c9:0f:e6:9c:c3:e7:aa:86:21:3a:de:3b:07:e1:
                    d4:2e:95:73:f6:13:81:2c:2f:86:c7:c5:78:cf:79:
                    77:fd:6a:91:cf:84:b9:22:09:b2:df:c3:22:44:da:
                    92:0a:90:17:c8:28:bb:c0:66:4e:21:22:b5:75:4e:
                    59:cf:d8:17:13:4b:db:92:7c:ba:a4:8d:6c:86:2b:
                    b4:2f:50:df:50:51:f6:fc:85:78:6a:c9:a3:de:02:
                    d8:c7:cc:37:c8:e8:c6:f2:cb:7c:bc:dc:d5:5e:14:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8F:A5:FE:C9:87:A2:17:B8:4A:86:C1:6C:8B:36:C8:31:91:DF:1A
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:a2:7e:1d:f9:1d:22:6f:22:d4:33:d3:e3:8a:3f:cd:5d:11:
         d6:f5:e0:3a:b1:05:4d:68:a7:e9:07:32:71:57:db:61:5d:92:
         bf:61:2d:22:de:e9:e1:1b:54:4e:b1:49:7a:f4:c5:48:65:4a:
         f1:c3:8f:f7:5e:21:4b:6b:d8:71:dd:24:b8:74:55:68:95:7e:
         00:5f:79:be:bd:13:ee:8f:7b:e3:5e:62:e0:93:6f:6b:43:a4:
         cd:bd:1d:b7:1d:e5:88:34:ce:f4:10:8a:e1:dc:45:a4:a4:3e:
         bf:0c:e5:1d:44:a6:94:11:1b:cd:39:53:f1:18:f0:6c:1d:a0:
         54:73:5c:cb:8f:be:cb:9e:80:4f:c1:4d:5a:42:bf:98:70:13:
         72:6a:55:9e:49:64:29:c1:dd:d3:09:55:37:fb:47:ca:5b:5f:
         dd:9e:24:db:95:aa:68:f4:67:a7:45:f2:44:63:31:22:f6:89:
         84:f2:ef:03:4d:48:d3:10:54:ea:8b:b4:06:0e:84:b4:09:53:
         db:49:74:ab:48:7a:3c:a7:a7:b8:18:c4:b4:ce:b9:2f:36:2f:
         fd:d6:65:da:8f:a1:b1:1d:b3:9e:9c:1a:20:11:da:97:4a:54:
         1d:3e:95:01:8f:56:79:7c:1c:f9:07:13:40:9d:0d:6e:01:c5:
         da:c0:6f:83
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MjAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWI4ZS01NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBYOY55TqJzpVM9+byuv7mFLdX6rdUGG6F3egrv4gENABOFd9JN80ykfaIUi
WHEr6LE4VUa/cv3b93Verx1KY0BeDctvZJraKbOKg7TxHuNA2ZjqbXTANNJF0q20
OQuC5wiPDS8PGSPZHloSFbKOdmgtd2lI0Ti2dxA/YWJNRVgtHptoUzODwgxls6aL
j2aQu+xUcHz7yQ/mnMPnqoYhOt47B+HULpVz9hOBLC+Gx8V4z3l3/WqRz4S5Igmy
38MiRNqSCpAXyCi7wGZOISK1dU5Zz9gXE0vbkny6pI1shiu0L1DfUFH2/IV4asmj
3gLYx8w3yOjG8st8vNzVXhRwBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJyPpf7J
h6IXuEqGwWyLNsgxkd8aMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNTM2RDUzNDA1
RDQ4MTFGMEIwNDU0NDJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWVaMA0GCSqGSIb3DQEBCwUAA4IBAQAlon4d+R0ibyLUM9Pjij/N
XRHW9eA6sQVNaKfpBzJxV9thXZK/YS0i3unhG1ROsUl69MVIZUrxw4/3XiFLa9hx
3SS4dFVolX4AX3m+vRPuj3vjXmLgk29rQ6TNvR23HeWINM70EIrh3EWkpD6/DOUd
RKaUERvNOVPxGPBsHaBUc1zLj77LnoBPwU1aQr+YcBNyalWeSWQpwd3TCVU3+0fK
W1/dniTblapo9GenRfJEYzEi9omE8u8DTUjTEFTqi7QGDoS0CVPbSXSrSHo8p6e4
GMS0zrkvNi/91mXaj6GxHbOenBogEdqXSlQdPpUBj1Z5fBz5BxNAnQ1uAcXawG+D
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:58 2026 by rpki-client