Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
File:                     536D53405D4811F0B045442CC4F9AE02.roa (raw, json)
Hash identifier:          Ojetrb+xNn7i5tvPBU681GoP6H4rZWDb9YQudDhANSs=
Subject key identifier:   E5:0B:92:CC:FC:AC:87:77:1F:D3:B3:D6:F4:8D:8B:2A:CC:24:1D:B2
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0619
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
Signing time:             Thu 10 Jul 2025 04:42:47 +0000
ROA not before:           Thu 10 Jul 2025 04:42:47 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     154003
IP address blocks:        165.101.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Jul 10 04:42:47 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=686f44c6-0ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:88:12:b5:7c:84:03:89:e5:13:c7:fc:1e:
                    a8:e7:0d:c9:fd:6b:3a:b2:21:01:19:08:21:c4:4e:
                    e9:7f:45:c8:03:39:d7:74:c4:33:5a:48:13:3a:80:
                    60:ca:1e:ec:be:69:2a:79:67:e2:e8:eb:46:4b:52:
                    6b:ab:60:58:e2:6a:40:bb:5c:b4:73:19:97:7c:73:
                    6b:ef:0b:ff:2d:14:13:8e:c6:ba:d3:86:05:62:46:
                    89:e1:f3:66:d0:b6:99:af:25:54:fc:bb:f6:22:2e:
                    ce:8e:ad:dd:6f:9f:9a:ff:f1:0b:6e:f1:31:89:8a:
                    05:a0:ac:89:87:31:d0:f9:7f:7b:3c:fd:48:bd:64:
                    22:de:6f:51:7c:61:a6:ae:99:59:e3:fc:38:df:b2:
                    ce:59:05:d7:fe:f8:e4:25:f0:88:f0:41:32:4d:b1:
                    69:a1:a1:dd:ae:56:87:f0:c0:35:59:81:0d:75:a1:
                    6a:48:b2:a1:c8:24:e7:b4:2c:2b:7d:27:47:3b:cd:
                    62:46:0d:21:d1:d6:f0:be:a0:b5:02:4f:94:e9:b2:
                    4b:6e:a1:0c:dc:c9:37:11:cc:8b:03:5c:50:69:64:
                    28:b7:f9:7c:f1:00:97:4a:54:5f:45:0f:0c:00:43:
                    af:2b:50:56:71:03:39:9b:3f:b0:04:c0:66:99:85:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0B:92:CC:FC:AC:87:77:1F:D3:B3:D6:F4:8D:8B:2A:CC:24:1D:B2
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:c5:cc:a0:0d:5e:7e:b6:78:8b:77:3c:e3:85:3e:a6:64:
         d5:04:45:30:a3:57:bf:1e:be:65:e3:4b:68:15:e9:d0:c4:d5:
         56:c9:05:44:74:4b:ed:9c:54:0b:e5:c6:7e:c5:1a:a5:46:65:
         e1:d5:ff:1b:97:b0:2a:f4:6c:79:fc:da:0a:4a:9f:73:56:1c:
         5e:b3:d2:56:05:ea:02:9c:2f:ae:5d:7b:53:36:4c:1e:27:7a:
         27:79:e2:ae:5c:2b:24:78:99:8e:e9:b6:a0:61:2b:c1:5e:33:
         cd:a8:66:98:57:12:4f:cb:29:ef:b7:26:3a:90:48:67:45:b4:
         e8:43:c1:22:8f:5d:0f:b4:ac:98:15:19:69:53:9b:0c:f6:f5:
         a2:fd:9c:c7:4c:5e:af:61:67:23:69:e8:09:d7:27:32:6b:44:
         d4:b9:6b:38:b9:06:5a:6e:5b:65:c5:60:2a:bc:92:e8:07:f6:
         16:8e:72:6d:7b:af:7b:d8:9c:52:42:87:c8:42:c4:ec:2d:3b:
         70:ca:41:52:d9:10:ea:63:9e:d7:23:fc:96:8a:df:2b:99:b4:
         c7:8a:43:19:63:bf:6f:15:fc:65:5e:6a:cc:a2:9d:32:ac:2e:
         e5:d4:e9:01:65:bf:e8:fa:20:fb:d9:a6:74:54:e8:84:07:c4:
         31:b6:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:31:39 2025 by rpki-client