Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5473497EDF0C11EC95837910C4F9AE02.roa
File:                     5473497EDF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          728UcEhLCbWPp5UT6fH8RKTs4bp8hdgetV+pR0JnGJQ=
Subject key identifier:   AF:3D:77:22:2F:B8:FD:8F:69:84:F2:F4:95:8F:62:66:97:B0:28:93
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A3C
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5473497EDF0C11EC95837910C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:54:03 +0000
ROA not before:           Wed 27 Aug 2025 01:06:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56223
IP address blocks:        58.137.33.0/24 maxlen: 24
                          58.137.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2620 (0xa3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5886b-c3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:ce:b0:a3:89:73:11:5b:8e:3c:5c:41:65:
                    a1:a2:64:20:15:05:7c:b2:9a:19:31:21:3e:be:51:
                    00:36:0c:5c:5c:86:53:f2:14:2e:f8:50:e0:52:8c:
                    ec:ae:8d:a1:50:f6:b0:af:06:14:f4:d8:75:ae:58:
                    c5:68:57:d5:57:ab:b3:2d:43:e3:2c:36:6c:d7:b0:
                    f3:e4:24:1e:44:1e:08:f0:51:87:d0:89:d0:b1:87:
                    77:ad:48:0f:e9:44:9e:3d:0f:50:ea:b7:0d:21:9e:
                    d2:46:4f:f5:cb:6f:25:57:44:b4:25:83:f1:53:b7:
                    71:cb:20:63:74:36:6c:23:13:71:12:5e:7f:88:84:
                    a4:3e:74:d2:a5:f4:4b:c3:60:14:74:83:60:b9:fc:
                    2c:88:26:af:ff:ff:34:b7:9e:ad:a6:76:9d:16:e4:
                    e1:46:99:d3:b8:65:0d:bf:a6:e0:7f:ed:79:d0:d2:
                    a3:30:32:9c:bf:43:4f:44:a5:d3:db:49:0b:e0:01:
                    0f:3f:b2:4c:07:d6:ed:ac:85:cb:9d:01:e5:4e:8b:
                    2e:39:55:38:c7:f7:96:89:70:55:00:7f:8e:cc:2b:
                    cb:e2:70:89:ab:5d:13:33:a2:ee:93:d0:37:1c:1f:
                    27:5a:11:71:45:5f:8c:56:e1:b3:41:da:e3:51:76:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3D:77:22:2F:B8:FD:8F:69:84:F2:F4:95:8F:62:66:97:B0:28:93
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5473497EDF0C11EC95837910C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.33.0/24
                  58.137.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:5a:89:26:3c:39:ec:a2:e8:a0:83:fa:5d:25:18:e6:0e:
         9a:7e:de:ce:8a:dd:35:13:f8:b5:45:2c:ab:8c:cc:d2:79:1d:
         a9:f5:b4:30:41:de:96:c0:27:2d:6d:23:1d:95:a3:1a:a1:cd:
         33:ed:a7:dc:d4:a0:1f:71:fb:1f:09:df:40:b7:3a:d2:1f:29:
         ad:6c:d0:48:5a:fc:85:1b:1a:73:59:87:13:18:2a:f5:86:58:
         d0:02:4f:d8:f9:97:8f:3b:c0:a7:5e:8a:42:78:50:f4:c7:11:
         32:96:3d:e5:dd:8e:a3:98:30:30:22:b2:ab:89:9e:7f:37:4b:
         d8:d7:cb:63:f2:4d:94:a8:3e:54:58:2b:5e:39:75:6f:e7:66:
         78:a3:3b:0b:42:7a:fb:11:1b:aa:57:a2:fb:ca:86:81:dd:04:
         66:35:a7:cf:5b:ea:c3:76:74:6e:4e:5f:0b:76:b8:30:18:bd:
         ef:47:f5:59:57:90:2e:65:d9:5d:02:7a:c5:7d:6d:f6:42:2d:
         58:9a:e1:a2:e1:11:95:f6:8f:1e:d9:3e:60:72:82:09:cc:12:
         ae:98:c2:14:9b:5e:b9:71:9d:24:2c:d8:e3:f1:d5:58:59:8e:
         e9:73:d0:0d:5b:71:be:45:82:19:14:c7:a3:ed:10:b1:d3:48:
         32:9f:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:27 2026 by rpki-client