Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E131C5223F9111F19AD8E1D3B4833773.roa
File:                     E131C5223F9111F19AD8E1D3B4833773.roa (raw, json)
Hash identifier:          l1QEQ+r0pEEcbggz33kfQHfIKOsFf8JqcLbx1TI9EMA=
Subject key identifier:   09:42:74:00:6D:AF:4E:F4:57:1F:45:4C:9E:85:43:13:02:02:9F:BD
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2265
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E131C5223F9111F19AD8E1D3B4833773.roa
Signing time:             Fri 24 Apr 2026 03:58:41 +0000
ROA not before:           Fri 24 Apr 2026 03:58:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154004
IP address blocks:        165.101.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8805 (0x2265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr 24 03:58:41 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69eaea70-b7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:c4:fa:16:49:03:d3:61:cd:de:f1:59:01:
                    05:d8:67:3b:b0:10:82:dc:4d:3f:08:47:7f:ce:ea:
                    d4:ec:d0:a6:34:88:d3:54:07:14:20:3e:7d:3a:f3:
                    9f:cc:3b:88:97:50:6c:f4:b1:a5:42:b4:74:13:b6:
                    34:53:b2:1a:93:8b:7f:8c:39:3d:1c:1a:a1:18:2c:
                    2c:85:ab:65:6f:5a:2c:9d:75:b9:48:68:eb:36:f3:
                    bd:61:37:36:cb:70:63:32:1c:ff:72:d0:24:32:ff:
                    0f:da:f7:6d:df:f9:c7:57:5b:03:76:b5:f7:e6:b4:
                    38:0a:f4:a6:8f:9c:e1:5b:26:bd:a5:12:3a:ad:06:
                    cf:b4:1b:7f:52:b3:15:c3:31:3d:fb:4f:da:5d:c3:
                    c1:c5:a4:5b:26:bb:72:8b:7f:3c:14:4d:05:87:fd:
                    2c:67:ba:9c:fb:d7:61:38:42:07:53:a1:0d:4d:e9:
                    53:ba:c4:e1:cd:96:d7:ca:4b:35:d0:bc:bb:26:c1:
                    af:bd:6b:d0:11:32:57:53:0b:f6:1f:d3:13:53:21:
                    f9:ad:ac:45:c9:8e:14:32:78:5e:90:86:42:fe:59:
                    06:28:13:1f:9c:36:3e:be:22:b9:21:1c:05:ee:e9:
                    44:45:f9:9c:24:de:7b:d0:a6:9b:b4:e2:31:90:9c:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:42:74:00:6D:AF:4E:F4:57:1F:45:4C:9E:85:43:13:02:02:9F:BD
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E131C5223F9111F19AD8E1D3B4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:66:11:c3:56:76:a7:62:fb:f4:1c:59:e5:c8:d6:a9:9c:69:
         dd:4e:ba:35:76:26:5b:4b:73:c6:f2:60:42:ae:af:51:39:05:
         e4:fa:ba:f3:6d:40:44:67:bb:2c:73:9a:59:db:45:16:32:d6:
         5a:41:8c:b8:b9:ef:62:54:5e:1e:4e:dd:1f:0d:f9:78:29:35:
         91:ba:bf:24:82:50:d0:9b:48:63:8a:ef:5b:3b:64:2a:9b:5e:
         65:fe:a2:7c:98:4a:3d:ac:b9:08:80:6f:2c:73:8f:56:65:c4:
         0c:93:b9:f9:7d:0b:a2:a2:49:ec:1f:4f:87:bb:01:c0:c4:84:
         a3:e0:28:77:24:47:1e:57:17:a4:0a:47:a1:90:9b:a0:88:8e:
         a6:7d:6f:44:d3:13:34:b1:96:3a:ab:71:c2:22:9e:26:d7:e3:
         1f:06:af:3c:5d:74:f1:38:f0:c5:3f:cc:28:45:a5:26:ba:e0:
         c6:0e:e0:fa:7a:40:1b:d7:69:02:2a:d4:dd:1c:59:4c:d9:11:
         9c:75:eb:60:51:3f:2c:26:26:57:96:6c:48:9a:40:85:98:31:
         d9:f3:55:c2:80:47:08:c2:78:5e:af:a5:ae:21:89:36:4d:a4:
         ed:b4:a7:ee:00:48:db:27:0c:df:26:d1:18:f3:c9:30:f1:02:
         61:c1:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:45 2026 by rpki-client