Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/66E4A1D6DF1911EC8F85991EC4F9AE02.roa
File:                     66E4A1D6DF1911EC8F85991EC4F9AE02.roa (raw, json)
Hash identifier:          wOYWkjGo8h008ntaXncqcEmdfXHVYG7P++jxSdHPmlU=
Subject key identifier:   48:21:28:A4:C5:F5:5C:0D:55:20:51:DB:07:89:07:34:1A:CD:CD:80
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B3F
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/66E4A1D6DF1911EC8F85991EC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:50:18 +0000
ROA not before:           Thu 03 Sep 2026 00:50:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38231
IP address blocks:        58.137.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:50:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c449-13bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:c8:63:97:47:43:72:5a:98:24:66:45:6f:
                    9a:5b:73:bd:dc:d8:55:bf:3a:6e:87:38:bc:9c:f9:
                    63:8d:70:be:54:1a:fa:ec:12:09:30:26:7d:f2:1c:
                    1d:9b:35:e6:99:b5:da:56:96:0e:70:06:4d:b6:f1:
                    f5:00:31:d6:e6:82:e6:d5:47:c3:99:ae:ee:58:9f:
                    c2:83:f1:13:69:d3:d6:fa:90:38:58:73:b2:17:86:
                    c5:04:ad:26:26:9e:06:dc:95:cd:61:32:91:3a:bc:
                    7c:50:56:dd:27:82:9b:4a:59:b5:99:0a:41:cf:3d:
                    b2:85:df:4f:43:a1:a5:81:d6:c6:82:de:dd:ff:77:
                    18:70:ce:2e:f4:11:4f:53:86:20:01:ce:eb:cb:29:
                    9a:d4:83:2e:e9:8b:01:99:7c:69:9a:24:51:ad:18:
                    30:be:90:c2:83:8b:01:f2:7f:b2:b7:03:63:36:d3:
                    83:e1:db:2d:dc:f5:6f:8d:c4:32:7f:f4:21:87:06:
                    cc:cc:2d:d5:d3:3c:05:14:8d:fb:23:b9:c8:d7:91:
                    e8:72:a7:06:95:7e:49:ab:1a:78:f2:f1:35:2d:f5:
                    88:a3:4a:6c:12:78:97:93:76:57:fa:b8:98:8f:1d:
                    6a:67:08:5e:d7:f2:cc:b5:54:b4:58:8b:e5:b9:29:
                    ac:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:28:A4:C5:F5:5C:0D:55:20:51:DB:07:89:07:34:1A:CD:CD:80
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/66E4A1D6DF1911EC8F85991EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:0f:28:a8:78:9a:62:75:66:1c:52:30:49:b6:10:3d:e6:
         79:9e:f3:38:86:38:a3:8e:55:d6:8d:e3:06:41:a9:12:0d:27:
         8e:d2:f9:cc:4b:2c:d2:9e:f6:fb:8c:88:16:b2:64:f4:bb:85:
         5a:59:1a:a4:a7:fc:28:03:40:95:78:97:91:83:5e:51:04:d6:
         84:e1:34:05:05:a3:3f:7a:0e:7c:44:9f:69:bb:28:50:40:18:
         2f:72:af:c5:7a:8f:df:57:14:1f:58:16:2e:14:51:2f:be:f9:
         ef:e6:4c:df:b0:9c:4e:d0:47:5b:ab:4a:b2:2c:46:02:a8:b9:
         6b:68:22:e6:dd:12:5a:05:65:d8:7d:6e:16:13:f9:37:0c:b4:
         9a:d7:94:19:3b:fb:ff:a4:0a:ab:1c:e9:be:68:77:dd:bb:65:
         51:eb:2f:44:22:77:35:bd:a6:0d:5a:41:4e:9d:48:db:13:b1:
         81:19:55:4f:d0:b9:52:b0:67:6a:f5:f1:bd:1b:b4:f8:9a:83:
         9b:3d:3e:6c:91:f9:d4:43:07:34:76:ed:da:02:60:cc:c1:b9:
         b2:b6:f3:40:65:86:7f:ba:8f:85:76:67:05:b8:c7:5a:99:f4:
         28:39:71:49:84:ea:c0:18:87:f3:1f:ad:1f:d5:0a:47:82:6c:
         11:dc:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:48 2026 by rpki-client