Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
File:                     536D53405D4811F0B045442CC4F9AE02.roa (raw, json)
Hash identifier:          3sd5pXmnO11FojhhzpaXYZTNvf7FtXTEPDmeC5xxy5Q=
Subject key identifier:   E3:9D:32:87:B8:88:F2:7E:D6:7F:1B:5C:FB:4B:82:0C:31:6B:95:C7
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23E1
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:20:32 +0000
ROA not before:           Fri 02 Oct 2026 15:20:32 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154003
IP address blocks:        165.101.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9185 (0x23e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:20:32 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbc0-000e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:fd:a2:d8:c2:0f:03:79:b1:20:82:68:7c:
                    8e:ff:ec:9c:62:f6:de:4b:6f:ed:a4:23:07:34:95:
                    38:ed:13:32:4f:44:46:a6:f5:99:17:3d:e8:c4:a4:
                    52:8d:e3:c2:f6:97:64:20:b5:52:c5:e9:22:82:eb:
                    10:8b:81:0e:01:68:c6:fe:00:da:19:35:f5:43:66:
                    db:90:1e:8e:c2:9a:76:a9:a2:36:8b:13:da:87:5e:
                    e9:2d:fd:30:f3:56:00:37:85:64:20:7c:ac:17:ce:
                    72:01:3a:b0:6f:ae:86:8c:ad:5b:fc:eb:c0:79:09:
                    4e:89:a2:4d:90:95:c8:f3:e9:49:3d:0a:f0:a3:7e:
                    e6:8e:f4:64:5f:b0:77:d0:5c:58:c3:ac:4c:42:42:
                    e1:67:50:26:cd:2e:b5:68:25:5c:2e:c1:f1:b3:63:
                    16:61:5a:58:fc:69:37:01:82:d8:6f:73:19:64:cf:
                    8c:e2:b5:00:1f:24:28:ea:0f:ef:55:f3:0e:60:b5:
                    20:af:22:53:03:29:3c:3e:d2:9c:00:3c:c5:f7:ba:
                    bf:c4:12:a8:89:e9:1c:e0:90:7c:d2:35:db:2a:16:
                    c9:19:42:77:c4:e9:5d:cb:36:e2:9c:aa:57:4e:0b:
                    2a:0e:16:68:29:e3:5c:5e:0a:48:e4:e1:d1:08:20:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9D:32:87:B8:88:F2:7E:D6:7F:1B:5C:FB:4B:82:0C:31:6B:95:C7
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/536D53405D4811F0B045442CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:2b:7a:5c:c6:1f:d8:05:50:0c:9e:8e:8d:e7:e2:47:80:62:
         18:66:8a:57:90:e3:a1:53:80:33:39:6f:ac:f1:ba:88:59:e0:
         1e:07:c2:35:62:81:4c:8f:37:68:9c:5d:11:c1:49:e9:ac:50:
         58:f9:67:29:74:7e:41:ed:0c:2e:6e:33:f8:3a:7b:13:5c:d7:
         bc:df:76:10:5d:3b:e5:cf:73:b1:0a:4e:89:eb:66:53:42:18:
         b5:c1:19:e1:76:e2:71:76:d8:b7:28:ab:50:77:0e:b1:89:a0:
         c5:e8:41:09:f5:30:6c:d2:1a:9c:d1:74:2b:71:86:08:94:3a:
         d3:9e:36:35:0b:60:6f:7f:fe:20:0f:28:75:a5:ca:82:95:8f:
         2e:3b:58:e7:db:32:a3:30:66:68:0e:f6:67:eb:ad:ec:3e:19:
         9d:c1:bb:9e:02:35:d5:a6:9d:4f:dd:19:5f:aa:e9:f7:88:f2:
         b0:76:03:06:56:84:e0:fe:39:09:4f:12:c0:9e:cd:45:05:2a:
         c3:01:e0:ff:4e:44:1f:27:d9:20:b2:1a:38:0e:a9:ea:4d:28:
         a9:41:25:44:d2:dd:e8:8e:59:47:83:53:2b:6e:97:dd:d3:7a:
         63:ee:f2:7d:74:47:52:c1:49:d0:08:05:f7:fa:aa:d6:1b:d1:
         e8:dd:ba:7a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUyMDMyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2JjMC0wMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1CD9otjCDwN5sSCCaHyO/+ycYvbeS2/tpCMHNJU47RMyT0RGpvWZFz3oxKRS
jePC9pdkILVSxekigusQi4EOAWjG/gDaGTX1Q2bbkB6Owpp2qaI2ixPah17pLf0w
81YAN4VkIHysF85yATqwb66GjK1b/OvAeQlOiaJNkJXI8+lJPQrwo37mjvRkX7B3
0FxYw6xMQkLhZ1AmzS61aCVcLsHxs2MWYVpY/Gk3AYLYb3MZZM+M4rUAHyQo6g/v
VfMOYLUgryJTAyk8PtKcADzF97q/xBKoiekc4JB80jXbKhbJGUJ3xOldyzbinKpX
TgsqDhZoKeNcXgpI5OHRCCBpHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOOdMoe4
iPJ+1n8bXPtLggwxa5XHMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNTM2RDUzNDA1
RDQ4MTFGMEIwNDU0NDJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWVaMA0GCSqGSIb3DQEBCwUAA4IBAQC5K3pcxh/YBVAMno6N5+JH
gGIYZopXkOOhU4AzOW+s8bqIWeAeB8I1YoFMjzdonF0RwUnprFBY+WcpdH5B7Qwu
bjP4OnsTXNe833YQXTvlz3OxCk6J62ZTQhi1wRnhduJxdti3KKtQdw6xiaDF6EEJ
9TBs0hqc0XQrcYYIlDrTnjY1C2Bvf/4gDyh1pcqClY8uO1jn2zKjMGZoDvZn663s
PhmdwbueAjXVpp1P3Rlfqun3iPKwdgMGVoTg/jkJTxLAns1FBSrDAeD/TkQfJ9kg
sho4DqnqTSipQSVE0t3ojllHg1Mrbpfd03pj7vJ9dEdSwUnQCAX3+qrWG9Ho3bp6
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:43 2026 by rpki-client