Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/652917F0DF1911EC8F85991EC4F9AE02.roa
File:                     652917F0DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          BKrJNnSuUIerP5uAbm2myOSczfvV5WOUT/ABVRtutqI=
Subject key identifier:   31:14:A8:8A:C0:8B:71:A9:70:C8:A2:42:F9:81:62:B1:85:3C:DA:48
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0656
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/652917F0DF1911EC8F85991EC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:45 +0000
ROA not before:           Wed 27 Aug 2025 01:05:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140326
IP address blocks:        58.137.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59e9-3496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:af:d3:95:a2:5c:fb:75:27:88:81:c0:14:
                    10:62:5f:f8:0f:07:2a:9d:0c:51:d9:c7:7c:70:ee:
                    af:db:40:cf:b8:ce:3b:5c:27:33:3b:47:d2:53:98:
                    0f:9d:04:a9:c7:b2:52:94:60:5c:f9:33:56:a0:f6:
                    65:ce:b7:8a:93:e4:59:a6:c7:b0:79:06:57:dc:5d:
                    5b:ef:d2:9d:a4:b3:06:d1:bb:26:35:2b:66:d1:b5:
                    88:51:7f:e4:3a:25:34:70:19:49:81:25:5c:c8:1a:
                    07:57:5e:97:14:10:3c:0b:c8:a5:85:c4:21:b3:7b:
                    00:c0:73:08:b3:f5:4a:a9:4a:a9:87:64:55:ea:67:
                    46:c4:49:8f:ab:b4:35:ed:38:ee:09:53:16:89:ac:
                    ae:7f:af:37:78:91:e2:ad:dc:1d:16:7e:18:3a:80:
                    77:a9:36:04:2f:31:e4:e4:38:63:d7:4b:aa:7a:44:
                    29:ab:a4:15:52:05:af:7f:81:9e:04:0a:77:e1:ff:
                    d3:37:7f:a9:9f:85:6f:a6:2b:88:a9:65:c4:6a:d5:
                    f4:7d:54:8a:86:95:fe:0d:ce:8a:fe:ea:c6:1d:b8:
                    4d:73:14:48:0d:e0:c7:db:a7:bf:78:bc:40:bc:e3:
                    f5:33:7f:9a:92:d2:83:db:d8:8b:a9:2d:e8:3e:c6:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:14:A8:8A:C0:8B:71:A9:70:C8:A2:42:F9:81:62:B1:85:3C:DA:48
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/652917F0DF1911EC8F85991EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:84:54:bd:56:95:5f:45:b1:e1:d1:ca:5c:55:e3:d7:f4:
         b8:79:ba:a0:a0:d3:62:f9:80:c2:54:b8:ae:3d:f3:12:5d:54:
         26:b8:e5:fe:77:62:77:88:0e:93:7f:94:6b:cc:35:eb:ae:0d:
         1b:73:d2:cb:58:94:31:29:a4:11:a7:10:94:ba:63:04:ea:c5:
         42:19:a1:75:6a:74:a9:e3:7d:7e:fe:f6:38:c9:38:3b:27:f0:
         43:6a:3e:e2:e4:9e:f1:30:61:09:92:68:4b:3f:5e:15:30:0f:
         d2:c6:9d:47:d6:b1:c2:d9:60:4a:ae:04:eb:56:dc:cc:74:ca:
         4f:48:d0:f5:a4:fa:f1:79:0a:2c:36:1d:b5:2b:6f:a9:1f:ce:
         e0:20:db:87:14:73:5a:0a:b0:61:f5:26:2c:8d:e8:15:9c:e7:
         9d:f7:9b:0f:54:a7:7a:8a:8e:bb:56:d9:9f:8f:7b:7b:38:1c:
         e6:a7:dc:cd:6a:54:dc:74:8b:05:1a:ed:ed:9e:f6:69:01:8f:
         01:b3:a7:fa:3c:56:7a:cc:71:4b:ac:81:03:f2:55:9e:b5:56:
         77:97:75:e6:74:9c:06:d3:03:b9:c0:6f:71:93:73:a3:74:74:
         63:6d:80:99:36:34:46:bf:79:f7:56:05:96:1d:ae:76:18:d3:
         f0:ac:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:37 2025 by rpki-client