Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/4DB1CEBCF44311F08E818BA85F6F56BC.roa
File:                     4DB1CEBCF44311F08E818BA85F6F56BC.roa (raw, json)
Hash identifier:          LsgEpPl7kUjJjpymrgq6WP+mysPa0YlxTXlhvLoTIPw=
Subject key identifier:   3A:4E:96:64:F6:E1:DD:8B:9D:59:C1:90:60:27:5B:39:21:71:2B:C3
Certificate issuer:       /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial:       E7
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/4DB1CEBCF44311F08E818BA85F6F56BC.roa
Signing time:             Mon 07 Sep 2026 06:57:10 +0000
ROA not before:           Mon 07 Sep 2026 06:57:10 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153800
IP address blocks:        165.101.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
                          rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
        Validity
            Not Before: Sep  7 06:57:10 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9e6046-fd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:ce:1c:aa:07:55:cd:c9:79:8a:02:a2:24:
                    e9:63:e1:a8:23:5a:fd:42:60:b6:a7:73:54:28:d0:
                    cb:82:ec:fc:a8:83:82:1e:d9:99:03:cb:89:f0:e1:
                    b6:68:14:ae:9b:50:59:6a:9f:4e:6b:01:4d:68:d5:
                    5f:2a:21:05:64:a6:33:15:50:32:1c:0a:6c:3e:61:
                    11:e4:90:d9:55:40:6c:cc:31:cf:be:a2:29:70:71:
                    d5:16:01:92:2c:59:85:26:37:64:61:58:f2:3b:96:
                    8e:80:6f:3c:ee:56:0d:fd:74:95:e1:a5:c7:03:8b:
                    15:51:48:f0:e6:26:ca:49:f1:e9:94:fa:d3:53:46:
                    a1:93:47:7f:f8:d5:4a:0f:79:78:7a:6c:7a:0d:f4:
                    78:c4:fa:8c:7d:14:e6:2e:87:6c:26:4c:d1:37:63:
                    73:28:b3:83:e8:04:c1:6c:b9:12:8e:34:c6:d5:2d:
                    bf:fe:57:9d:ae:cf:f3:10:76:0a:d0:66:51:93:29:
                    f9:43:39:43:cd:e9:06:b7:89:75:76:1a:58:db:a6:
                    f6:3b:00:10:6f:ed:e4:4f:6d:b0:f1:ed:db:f9:8e:
                    af:af:8b:c4:e6:96:ac:34:36:fc:b1:fa:96:ae:3d:
                    2d:96:0b:88:8d:9c:a8:27:cd:1d:75:29:e0:ed:86:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4E:96:64:F6:E1:DD:8B:9D:59:C1:90:60:27:5B:39:21:71:2B:C3
            X509v3 Authority Key Identifier:
                keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/4DB1CEBCF44311F08E818BA85F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:da:d4:4f:9e:c7:0c:61:74:bb:cb:7b:42:f0:e4:cf:bd:bf:
         49:9d:a2:18:0e:93:34:a9:e8:be:bf:61:f1:e2:13:83:98:85:
         0f:13:f4:3b:0f:2f:9b:b6:28:2f:c8:96:bc:73:d9:73:77:22:
         23:30:3b:91:8e:69:fa:7f:4b:34:8b:21:bc:5d:b5:47:d4:00:
         f2:cf:1e:5b:3e:3b:cd:a8:8b:27:36:1b:da:75:14:e5:be:16:
         bd:9d:07:bd:ba:44:8b:c3:25:a7:e1:a7:4a:1b:89:b8:d7:32:
         d0:1c:23:34:22:23:ba:6d:71:ab:21:e1:32:d5:dd:e9:dc:bc:
         2a:4c:ff:c4:79:d5:2a:80:8d:e6:38:1c:1d:ff:cb:59:7d:21:
         cb:7c:b5:ee:b3:7f:25:6e:df:b8:5d:e9:0a:24:03:86:19:38:
         0e:1e:9c:45:86:a0:4c:8e:cb:45:29:41:42:fd:65:6c:fe:1a:
         36:dc:ed:73:5d:d3:1a:13:f1:ba:78:09:23:ee:c8:3c:57:d2:
         bd:9b:35:b2:38:81:1c:94:2b:f2:88:d7:10:cf:a7:3e:b7:91:
         5d:e1:e8:e3:d5:fc:3e:35:a4:ed:c6:4d:f1:41:29:a3:71:77:
         08:6f:c4:5b:ce:15:24:07:32:40:6f:dc:52:5e:61:9a:13:4c:
         33:99:e8:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0
NjlFOTg1MjMwHhcNMjYwOTA3MDY1NzEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTllNjA0Ni1mZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGfOHKoHVc3JeYoCoiTpY+GoI1r9QmC2p3NUKNDLguz8qIOCHtmZA8uJ8OG2
aBSum1BZap9OawFNaNVfKiEFZKYzFVAyHApsPmER5JDZVUBszDHPvqIpcHHVFgGS
LFmFJjdkYVjyO5aOgG887lYN/XSV4aXHA4sVUUjw5ibKSfHplPrTU0ahk0d/+NVK
D3l4emx6DfR4xPqMfRTmLodsJkzRN2NzKLOD6ATBbLkSjjTG1S2//ledrs/zEHYK
0GZRkyn5QzlDzekGt4l1dhpY26b2OwAQb+3kT22w8e3b+Y6vr4vE5pasNDb8sfqW
rj0tlguIjZyoJ80ddSng7YZ00QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDpOlmT2
4d2LnVnBkGAnWzkhcSvDMB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG
RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMwRDYvMTdGMDZBMjQ1RkUwMTFGMEIyRkQ4RjU3QzRGOUFFMDIvNERCMUNFQkNG
NDQzMTFGMDhFODE4QkE4NUY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWWpMA0GCSqGSIb3DQEBCwUAA4IBAQBV2tRPnscMYXS7y3tC8OTP
vb9JnaIYDpM0qei+v2Hx4hODmIUPE/Q7Dy+btigvyJa8c9lzdyIjMDuRjmn6f0s0
iyG8XbVH1ADyzx5bPjvNqIsnNhvadRTlvha9nQe9ukSLwyWn4adKG4m41zLQHCM0
IiO6bXGrIeEy1d3p3LwqTP/EedUqgI3mOBwd/8tZfSHLfLXus38lbt+4XekKJAOG
GTgOHpxFhqBMjstFKUFC/WVs/ho23O1zXdMaE/G6eAkj7sg8V9K9mzWyOIEclCvy
iNcQz6c+t5Fd4ejj1fw+NaTtxk3xQSmjcXcIb8RbzhUkBzJAb9xSXmGaE0wzmeih
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:39:06 2026 by rpki-client