Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
File:                     901A806E936311F0AFC2992BC4F9AE02.roa (raw, json)
Hash identifier:          4jEVz1hG1/Z1VyTQpmLsIhOnSHh6bzFw7W7dBzuJBMc=
Subject key identifier:   F9:AD:D4:2C:DA:39:C4:CA:4B:6A:67:78:CE:FA:0E:72:D7:FC:80:2A
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       81
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:32:14 +0000
ROA not before:           Wed 17 Sep 2025 01:13:48 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9908
IP address blocks:        72.57.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Sep 17 01:13:48 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4862e-c7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:40:1c:cb:08:1e:ac:11:f3:da:9d:b1:27:
                    52:36:1c:a1:06:ec:f4:18:03:32:2e:72:34:3d:61:
                    ec:c4:2c:65:fa:29:2f:80:47:44:c2:9d:c3:f9:bb:
                    77:1d:fa:a1:be:26:19:93:49:96:d4:38:81:c4:83:
                    1f:30:84:ef:c5:c4:7a:58:9b:a8:ad:f1:c8:8e:12:
                    ca:fa:35:69:49:bf:ed:94:f1:15:dc:f0:a3:5c:38:
                    cf:b1:2e:41:58:42:e3:48:e5:e7:20:ab:4f:8b:be:
                    9d:a0:fc:6c:03:e6:06:ad:0d:91:18:d2:95:d6:b1:
                    46:9a:41:c4:69:0d:0c:28:31:6a:a0:57:1e:58:d8:
                    7c:9f:ae:e7:9f:1e:f0:20:e4:dd:14:68:79:7b:b5:
                    a5:38:93:65:86:e6:50:64:b3:33:2b:6f:35:f8:36:
                    7b:bf:6f:d6:61:40:ca:17:be:96:3e:02:97:49:3f:
                    53:8f:e1:cc:88:bc:51:97:46:be:c7:6c:af:09:7a:
                    70:96:83:52:e0:30:62:6c:02:37:1d:a8:66:6a:27:
                    c2:d3:45:7f:a6:ca:cf:9a:ce:02:54:79:75:a2:f1:
                    bb:00:02:22:bc:29:60:1e:6b:ac:8d:d4:cb:c9:cf:
                    5a:58:0f:bc:22:14:ec:7d:62:ec:ed:e4:ed:79:99:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:D4:2C:DA:39:C4:CA:4B:6A:67:78:CE:FA:0E:72:D7:FC:80:2A
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.57.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:7b:a1:23:c2:5b:38:d1:32:a3:98:52:26:af:fc:72:86:62:
         36:57:98:f3:cf:c6:52:b6:39:04:25:37:b6:92:73:b2:5f:74:
         6c:89:98:3e:ee:d9:0b:13:99:dc:1a:46:d4:a7:01:18:90:ac:
         e3:22:4c:16:b8:14:1e:44:00:66:c9:71:53:03:9a:83:96:1a:
         75:8d:ce:59:72:42:93:b8:d5:6a:cb:80:58:3b:3a:7c:b9:15:
         15:ef:91:2a:5f:13:5e:80:84:49:9e:54:72:7a:13:3f:d1:42:
         d8:d9:07:b8:3f:05:39:a1:31:13:60:82:0b:7f:59:18:69:99:
         f1:d0:9f:f6:ed:f8:d6:47:07:35:86:f5:a2:c3:c5:3f:dd:71:
         1b:e7:c4:d0:e8:09:ad:72:f8:29:0e:1f:e8:f1:cd:07:95:a5:
         ca:dd:77:0f:0d:41:0b:61:e8:6a:38:3f:a5:45:cb:6a:5f:a6:
         7c:f7:34:26:46:c5:fe:08:34:9e:31:bc:a8:16:9e:e8:78:0a:
         25:34:75:01:d2:70:c3:1e:27:d1:72:f4:fc:6f:46:9b:e8:3a:
         02:da:2b:c0:ca:a8:61:ef:92:9b:27:55:24:ca:c2:57:20:c1:
         32:93:dc:65:6a:2b:74:75:74:97:96:5b:f1:73:dc:ec:8e:1f:
         05:11:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:50 2026 by rpki-client