Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
File:                     AD3ED5B6608F11F0856BA159C4F9AE02.roa (raw, json)
Hash identifier:          3q4J2q5AzzNXILh2d3xOuS4l+SJK2Pj7D0qC9kdoNIs=
Subject key identifier:   DA:F6:EA:47:AC:CF:C6:B4:38:D9:2A:72:AF:7D:50:7B:44:EA:4A:83
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23E3
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:20:36 +0000
ROA not before:           Fri 02 Oct 2026 15:20:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154042
IP address blocks:        165.101.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9187 (0x23e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:20:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbc4-f0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:eb:f7:2a:a7:8a:4c:d4:fb:f4:fa:46:dd:
                    ac:66:73:50:69:27:4e:72:ea:06:34:93:d8:87:c3:
                    13:b2:bf:cc:20:f2:12:85:f2:a9:68:84:2c:06:82:
                    c8:e9:28:61:e5:38:42:10:fb:88:8d:f5:6d:8c:c4:
                    9a:ee:d8:20:27:da:b5:4c:61:d4:cd:0b:97:44:68:
                    17:49:f9:64:4c:7f:71:92:d9:aa:62:27:db:bc:e6:
                    07:f8:20:f5:f5:f3:6d:83:67:29:68:43:4e:f6:bc:
                    9c:77:9f:30:af:25:25:7e:53:45:9a:58:68:61:44:
                    a5:f4:56:d3:20:98:4b:e5:60:91:d3:28:96:2b:9c:
                    a4:92:10:bc:f8:58:aa:30:56:67:57:26:08:1f:91:
                    c9:f1:cf:bd:f7:a2:d4:a9:21:08:6f:17:0e:c0:1d:
                    13:75:bc:c8:7f:97:ed:1b:a2:77:2c:17:7c:5b:35:
                    89:a5:18:94:af:25:21:80:e9:72:f5:ff:45:f2:20:
                    8f:4f:57:be:55:79:12:5a:91:16:ef:a3:39:b9:d9:
                    37:34:bb:14:88:e2:f8:20:2a:ea:ac:f2:da:e6:87:
                    79:6f:24:21:4a:4b:1e:eb:a7:90:b3:15:e4:12:7c:
                    a4:e8:ec:ab:d9:68:61:99:23:59:bd:d1:f1:1f:7f:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:EA:47:AC:CF:C6:B4:38:D9:2A:72:AF:7D:50:7B:44:EA:4A:83
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:20:93:e2:48:22:8c:a1:c2:77:2f:28:26:9e:39:08:a4:
         a4:3a:0f:dc:c1:cc:ec:bb:e1:96:dc:4f:c2:72:1f:42:4c:ef:
         fb:3b:36:e3:bb:04:f3:b3:e8:3a:99:4b:44:73:8a:3c:9a:0f:
         13:93:17:d6:4c:7d:92:40:d7:04:74:72:f2:df:ef:05:22:6b:
         71:10:d1:ad:af:86:0f:ac:e3:c3:c5:99:be:26:8d:a7:a2:8b:
         a1:84:b9:54:e6:b9:cb:31:05:9e:d1:1d:73:84:ff:31:e1:0b:
         c2:de:4c:56:77:d4:d4:cf:96:28:b2:f7:fc:ee:90:ae:8b:b0:
         8a:f8:08:a0:99:d5:cc:8f:87:41:72:09:60:8e:59:6a:84:44:
         2e:34:c2:d6:32:92:c1:95:ea:bb:6a:00:fb:53:0c:10:88:84:
         21:09:a3:66:13:07:49:50:5e:86:af:01:47:cb:3f:eb:3a:89:
         56:d8:88:e9:db:0e:d9:b1:4c:31:8c:37:15:21:10:eb:3c:e5:
         22:f4:df:08:3f:89:ef:d7:87:76:a8:ed:05:97:78:cc:a5:ea:
         5c:5c:6a:bd:8f:13:57:7d:51:f4:10:09:05:a0:7a:84:a2:19:
         cd:1d:a4:33:42:8f:04:59:a6:e3:59:4f:18:30:35:c8:f0:82:
         67:00:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:53:17 2026 by rpki-client