Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/66E4A1D6DF1911EC8F85991EC4F9AE02.roa
File:                     66E4A1D6DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          GSRcCb8Y13as1eEDkXLi2ZRBbNmViBuzWspTHfOvPuA=
Subject key identifier:   45:F7:10:F0:5E:49:CC:E1:C5:B9:C8:83:F0:F2:4C:D9:0C:D1:E1:F5
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A29
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/66E4A1D6DF1911EC8F85991EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:47 +0000
ROA not before:           Wed 27 Aug 2025 01:05:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38231
IP address blocks:        58.137.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2601 (0xa29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5885b-2275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:6e:5b:a5:79:5a:21:16:df:83:db:4e:29:
                    ad:99:b7:06:f0:cd:e3:dd:a7:19:35:2a:71:cd:87:
                    28:7c:74:d5:98:27:ab:00:44:bf:39:46:45:ae:49:
                    ba:09:1d:83:56:a6:6c:d6:ae:f5:f3:59:48:d7:d0:
                    ac:2a:6b:51:e6:6c:17:43:b3:0b:b7:43:26:37:de:
                    26:df:78:67:4c:15:d7:c5:79:29:35:91:3a:65:31:
                    70:7c:96:4a:fa:9c:ea:1b:e5:29:80:1e:5c:6c:b2:
                    47:3e:87:a1:21:ac:3c:80:3f:01:af:6d:b5:cf:96:
                    9d:85:98:0f:ee:56:5b:f0:75:ca:71:bf:ae:54:5b:
                    0f:5c:1d:b0:75:91:41:b3:9b:e2:9a:f1:09:c7:40:
                    bf:24:43:c3:27:5e:9a:09:3d:92:89:4e:ee:f1:55:
                    36:12:df:e9:da:87:0e:31:dd:54:9c:46:35:7c:bb:
                    b0:e7:97:27:5a:b7:56:ba:de:2f:c2:19:ac:24:9d:
                    02:ba:27:55:54:3f:e1:c6:0a:b1:47:ea:df:bc:85:
                    79:b2:09:07:5e:a4:a8:11:32:76:ce:f1:43:64:0a:
                    5d:80:c2:6c:53:d4:2e:d8:fc:53:53:6e:2e:db:f1:
                    6a:2e:4a:8f:ed:d7:9a:1b:07:d9:5b:53:8b:38:79:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F7:10:F0:5E:49:CC:E1:C5:B9:C8:83:F0:F2:4C:D9:0C:D1:E1:F5
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/66E4A1D6DF1911EC8F85991EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:25:48:ce:4d:a0:56:cf:f4:52:23:99:e2:43:06:24:5a:
         97:a1:4e:e5:bb:ee:ae:0b:2b:6f:d4:fe:e9:55:ff:28:e6:99:
         b5:cd:30:4e:a6:d8:7c:b8:d7:ca:b5:e6:f9:11:56:f3:a9:db:
         9b:66:a1:ca:d4:ec:ca:39:b0:1c:29:6a:1b:6a:ac:6e:fd:e9:
         ad:61:a1:5e:3a:f7:06:3b:f5:fb:1e:0c:1c:45:02:e9:be:9a:
         9d:19:86:9a:01:f6:aa:20:a7:d8:37:e8:fc:72:64:11:dd:86:
         7d:f6:4a:a0:b1:92:ce:68:40:d7:1c:b4:05:1d:34:91:86:3e:
         4b:43:46:1b:2a:37:be:a5:c7:ba:04:0f:c5:cf:2f:85:50:f8:
         65:4e:78:dc:2b:4e:8f:1c:12:3c:9a:98:01:ca:a0:8d:fb:23:
         a8:56:b9:2c:87:99:c8:48:0b:dd:31:3e:8f:a7:03:8c:aa:f3:
         92:d0:1c:54:d5:ac:d3:c4:0d:00:51:d4:b6:6c:1d:38:cc:50:
         7b:57:6a:b8:3e:31:cb:a1:8b:95:70:fe:72:3a:cf:9a:f3:0b:
         77:32:53:71:84:a0:54:37:f6:bd:8c:86:66:c6:71:f9:a5:8d:
         bd:45:21:4a:13:c1:c6:2c:c3:6f:b8:ed:a9:f8:f7:9e:5b:1e:
         ff:91:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:25:01 2026 by rpki-client