Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa
File:                     4B5400D81E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          HCQouiSVvuD7Egawz/zsog93M5A55LfU+tLaHjntogk=
Subject key identifier:   11:4D:46:82:83:8D:73:9A:27:53:17:3E:C0:C9:FD:6C:B8:58:9C:9E
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C18
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:42 +0000
ROA not before:           Mon 06 Jul 2026 15:12:42 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38599
IP address blocks:        58.97.39.0/24 maxlen: 24
                          61.91.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15384 (0x3c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:42 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5ea-83f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:c7:32:6e:cc:1a:06:56:c9:34:2a:f4:b6:
                    ba:98:1b:37:85:eb:68:18:06:2c:ac:d8:4e:7f:e4:
                    e1:c8:0e:30:e8:b8:f1:51:c4:fb:0e:58:f9:d3:a1:
                    92:9f:66:be:7a:e9:88:79:69:c8:79:ac:ea:c0:df:
                    48:1a:ad:fb:d1:66:7c:7b:50:07:a8:4b:61:24:45:
                    05:7a:33:cd:bf:49:af:c2:99:d7:41:5b:6a:ee:68:
                    2e:13:3a:98:68:4c:ea:cd:34:c8:49:14:2b:e4:75:
                    b7:82:eb:45:97:13:3d:19:c1:c4:cf:b4:f8:db:aa:
                    65:c3:d2:71:83:01:e3:b4:bf:97:c2:e2:de:b0:21:
                    5f:b0:ec:c2:5a:42:19:f1:25:23:56:0a:8e:f1:43:
                    08:a7:d9:8f:0e:c1:21:a5:9d:c7:27:38:fd:b4:bf:
                    98:28:2b:88:7e:a3:9c:18:fc:c1:a6:e3:a3:38:57:
                    73:9e:a4:96:8c:bb:ac:bb:18:a6:36:d4:f3:5e:63:
                    24:1e:fd:dd:f9:16:a2:95:bd:5e:de:7d:c3:14:58:
                    5b:42:e8:16:e5:b7:41:57:61:f2:e0:2d:a7:af:b7:
                    47:6c:d4:c7:c4:7d:a5:fe:6d:0a:b8:27:f4:46:0e:
                    5f:2d:dc:34:8e:32:a9:58:14:29:e5:78:bb:27:11:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:46:82:83:8D:73:9A:27:53:17:3E:C0:C9:FD:6C:B8:58:9C:9E
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.39.0/24
                  61.91.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:64:5c:5e:e1:c3:8d:11:ac:ec:02:93:12:f0:be:4a:2a:b1:
         22:68:fb:a5:0f:88:3b:0a:b9:08:bd:73:a4:b5:b7:2b:26:1f:
         e2:31:0a:20:df:4f:c2:46:fa:46:aa:9b:00:d4:24:2b:69:7d:
         7d:51:26:0f:39:3d:06:f2:c7:9b:6e:9d:64:b4:4e:17:87:69:
         a0:47:80:99:19:e9:2a:fa:3c:9a:31:ba:bb:7f:24:72:8c:ee:
         64:48:49:56:21:ac:84:53:14:a6:a8:53:4c:23:71:f9:ef:df:
         d7:23:80:2d:31:64:ba:27:d2:8f:63:3e:77:73:f5:a6:26:3f:
         bf:d4:ea:d5:6d:42:65:5c:25:ec:28:70:03:13:55:da:76:e6:
         ef:ac:95:b3:ec:a0:4f:a6:2a:6d:00:0d:79:57:cb:40:cc:71:
         19:96:74:8f:ba:1a:31:68:3a:a0:0c:67:c6:ff:34:82:69:b2:
         33:28:d9:84:ca:7c:a0:30:e8:8f:1e:ad:5e:28:cb:1f:dc:08:
         0c:53:47:ed:35:05:23:9f:23:a8:f9:dd:57:0b:7e:db:b0:7f:
         8d:b1:c3:3b:19:10:c5:62:34:dd:9b:89:ae:ab:bf:b0:3b:95:
         7c:96:e7:f6:e4:cb:8b:c2:dc:8b:81:c8:5b:84:34:04:5f:ab:
         d9:5b:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:52 2026 by rpki-client