Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
File:                     5596B61C1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          ZbPu5WAsTlLdjXTUeG+5iKNS8Jpruum2YVy++Xsv3sU=
Subject key identifier:   B8:50:97:34:9A:7C:AF:37:44:CE:FB:64:F5:01:5B:21:78:EB:3E:C7
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C2F
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:13:27 +0000
ROA not before:           Mon 06 Jul 2026 15:13:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55916
IP address blocks:        58.97.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15407 (0x3c2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:13:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc617-fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:05:6a:11:e9:4d:b8:0f:7d:59:a9:91:b7:
                    37:f5:d0:7b:bd:b3:b1:b9:ba:fb:c9:f0:85:6f:ca:
                    6f:a0:49:1c:e4:65:8a:37:43:a2:58:d0:cf:c2:35:
                    32:f5:ad:21:59:cf:77:93:b0:8f:f1:83:cf:d2:8c:
                    23:72:f9:ff:3b:11:79:f5:c9:37:1f:c5:96:c1:e3:
                    7b:52:8f:90:a2:c2:75:50:ba:fc:51:b4:bf:36:8d:
                    3c:6c:dd:e5:fa:f3:69:19:0d:89:44:a9:9c:42:8c:
                    d2:d3:20:0d:10:8e:8f:68:db:20:ec:84:7c:f5:46:
                    e5:a0:c1:2f:72:8c:25:28:ca:e8:b8:2a:12:7d:7f:
                    9d:76:cc:a4:b9:cf:64:f4:8a:78:e7:e2:58:01:2f:
                    94:60:18:df:13:99:ba:4e:a2:1d:a4:9b:04:7c:d6:
                    bb:19:53:fa:db:b3:85:60:27:43:38:18:fa:48:14:
                    18:f7:85:a1:02:4a:08:8d:ed:3b:04:23:66:a4:95:
                    08:9a:37:2b:fd:c4:de:f1:fb:ba:1f:8c:54:d3:15:
                    a4:10:3c:5b:11:23:bc:15:f1:f4:31:6a:c0:87:cb:
                    57:47:2c:47:04:05:5a:68:49:6e:c7:96:48:2b:29:
                    0d:a5:cd:0e:a4:74:3a:7c:e3:6d:82:8a:e2:70:4b:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:97:34:9A:7C:AF:37:44:CE:FB:64:F5:01:5B:21:78:EB:3E:C7
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:24:50:02:02:ee:ee:d6:0d:09:ff:a4:c6:47:9e:29:2f:
         e5:4b:26:bc:f4:43:fa:06:e4:e0:90:1c:74:fa:a4:0f:d4:0e:
         fa:bf:63:8c:c1:e9:42:29:ce:89:78:f4:46:8a:31:bc:d9:b2:
         67:6f:2a:19:02:91:a0:02:da:35:81:ef:52:18:d4:b1:4d:f3:
         69:af:b1:70:a7:14:b7:03:79:49:4d:e2:30:99:af:50:e9:45:
         1d:09:ac:7e:93:47:19:eb:76:ec:57:88:9c:9d:68:60:a1:36:
         12:07:fd:93:52:ba:5f:be:ee:5e:b2:db:cf:a9:e5:a3:37:2f:
         1b:77:a4:50:60:0b:0c:8a:0d:01:d1:a4:da:38:53:53:15:67:
         79:7f:c3:ab:d2:ed:f3:7e:b3:d5:72:d0:c2:77:11:9b:e9:18:
         2e:e9:ef:00:88:1c:7a:7c:ac:de:04:e2:15:5d:50:0c:2a:1f:
         28:fb:e6:9e:7c:5e:43:9f:02:82:e7:44:c9:3f:eb:1a:6b:bd:
         76:7c:f6:28:43:60:b5:74:c7:17:61:ad:0d:c9:3b:64:a8:90:
         d8:ce:1c:99:c6:29:94:01:22:f2:a8:25:32:d6:72:56:d0:49:
         d7:c1:81:d1:5e:ad:d2:4f:c8:b6:ef:11:7d:57:53:d3:d4:c2:
         2c:f0:12:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:53 2026 by rpki-client