Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
File:                     901A806E936311F0AFC2992BC4F9AE02.roa (raw, json)
Hash identifier:          +hmqIoxyFlGHGf+MVx7NHUlRN3EVatUM9ul9ZfEVwmE=
Subject key identifier:   02:33:CB:F5:51:1C:42:2A:51:FE:A1:BE:59:65:94:5D:E9:81:82:FC
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       0166
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa
Signing time:             Sun 04 Oct 2026 20:41:24 +0000
ROA not before:           Sun 04 Oct 2026 20:41:24 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9908
IP address blocks:        72.57.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:41:24 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9f4-cb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:df:e5:93:96:41:e5:db:99:df:aa:ac:64:
                    2a:51:38:39:e1:dd:5d:20:d4:e9:55:b9:81:a2:61:
                    78:54:a6:63:93:49:ec:55:31:e4:36:82:c6:0f:00:
                    8d:f7:84:af:6a:c2:fb:c4:4f:2d:24:55:77:8a:35:
                    fa:f3:09:d5:d3:fe:67:31:3e:b3:f0:0a:22:c5:e9:
                    59:94:73:63:db:a3:a8:ad:0b:0b:61:34:f9:9a:9f:
                    c7:43:64:31:cf:8f:72:82:2d:23:0b:97:c3:cd:83:
                    b1:f8:e4:58:2b:fa:58:ca:81:7a:98:e0:93:e5:7e:
                    b3:a7:a7:d9:cb:1c:a3:3d:bb:61:94:b2:9c:a5:9a:
                    61:89:dd:14:51:f6:49:8a:25:ec:8a:be:25:5f:a0:
                    9e:98:6d:06:68:63:7f:d9:52:be:d7:99:d8:22:ab:
                    34:02:e6:33:e1:b5:3a:90:90:3c:e5:62:6c:28:5d:
                    af:1b:51:d3:8a:87:2a:94:35:22:bc:9b:66:17:d8:
                    99:83:a1:91:9b:fe:92:f3:e8:1c:ad:99:b8:d5:b5:
                    06:0f:33:ff:36:dc:b3:d7:06:36:98:1f:f4:3e:b2:
                    f9:24:97:69:5d:a3:eb:27:95:c7:4f:06:96:9c:3c:
                    76:b5:c1:f3:34:05:00:30:3a:eb:79:fc:f6:ba:db:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:33:CB:F5:51:1C:42:2A:51:FE:A1:BE:59:65:94:5D:E9:81:82:FC
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/901A806E936311F0AFC2992BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.57.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         09:30:c2:e3:c9:07:cb:d9:8f:ef:77:6c:b1:d0:df:ea:c0:2e:
         b1:f3:45:e1:38:37:8b:d8:da:c2:42:48:29:ad:bd:4e:f7:33:
         de:2f:66:59:34:3c:78:3e:9a:5f:e8:e9:70:cc:b2:e6:aa:52:
         92:07:6f:4d:9d:e7:30:a8:20:22:a2:b8:c5:b6:ff:46:62:8f:
         81:74:0c:79:14:12:8c:49:d1:d4:1d:cb:e9:7b:32:9e:fc:60:
         12:f1:b7:52:84:ad:39:e3:49:ee:82:6f:7f:bb:cc:3a:ee:84:
         de:76:bf:82:dc:fb:5a:96:b5:6d:5f:7c:f8:5d:63:f0:a3:f4:
         c1:1a:ea:62:4b:a4:6c:cd:18:20:83:12:a0:02:58:33:2f:9f:
         39:cf:56:4b:4d:f7:31:56:44:a4:47:19:71:f6:2e:33:6f:48:
         7c:e8:5c:cb:27:ea:72:78:df:52:9d:54:1f:75:f8:e5:94:78:
         64:e2:bb:3f:ff:28:21:13:96:30:54:38:a4:4a:05:4a:57:d4:
         96:64:5e:a5:0c:7e:18:9e:35:86:56:68:3a:78:e3:cd:0b:60:
         18:e7:fa:9b:88:9f:0a:56:94:64:af:30:de:eb:7a:7a:67:22:
         bf:8c:9b:70:7d:e0:78:f5:18:d8:b0:be:4d:82:26:5e:fc:c8:
         8c:63:56:b4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYxMDA0MjA0MTI0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyYjlmNC1jYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Qzf5ZOWQeXbmd+qrGQqUTg54d1dINTpVbmBomF4VKZjk0nsVTHkNoLGDwCN
94SvasL7xE8tJFV3ijX68wnV0/5nMT6z8AoixelZlHNj26OorQsLYTT5mp/HQ2Qx
z49ygi0jC5fDzYOx+ORYK/pYyoF6mOCT5X6zp6fZyxyjPbthlLKcpZphid0UUfZJ
iiXsir4lX6CemG0GaGN/2VK+15nYIqs0AuYz4bU6kJA85WJsKF2vG1HTiocqlDUi
vJtmF9iZg6GRm/6S8+gcrZm41bUGDzP/Ntyz1wY2mB/0PrL5JJdpXaPrJ5XHTwaW
nDx2tcHzNAUAMDrrefz2utv1uwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAIzy/VR
HEIqUf6hvllllF3pgYL8MB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvOTAxQTgwNkU5
MzYzMTFGMEFGQzI5OTJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQHSDmAMA0GCSqGSIb3DQEBCwUAA4IBAQAJMMLjyQfL2Y/vd2yx0N/q
wC6x80XhODeL2NrCQkgprb1O9zPeL2ZZNDx4Pppf6OlwzLLmqlKSB29NnecwqCAi
orjFtv9GYo+BdAx5FBKMSdHUHcvpezKe/GAS8bdShK0540nugm9/u8w67oTedr+C
3PtalrVtX3z4XWPwo/TBGupiS6RszRgggxKgAlgzL585z1ZLTfcxVkSkRxlx9i4z
b0h86FzLJ+pyeN9SnVQfdfjllHhk4rs//yghE5YwVDikSgVKV9SWZF6lDH4YnjWG
Vmg6eOPNC2AY5/qbiJ8KVpRkrzDe63p6ZyK/jJtwfeB49RjYsL5NgiZe/MiMY1a0
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:54:50 2026 by rpki-client