Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
File:                     52319814DF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          MFNbpen0GlIrLLZzWOrSYCQqIxpyY0jiBho4tgYfJYY=
Subject key identifier:   EC:28:90:1E:9E:5A:B8:F8:1E:EC:71:40:B4:33:82:9A:E3:DA:36:5A
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A31
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:54 +0000
ROA not before:           Wed 27 Aug 2025 01:06:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45255
IP address blocks:        58.137.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2609 (0xa31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:06 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58862-3db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:1e:b7:dc:67:eb:c9:cc:ae:f7:9b:68:68:
                    c1:a4:32:ef:e2:70:1f:54:61:fe:79:f3:ff:39:fb:
                    cb:6e:9b:21:04:4a:b4:26:c3:f0:a0:9e:94:81:c2:
                    ed:83:1e:96:c8:de:db:05:3d:1f:74:79:04:5b:b0:
                    e2:c1:d5:03:b0:7e:bd:1b:f6:df:4d:19:0d:d2:ea:
                    95:fa:2d:43:3b:e5:70:70:bf:2c:f1:c0:71:29:6b:
                    c9:b1:43:14:0d:9b:75:5c:a5:09:19:e6:ff:50:85:
                    64:c3:7d:cb:27:8d:4e:e2:3f:6a:af:8f:58:bf:1a:
                    ea:fc:d2:c6:80:0e:e6:54:1c:45:03:09:48:17:79:
                    7f:e1:e7:c6:b9:b0:26:5f:5d:23:bb:36:ef:6b:f2:
                    1c:40:45:99:0d:46:49:f9:65:ab:ff:97:c1:ae:06:
                    84:0e:42:42:c7:26:8c:c7:71:1a:19:4d:65:3d:1b:
                    65:78:0c:03:b0:f7:a9:95:bc:d4:b9:72:89:95:d5:
                    b2:76:59:02:21:03:e3:24:aa:ed:87:1f:fb:d3:95:
                    5e:0f:2b:48:a1:27:16:be:32:08:f7:aa:2f:86:f9:
                    79:32:6b:fe:1d:b0:f0:6a:88:df:83:ad:71:3d:16:
                    c8:c3:0a:29:a1:8c:3f:ad:cb:91:9f:be:a1:c8:6e:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:28:90:1E:9E:5A:B8:F8:1E:EC:71:40:B4:33:82:9A:E3:DA:36:5A
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/52319814DF0C11EC95837910C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:09:68:35:a1:a5:0a:31:0a:2b:5f:6c:80:8e:9f:95:ef:c1:
         46:b6:63:d4:86:56:7e:1a:fa:21:46:8f:ef:b2:7d:ab:34:4d:
         96:9d:09:8a:99:0f:bd:12:1c:97:ed:51:d7:f9:4c:36:31:ac:
         c1:ed:90:7d:8a:74:1d:b1:e9:ca:e2:03:ef:32:cd:a8:4a:b5:
         1b:f3:4d:ee:96:e5:3c:81:53:0d:99:08:5f:d9:c2:1b:98:a4:
         c3:b4:33:e2:83:e6:20:c1:87:b8:8c:2f:b6:37:67:f7:32:b2:
         d4:44:f7:dd:73:f1:63:c4:84:32:b4:f8:63:49:ef:b1:ed:95:
         b9:21:3a:83:97:97:41:d9:18:ba:91:b3:53:a0:47:f1:70:a9:
         d4:19:56:f0:10:4b:81:20:b9:c6:38:06:64:10:2d:02:e9:85:
         c0:c2:a3:db:f4:68:82:5f:ab:b3:85:55:90:92:a8:8e:e2:5b:
         2d:01:9c:ab:09:a6:b9:cf:c3:2e:e3:7d:69:15:b7:18:9b:c7:
         76:96:4c:e0:5b:49:c3:dc:bd:1c:2f:4a:4c:c1:40:0e:d3:a5:
         4a:34:70:82:e6:67:1e:62:fd:91:c6:6f:61:d7:7c:b1:6d:7f:
         03:91:ce:54:b4:38:a2:82:50:e1:7f:cb:2f:4c:ff:e4:37:dd:
         c5:c7:bf:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:23:31 2026 by rpki-client