Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
File:                     AD3ED5B6608F11F0856BA159C4F9AE02.roa (raw, json)
Hash identifier:          kbKJbJ+HzKc93WulLpEpEQXf9NM4oNfIu4GUaV9VNZQ=
Subject key identifier:   EA:17:9F:27:54:2B:5E:98:E0:6A:A9:4B:63:7E:DF:67:7B:33:A9:B3
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       212C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:21:49 +0000
ROA not before:           Thu 28 Aug 2025 14:52:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154042
IP address blocks:        165.101.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8492 (0x212c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:52:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b8d-0d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:ab:3d:2f:2a:b8:28:0a:1e:2b:b2:4f:21:
                    0d:35:7c:11:c9:8e:49:df:0e:a8:0a:b5:45:39:ee:
                    85:2f:2c:49:7b:43:64:86:55:37:ad:3e:4c:89:90:
                    c9:58:c0:8c:11:c8:89:4f:3b:6e:a0:31:e9:c5:4f:
                    7e:38:03:c5:a3:f0:91:b7:9e:1e:8e:80:ed:6e:30:
                    34:7a:0f:c8:eb:6a:2b:1c:e4:70:77:bc:d1:ec:2d:
                    f7:a2:b2:f9:5a:c1:23:55:56:78:f6:18:25:a2:fe:
                    1a:b4:ea:8f:df:dc:12:78:c0:6e:a9:63:16:5f:c7:
                    d4:f6:9d:b9:fc:6b:5c:3f:4c:88:c5:9a:c2:81:71:
                    09:1b:3f:ac:30:d8:1f:17:d6:c4:4b:03:05:6f:ab:
                    dd:19:98:f5:0c:f1:91:b0:01:84:b9:4a:03:c4:60:
                    c3:18:d9:66:d7:5b:d3:6e:40:36:f4:c7:c8:ef:f6:
                    e0:ce:37:48:e5:ba:a6:72:46:76:49:0b:f8:c0:a7:
                    20:0a:99:86:30:f3:f6:21:2a:c7:7d:31:b6:c0:3c:
                    04:ee:6d:2f:87:7e:da:c7:4c:e8:d8:cf:c7:66:d0:
                    dc:60:2e:23:63:1b:e7:05:38:e8:d2:85:a6:0d:6c:
                    18:6c:8d:8e:56:50:70:42:ee:87:cf:0c:ea:32:be:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:9F:27:54:2B:5E:98:E0:6A:A9:4B:63:7E:DF:67:7B:33:A9:B3
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:96:fb:93:6d:ec:7c:6f:1a:0a:9d:93:76:ed:53:46:c9:15:
         d4:0a:c9:fa:5c:47:b9:d3:33:14:4f:0b:d5:c4:07:7e:54:8e:
         20:4b:49:b6:4f:36:b4:53:09:f8:90:45:6a:cc:3e:73:8f:65:
         d8:06:03:b0:7f:ed:c7:c5:2b:7e:19:66:37:6b:b4:05:33:28:
         6f:17:f3:7b:90:f6:9d:fd:21:98:00:38:68:f0:1d:3e:a6:79:
         87:a3:9a:12:85:24:4d:b3:62:9d:38:75:d9:cc:a1:9a:6d:8d:
         63:8f:8a:b3:48:13:14:67:1f:6a:32:55:90:69:dd:c3:a2:96:
         fe:db:86:bb:76:40:54:30:78:a9:5e:b0:41:fd:ad:44:dd:df:
         9b:d1:e5:35:eb:7f:44:0d:ef:11:eb:0c:e2:01:0f:78:89:13:
         67:c8:8b:45:67:c8:70:53:5e:bd:a8:3c:61:82:1c:21:d8:6d:
         41:84:18:b2:4d:7c:40:78:8d:4e:ad:e7:a8:03:2f:42:7a:cb:
         e7:13:5a:29:06:f4:f0:7b:57:ac:d9:85:ab:a5:2c:a4:e0:3e:
         71:28:7f:ca:b2:1d:aa:d6:5b:a0:13:0e:b3:17:2d:cd:af:47:
         ed:df:a3:e5:41:bd:56:50:7b:27:dc:f3:00:d6:05:bc:e5:b3:
         49:a2:07:04
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICISwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MjAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWI4ZC0wZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5gKrPS8quCgKHiuyTyENNXwRyY5J3w6oCrVFOe6FLyxJe0NkhlU3rT5MiZDJ
WMCMEciJTztuoDHpxU9+OAPFo/CRt54ejoDtbjA0eg/I62orHORwd7zR7C33orL5
WsEjVVZ49hglov4atOqP39wSeMBuqWMWX8fU9p25/GtcP0yIxZrCgXEJGz+sMNgf
F9bESwMFb6vdGZj1DPGRsAGEuUoDxGDDGNlm11vTbkA29MfI7/bgzjdI5bqmckZ2
SQv4wKcgCpmGMPP2ISrHfTG2wDwE7m0vh37ax0zo2M/HZtDcYC4jYxvnBTjo0oWm
DWwYbI2OVlBwQu6HzwzqMr7aNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOoXnydU
K16Y4GqpS2N+32d7M6mzMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQUQzRUQ1QjY2
MDhGMTFGMDg1NkJBMTU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWWeMA0GCSqGSIb3DQEBCwUAA4IBAQB2lvuTbex8bxoKnZN27VNG
yRXUCsn6XEe50zMUTwvVxAd+VI4gS0m2Tza0Uwn4kEVqzD5zj2XYBgOwf+3HxSt+
GWY3a7QFMyhvF/N7kPad/SGYADho8B0+pnmHo5oShSRNs2KdOHXZzKGabY1jj4qz
SBMUZx9qMlWQad3Dopb+24a7dkBUMHipXrBB/a1E3d+b0eU1639EDe8R6wziAQ94
iRNnyItFZ8hwU169qDxhghwh2G1BhBiyTXxAeI1OreeoAy9CesvnE1opBvTwe1es
2YWrpSyk4D5xKH/Ksh2q1lugEw6zFy3Nr0ft36PlQb1WUHsn3PMA1gW85bNJogcE
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:30 2026 by rpki-client