Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5473497EDF0C11EC95837910C4F9AE02.roa
File:                     5473497EDF0C11EC95837910C4F9AE02.roa (raw, json)
Hash identifier:          hfr3lVqkIMuyMoTbmOqg6SmKUtu6SjD7Ipm3BIt7twQ=
Subject key identifier:   B3:0A:BB:75:74:97:C1:54:9C:69:24:B5:D3:CB:DA:10:EE:08:51:07
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0679
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5473497EDF0C11EC95837910C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:06:17 +0000
ROA not before:           Wed 27 Aug 2025 01:06:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     56223
IP address blocks:        58.137.33.0/24 maxlen: 24
                          58.137.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:06:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae5a08-f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:21:ab:8e:60:c0:82:ad:43:ef:29:fa:24:
                    eb:2c:89:b1:ca:33:c0:f1:ad:31:33:3c:e4:ec:20:
                    ef:84:98:61:91:57:e9:f8:06:cf:d6:a3:fc:71:4f:
                    ee:3d:08:d5:df:95:a8:3e:0e:cc:6e:2a:bc:e5:48:
                    ed:01:77:38:e2:c3:e4:9e:27:ff:05:2b:2c:8f:ce:
                    ea:07:46:6d:b9:90:3d:67:ac:ec:7e:df:3e:63:77:
                    22:af:75:03:f2:c7:4f:f1:3c:98:ca:43:12:dd:d0:
                    09:45:cb:45:70:d8:27:fa:8c:de:ed:2b:83:1b:58:
                    89:58:8b:a5:15:ad:50:1f:1a:63:11:b6:54:ee:d4:
                    f3:5d:7a:9b:e1:7d:b3:3c:c0:f6:d6:74:48:d4:02:
                    51:74:d6:3e:84:d6:0b:d5:8d:da:d3:d1:42:33:78:
                    a8:d7:43:5e:2c:cf:e1:6e:e6:34:43:a4:3f:3f:ac:
                    7e:83:4f:4a:49:b1:49:c0:ea:07:df:69:18:e0:72:
                    79:41:2b:76:36:c9:6f:56:a9:ee:33:35:bf:08:c9:
                    ce:82:26:b8:f4:ce:6a:7e:ee:9e:ee:ae:1e:e6:79:
                    57:61:68:1b:75:49:ec:b9:20:01:d2:68:ee:45:00:
                    c7:f2:3a:c7:5d:17:8b:53:04:7d:e6:b6:32:91:d5:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0A:BB:75:74:97:C1:54:9C:69:24:B5:D3:CB:DA:10:EE:08:51:07
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/5473497EDF0C11EC95837910C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.33.0/24
                  58.137.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:77:cd:0d:cf:f6:90:f0:8c:4e:3c:fb:21:06:69:20:7c:
         0c:90:13:b3:00:a9:59:d8:ec:a2:19:63:5d:54:3d:f2:bc:c8:
         0e:4d:7a:a5:40:f7:38:68:17:0d:f6:48:dc:cd:24:c5:c3:dc:
         7d:e6:f1:04:89:41:8e:c5:f7:87:14:0a:5a:86:e6:9f:12:ab:
         77:27:8c:5d:5b:26:16:4b:8b:7b:05:d9:13:ad:f4:8a:c8:76:
         75:55:79:2b:2b:65:0e:d3:e5:db:7b:96:7f:73:e2:fc:45:8a:
         5e:91:c9:d5:d7:f7:f4:bb:99:61:c5:5c:6e:78:7a:71:07:fd:
         5d:56:17:77:9a:9a:27:bc:79:7b:a9:34:fd:50:71:5a:70:bd:
         29:96:a2:6d:05:94:1c:ec:c6:d9:66:f2:5c:12:9a:13:0a:ba:
         85:e8:70:be:ed:0f:f0:be:3f:f8:91:0d:e0:ef:53:9b:69:3c:
         07:86:21:2a:79:83:17:04:02:ab:7e:85:be:d8:c9:27:93:4e:
         1e:6b:78:a2:03:8f:43:78:8e:ff:aa:0a:42:b2:8a:b1:a2:4e:
         2b:94:b0:b6:77:bf:af:c8:69:50:dc:b1:20:ee:70:9e:3e:34:
         14:77:9a:2c:86:f5:00:63:c5:eb:7f:e3:27:19:fd:93:02:64:
         cb:e1:ca:10
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUwODI3MDEwNjE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGFlNWEwOC1mMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWohq45gwIKtQ+8p+iTrLImxyjPA8a0xMzzk7CDvhJhhkVfp+AbP1qP8cU/u
PQjV35WoPg7Mbiq85UjtAXc44sPknif/BSssj87qB0ZtuZA9Z6zsft8+Y3cir3UD
8sdP8TyYykMS3dAJRctFcNgn+oze7SuDG1iJWIulFa1QHxpjEbZU7tTzXXqb4X2z
PMD21nRI1AJRdNY+hNYL1Y3a09FCM3io10NeLM/hbuY0Q6Q/P6x+g09KSbFJwOoH
32kY4HJ5QSt2NslvVqnuMzW/CMnOgia49M5qfu6e7q4e5nlXYWgbdUnsuSAB0mju
RQDH8jrHXReLUwR95rYykdVliQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLMKu3V0
l8FUnGkktdPL2hDuCFEHMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNTQ3MzQ5N0VE
RjBDMTFFQzk1ODM3OTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAA6iSEDBAA6iT4wDQYJKoZIhvcNAQELBQADggEBAACnd80N
z/aQ8IxOPPshBmkgfAyQE7MAqVnY7KIZY11UPfK8yA5NeqVA9zhoFw32SNzNJMXD
3H3m8QSJQY7F94cUClqG5p8Sq3cnjF1bJhZLi3sF2ROt9IrIdnVVeSsrZQ7T5dt7
ln9z4vxFil6RydXX9/S7mWHFXG54enEH/V1WF3eamie8eXupNP1QcVpwvSmWom0F
lBzsxtlm8lwSmhMKuoXocL7tD/C+P/iRDeDvU5tpPAeGISp5gxcEAqt+hb7YySeT
Th5reKIDj0N4jv+qCkKyirGiTiuUsLZ3v6/IaVDcsSDucJ4+NBR3miyG9QBjxet/
4ycZ/ZMCZMvhyhA=
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:34 2025 by rpki-client