Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/64A4C4A0DF1911EC8F85991EC4F9AE02.roa
File:                     64A4C4A0DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          gecZ/l0hT8huxzOX+Krv61GNCR/Leisx6Ao5poQag78=
Subject key identifier:   01:A3:F4:96:F2:4A:67:4C:96:EE:EF:EE:D6:76:2E:CA:8C:DF:FD:CB
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A14
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/64A4C4A0DF1911EC8F85991EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:29 +0000
ROA not before:           Wed 27 Aug 2025 01:05:41 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135620
IP address blocks:        58.137.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:41 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58849-2a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:8a:a4:67:64:2e:f8:19:ac:55:e6:63:16:
                    29:c3:98:e8:b4:e6:61:86:36:d2:79:92:cf:e2:0c:
                    97:c5:fb:0b:11:fd:e4:7d:47:7b:ea:02:c9:e7:fa:
                    61:fd:c3:a8:0f:44:69:80:2b:06:89:67:4f:a4:fd:
                    64:15:92:59:79:59:02:68:01:87:6c:d6:0e:ce:67:
                    c7:c5:e7:ac:28:02:2b:a4:25:0b:79:2a:fb:10:36:
                    67:2e:4e:0c:94:d0:8c:b8:fb:d8:d7:b6:f1:0a:46:
                    25:84:10:04:2f:9b:aa:a7:1d:aa:dd:40:e1:f0:3c:
                    5a:14:97:56:c2:b6:d5:42:d9:6f:e9:61:27:4f:4c:
                    b6:1c:86:34:a9:1f:4b:c8:1b:d4:c3:8d:1c:f9:b3:
                    09:e0:f6:10:10:76:5b:c6:71:ce:a2:8f:00:1e:7e:
                    de:d1:28:21:cf:5d:1b:92:e7:5c:57:b7:99:38:1d:
                    9d:72:74:4a:9f:55:f6:2a:8e:02:6a:22:55:bb:d8:
                    42:d1:84:22:0b:4c:0c:a6:38:20:5f:6d:5d:13:71:
                    ea:64:ba:e2:ff:de:eb:76:c1:97:11:a6:fe:54:d1:
                    43:ed:ca:0f:80:19:a1:ec:6d:41:31:6b:36:48:db:
                    51:05:6a:af:af:13:63:48:4d:f2:b2:af:ee:0a:cb:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:F4:96:F2:4A:67:4C:96:EE:EF:EE:D6:76:2E:CA:8C:DF:FD:CB
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/64A4C4A0DF1911EC8F85991EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:0b:80:7e:dc:b4:9a:85:0f:2b:cd:ca:7e:93:f4:bf:78:
         45:9c:50:19:ed:30:ff:86:89:b4:0b:5c:57:4d:c5:cf:6b:3c:
         62:d3:df:b6:9c:2a:03:14:f9:5c:a5:01:56:bc:12:04:84:64:
         31:ee:04:dd:e9:de:0c:a4:ca:63:1d:a7:82:18:5a:ad:33:ac:
         85:ce:54:13:7e:f6:3b:4b:eb:0d:3b:d6:ef:2f:de:e9:ef:13:
         45:62:ae:36:ea:fb:27:e6:a4:c1:59:b3:e2:ca:c6:a3:10:a7:
         87:02:2a:92:fe:b9:b7:80:02:37:3f:84:6a:1c:42:09:ad:27:
         ec:ce:8a:c8:5e:50:98:72:af:24:bf:2c:93:77:45:08:ea:ff:
         d8:12:c7:e8:d2:93:31:2e:db:d3:56:98:aa:a4:ed:81:5e:61:
         bf:9d:f2:64:2e:9d:2f:74:4d:89:76:6e:83:79:ea:c5:a5:60:
         87:20:4e:21:a9:67:de:5c:25:86:34:53:0d:05:c2:bd:7c:64:
         7c:a2:91:10:bc:e4:fc:0f:d0:ea:c3:61:15:9f:2b:cc:d6:c8:
         ff:30:e2:92:3f:6f:c8:a7:c6:91:20:67:83:ec:0e:36:38:40:
         bf:04:97:37:b1:d3:a7:ca:0e:61:50:d8:93:24:80:61:de:e0:
         12:4e:ce:06
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjUwODI3MDEwNTQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODg0OS0yYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBSKpGdkLvgZrFXmYxYpw5jotOZhhjbSeZLP4gyXxfsLEf3kfUd76gLJ5/ph
/cOoD0RpgCsGiWdPpP1kFZJZeVkCaAGHbNYOzmfHxeesKAIrpCULeSr7EDZnLk4M
lNCMuPvY17bxCkYlhBAEL5uqpx2q3UDh8DxaFJdWwrbVQtlv6WEnT0y2HIY0qR9L
yBvUw40c+bMJ4PYQEHZbxnHOoo8AHn7e0Sghz10bkudcV7eZOB2dcnRKn1X2Ko4C
aiJVu9hC0YQiC0wMpjggX21dE3HqZLri/97rdsGXEab+VNFD7coPgBmh7G1BMWs2
SNtRBWqvrxNjSE3ysq/uCsuYfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAGj9Jby
SmdMlu7v7tZ2LsqM3/3LMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNjRBNEM0QTBE
RjE5MTFFQzhGODU5OTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOommMA0GCSqGSIb3DQEBCwUAA4IBAQAVPguAfty0moUPK83KfpP0
v3hFnFAZ7TD/hom0C1xXTcXPazxi09+2nCoDFPlcpQFWvBIEhGQx7gTd6d4MpMpj
HaeCGFqtM6yFzlQTfvY7S+sNO9bvL97p7xNFYq426vsn5qTBWbPiysajEKeHAiqS
/rm3gAI3P4RqHEIJrSfszorIXlCYcq8kvyyTd0UI6v/YEsfo0pMxLtvTVpiqpO2B
XmG/nfJkLp0vdE2Jdm6DeerFpWCHIE4hqWfeXCWGNFMNBcK9fGR8opEQvOT8D9Dq
w2EVnyvM1sj/MOKSP2/Ip8aRIGeD7A42OEC/BJc3sdOnyg5hUNiTJIBh3uASTs4G
-----END CERTIFICATE-----
Generated at Sun Mar 15 01:18:32 2026 by rpki-client