Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/4FBA0FC6DF0C11EC95837910C4F9AE02.roa
File:                     4FBA0FC6DF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          BeJtd47Sr9OVQYTwc8MkxaVmskrlOR+IFmXDFAfcpV0=
Subject key identifier:   EF:F1:39:80:98:54:8B:D3:89:8C:60:1C:58:E7:BA:54:C6:E3:1B:8D
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0652
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/4FBA0FC6DF0C11EC95837910C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:42 +0000
ROA not before:           Wed 27 Aug 2025 01:05:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136457
IP address blocks:        58.137.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e6-1987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:c5:c9:23:42:d2:44:72:2a:14:52:c9:2f:
                    cc:8f:2d:d0:42:9f:cc:70:35:37:64:2b:9e:62:71:
                    1f:25:a5:d4:de:99:d0:03:e5:5a:ea:c0:d8:73:16:
                    6e:78:fc:4c:f7:e2:e6:76:ea:e3:20:3a:50:ad:bf:
                    05:e1:57:30:83:78:7e:57:57:9f:61:12:9e:df:39:
                    e4:b6:4d:f2:8a:47:15:17:19:9b:79:5e:6d:59:fd:
                    27:5e:95:7d:76:25:03:f9:5e:bd:e7:a5:82:e9:ae:
                    48:4a:d9:d7:4d:21:04:c6:cf:b8:93:5c:6d:97:cb:
                    84:59:9d:ae:55:a6:6e:65:a3:c6:b5:47:c0:d6:46:
                    33:29:02:f7:bd:ff:b2:f4:b7:6a:28:d1:6d:a5:34:
                    05:8e:7d:f5:fd:8c:70:d3:34:25:91:b5:4c:fa:ab:
                    ac:9e:d6:28:6d:3f:f3:6b:f3:f7:75:7c:a5:61:45:
                    22:6b:b9:da:9d:eb:46:47:b5:51:4e:1e:2f:d2:b3:
                    53:0d:68:33:c4:23:27:6e:20:a0:e9:36:4d:cc:23:
                    62:65:e8:01:25:86:6b:fb:5e:b1:52:2d:63:a3:79:
                    f3:36:b8:81:59:df:66:48:1f:80:be:d9:66:96:37:
                    bb:97:8d:8d:c6:ad:fe:23:3d:48:99:bc:f1:cb:77:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:39:80:98:54:8B:D3:89:8C:60:1C:58:E7:BA:54:C6:E3:1B:8D
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/4FBA0FC6DF0C11EC95837910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:98:e4:e2:1d:f9:ea:25:b9:40:d9:48:71:3d:3a:e0:e3:0d:
         05:0e:9e:7e:d0:65:fb:8e:c1:81:b0:5d:e2:53:40:10:4b:fb:
         01:66:92:cd:87:56:3c:17:67:bc:bf:d6:d4:10:eb:0f:5e:28:
         ce:3a:eb:83:12:b2:c9:55:78:e3:fe:25:97:f7:5c:55:98:e9:
         f9:58:e2:72:a2:82:c9:6d:e2:f4:41:41:20:08:9e:b5:3e:c1:
         19:87:46:a4:be:06:23:7b:0d:de:e4:b4:2d:fa:f5:50:ac:3b:
         d2:58:1b:01:e1:32:a0:66:78:23:f4:c8:56:68:e2:64:f0:9b:
         93:d8:3c:06:60:c6:ad:2d:c6:11:53:79:e8:d8:ca:ae:0e:74:
         f6:4e:28:4c:28:40:ca:1c:66:31:07:6a:35:2d:fc:fc:86:e6:
         76:b8:82:f6:7a:36:17:4c:c5:85:8d:7b:ff:d5:e2:74:36:fc:
         dc:8d:03:88:75:46:a3:1b:e9:5f:7f:1b:43:fa:14:22:31:29:
         2a:05:c5:44:1e:01:86:a9:33:1f:44:33:24:c0:57:b0:92:f5:
         5c:ad:7d:47:34:6e:56:cf:f4:5b:8b:c7:4c:30:62:c2:fb:25:
         de:44:42:50:58:77:cf:87:fa:9f:2d:2b:0b:2a:00:d7:7d:cc:
         2f:f7:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:36 2025 by rpki-client