Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7E6E431ADF1011ECA2548C86C4F9AE02.roa
File:                     7E6E431ADF1011ECA2548C86C4F9AE02.roa (raw, json)
Hash identifier:          iydZ4Vor0K4GU1rMNuSa7PAwjLa1enl3eVkezWOvQaQ=
Subject key identifier:   66:64:68:90:4A:39:58:80:BD:27:1C:F8:B4:FB:7E:F7:A2:1A:96:F2
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0B36
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7E6E431ADF1011ECA2548C86C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 00:49:59 +0000
ROA not before:           Thu 03 Sep 2026 00:49:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     18408
IP address blocks:        58.137.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Sep  3 00:49:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a98c437-c9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:e1:7c:63:89:42:85:8f:70:31:a6:f5:d8:
                    59:1c:96:f5:6a:2f:24:19:35:b2:a1:d8:76:99:b8:
                    b7:35:74:dc:2e:b3:91:c4:90:58:5a:dd:c4:3e:dd:
                    35:fc:38:02:0f:6b:4b:5a:ef:38:6f:af:20:82:73:
                    b1:0c:dd:85:92:34:1c:db:ea:fb:f0:12:38:28:b9:
                    49:63:22:d8:fb:2c:ff:4b:fb:66:f0:1b:19:d4:01:
                    25:ba:f1:fa:f2:9a:e8:50:c8:f9:6d:22:ab:73:dd:
                    4f:12:af:b1:07:c5:32:79:b0:97:81:95:f7:c3:dd:
                    3c:bb:29:cf:30:0b:a0:9b:55:95:98:96:4e:e0:8c:
                    dc:23:0e:5f:c9:3f:1b:af:a8:fd:33:69:1a:d7:83:
                    c1:40:de:f3:1a:c3:0e:fb:86:4b:b7:45:54:95:d1:
                    40:be:d9:9e:1d:ef:5d:c0:6a:3d:cc:bb:b9:77:7e:
                    72:3f:77:fa:de:d2:b4:5e:49:ae:de:07:94:0a:f6:
                    ff:51:55:0c:a4:ae:55:63:05:20:f0:8a:10:04:05:
                    cb:45:d0:5c:dc:04:b5:a3:63:79:58:a5:f1:93:58:
                    a8:30:24:59:cc:5f:de:9d:1f:a0:b2:6c:31:24:72:
                    50:b3:f1:b9:99:ed:23:67:dd:51:23:3d:83:46:b3:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:64:68:90:4A:39:58:80:BD:27:1C:F8:B4:FB:7E:F7:A2:1A:96:F2
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/7E6E431ADF1011ECA2548C86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:64:7e:1c:e2:76:d5:08:19:2f:48:1c:7d:b5:e7:b4:ca:51:
         e9:2c:e9:dc:68:59:67:7a:ce:51:b8:3f:94:3a:31:4d:8c:eb:
         61:7c:55:29:f3:f9:41:35:71:21:f6:6f:1a:36:0b:40:14:3d:
         8c:6a:78:a3:f5:14:e9:47:81:99:19:df:a0:97:3e:97:ae:2a:
         6a:2c:08:ad:a8:a2:3b:e8:7d:61:8e:de:ce:b0:dc:c7:c0:08:
         6c:2a:02:2d:3d:25:28:6b:7a:67:a7:08:33:40:de:22:24:23:
         1e:76:2d:28:f8:47:58:e0:91:a7:1f:b8:8d:5b:06:59:46:7a:
         d1:63:ac:9a:78:c4:a7:d1:45:2e:be:42:f9:de:82:ae:9b:96:
         13:9d:62:58:fe:31:7d:e1:d9:b1:d8:93:7e:40:81:4c:72:2d:
         1d:eb:a1:3a:0b:59:25:de:cf:c9:95:2e:22:46:41:19:bd:ee:
         5f:6f:68:a1:64:cc:6e:9e:9d:57:29:53:d0:10:a8:68:c1:33:
         c3:8f:92:86:2d:6a:f2:08:d6:25:e6:ba:c2:46:07:55:c5:d8:
         38:92:07:0c:84:2b:96:82:c9:2e:5f:31:61:5a:89:d8:71:7d:
         de:39:ac:b9:79:83:97:37:4b:a5:df:42:e0:cd:0a:55:ca:7e:
         aa:c2:8f:26
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1
OTVFNjFBMTkwHhcNMjYwOTAzMDA0OTU5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YzQzNy1jOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtN3hfGOJQoWPcDGm9dhZHJb1ai8kGTWyodh2mbi3NXTcLrORxJBYWt3EPt01
/DgCD2tLWu84b68ggnOxDN2FkjQc2+r78BI4KLlJYyLY+yz/S/tm8BsZ1AEluvH6
8proUMj5bSKrc91PEq+xB8UyebCXgZX3w908uynPMAugm1WVmJZO4IzcIw5fyT8b
r6j9M2ka14PBQN7zGsMO+4ZLt0VUldFAvtmeHe9dwGo9zLu5d35yP3f63tK0Xkmu
3geUCvb/UVUMpK5VYwUg8IoQBAXLRdBc3AS1o2N5WKXxk1ioMCRZzF/enR+gsmwx
JHJQs/G5me0jZ91RIz2DRrOqswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGZkaJBK
OViAvScc+LT7fveiGpbyMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H
aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvN0U2RTQzMUFE
RjEwMTFFQ0EyNTQ4Qzg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOomGMA0GCSqGSIb3DQEBCwUAA4IBAQCIZH4c4nbVCBkvSBx9tee0
ylHpLOncaFlnes5RuD+UOjFNjOthfFUp8/lBNXEh9m8aNgtAFD2Manij9RTpR4GZ
Gd+glz6XripqLAitqKI76H1hjt7OsNzHwAhsKgItPSUoa3pnpwgzQN4iJCMedi0o
+EdY4JGnH7iNWwZZRnrRY6yaeMSn0UUuvkL53oKum5YTnWJY/jF94dmx2JN+QIFM
ci0d66E6C1kl3s/JlS4iRkEZve5fb2ihZMxunp1XKVPQEKhowTPDj5KGLWryCNYl
5rrCRgdVxdg4kgcMhCuWgskuXzFhWonYcX3eOay5eYOXN0ul30LgzQpVyn6qwo8m
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:39 2026 by rpki-client