Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
File:                     65A36988DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          GOyyZ7UN5IbuVordxGSouznsXQ3MAV8VdwJaLmMaRGo=
Subject key identifier:   92:E2:39:3B:20:0F:58:0D:F6:34:6F:C9:EF:CF:99:72:A1:10:99:38
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       065E
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 01:05:52 +0000
ROA not before:           Wed 27 Aug 2025 01:05:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24083
IP address blocks:        58.137.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae59ef-5824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:98:85:9e:85:ba:9e:9a:bc:4d:c1:29:ca:
                    9c:54:1b:3a:ab:7c:7f:93:f1:b9:c7:84:80:2d:cf:
                    dd:0a:79:56:f8:d6:7f:f1:9a:27:fa:29:db:c7:99:
                    b1:5b:72:ad:1e:23:c6:56:0c:d6:81:32:9c:7d:a9:
                    7b:7c:4e:a4:ae:9d:29:9a:0b:70:fa:93:86:5c:7f:
                    f7:bf:d5:47:a3:9c:2e:2b:42:98:df:11:2c:d2:23:
                    9b:a0:0c:5b:db:4e:cd:e7:d9:81:13:f9:33:94:77:
                    b9:b4:94:e8:3b:61:2f:6d:4a:1a:af:ed:8b:62:af:
                    97:11:25:23:71:50:0a:ef:9c:00:c1:73:42:c4:cd:
                    81:43:4e:30:01:ec:b6:31:3d:4e:53:d7:34:6f:82:
                    89:07:02:be:7c:33:ce:09:fb:7d:ca:df:54:43:b6:
                    37:da:36:7a:b2:18:eb:41:dc:2c:9e:44:f2:1d:a7:
                    ca:fd:70:cb:25:87:21:ed:9e:81:8e:54:7f:e4:b6:
                    99:b5:9f:6e:d9:e8:ec:db:a1:12:b7:df:f6:f2:58:
                    fd:c3:2a:f6:be:fc:a7:84:ef:0f:be:68:a1:8b:82:
                    24:49:e9:8c:b3:11:24:1f:0d:91:38:cd:70:59:a0:
                    34:b4:0b:c3:72:1c:fd:58:b1:29:4c:1a:01:3b:1a:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:39:3B:20:0F:58:0D:F6:34:6F:C9:EF:CF:99:72:A1:10:99:38
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/65A36988DF1911EC8F85991EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:34:25:d6:bf:0b:08:ca:22:e9:24:75:ae:4d:92:ad:52:eb:
         ac:73:11:b4:85:06:03:1a:06:b5:0a:3f:8b:62:53:22:a0:34:
         f0:48:65:05:d2:dc:11:9d:07:95:9c:41:7f:3d:b7:c2:b1:53:
         d7:ce:9f:48:a9:21:ba:53:4e:87:ef:2e:c0:c2:c2:cf:af:a2:
         a1:06:bb:ed:04:60:7d:02:4c:78:19:96:c2:54:5c:a0:c1:42:
         78:6b:10:0e:40:95:8a:5e:0b:0d:d1:8c:61:00:f7:6f:00:4a:
         26:23:1d:73:7a:fd:dd:08:d9:9b:8d:ef:4d:4b:fa:87:b6:f0:
         ca:0e:c9:42:d8:82:ee:0b:f0:27:7e:05:a4:01:21:c9:ed:73:
         01:4f:38:78:cb:ac:71:0d:22:ad:c4:5b:14:3a:b8:03:12:4c:
         b0:8f:41:e7:da:db:e8:09:bc:f7:1a:3f:12:50:08:b8:bf:d9:
         cb:5a:f5:67:01:ee:7d:06:d7:d5:0d:2b:71:53:94:c5:5c:b5:
         98:6b:c4:9a:b8:1b:c9:a6:19:b0:0e:90:c6:f1:8d:13:e0:fb:
         cf:ba:3f:06:03:0e:87:08:0a:d0:9e:24:fb:bd:ae:93:1c:ff:
         d9:d4:c2:51:9b:d0:ed:7b:7d:8a:ae:19:21:bd:51:18:fe:83:
         01:7c:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:17:31 2025 by rpki-client