Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/A6CAFBD4AE5E11F0BA638180C4F9AE02.roa
File:                     A6CAFBD4AE5E11F0BA638180C4F9AE02.roa (raw, json)
Hash identifier:          IU3kfExyyXnwvd/wSGXAXC92naJmUJBxv5/NbpGuG6w=
Subject key identifier:   FF:D7:2E:B8:4E:0D:1B:89:E6:78:4D:0E:AB:11:95:B2:35:A3:71:0F
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A46
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/A6CAFBD4AE5E11F0BA638180C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:54:12 +0000
ROA not before:           Tue 21 Oct 2025 09:16:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154179
IP address blocks:        58.137.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Oct 21 09:16:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58874-ad23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:8f:ac:a7:7a:a0:c3:89:0d:5c:22:8d:71:
                    a3:0a:b4:16:73:f9:0d:15:4c:a1:0e:04:09:c1:49:
                    b9:bd:b1:22:61:43:95:56:6b:f6:89:47:60:01:5f:
                    6d:29:c3:b2:e9:eb:ed:20:f3:9c:15:41:75:6c:22:
                    4e:9a:24:36:80:df:81:3b:98:06:7b:9e:d2:5f:20:
                    cb:ed:c9:0a:d8:df:22:45:14:58:f2:b2:74:0b:21:
                    dc:a6:f2:c4:7c:85:0e:58:80:bf:ab:f5:77:61:10:
                    60:54:13:03:40:a7:d8:c2:25:f2:bd:6a:e1:48:fd:
                    cf:74:a8:72:fd:8b:da:e5:e0:33:79:71:1f:ec:2d:
                    f3:3b:52:7e:b3:72:3b:9a:84:19:12:3d:7f:92:91:
                    20:d0:76:b8:1b:c2:dd:5a:01:2e:76:d7:4f:f9:76:
                    74:7a:db:3a:a5:2a:17:46:7f:2d:5e:8a:a5:6e:a6:
                    2d:ce:29:7f:c1:1e:c1:ec:e5:08:81:fc:45:91:6e:
                    86:aa:13:ac:22:06:24:25:22:81:89:eb:0d:86:1a:
                    5d:59:72:2e:9d:77:9d:87:9d:29:1e:cd:a1:44:9c:
                    0f:21:1f:51:03:17:cb:f6:4a:47:10:6a:3f:a7:9f:
                    64:fa:68:de:78:ae:54:34:58:4b:4a:22:41:e8:25:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:2E:B8:4E:0D:1B:89:E6:78:4D:0E:AB:11:95:B2:35:A3:71:0F
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/A6CAFBD4AE5E11F0BA638180C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.137.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:df:72:97:84:72:1e:2d:f0:31:fd:1a:09:a5:eb:38:04:8f:
         7f:71:77:ca:aa:51:ce:95:9d:4b:7f:d5:ba:da:82:ab:de:23:
         1b:8a:44:49:7e:bc:05:eb:0c:b4:19:25:14:19:36:24:f9:30:
         3f:57:7c:80:03:99:4c:b6:7c:f1:0e:30:4c:7a:23:85:0a:d1:
         4e:75:5e:ec:fa:29:b5:8d:be:aa:af:61:bf:27:ee:bd:23:f3:
         71:db:a5:3a:5a:d5:3b:b6:79:52:84:c1:82:b0:e7:39:51:6e:
         96:b8:77:cb:e2:af:64:01:09:d0:63:89:17:6d:43:20:5e:a6:
         93:7b:3f:fc:d5:d1:1b:01:b5:cd:86:5d:10:03:0c:fe:eb:68:
         83:e5:82:18:fd:97:e0:21:1d:5e:f7:12:4f:62:59:da:d0:57:
         4b:88:96:bd:ff:47:c9:24:cf:79:5d:c4:16:7e:fe:51:9d:18:
         5e:f2:18:f2:99:06:05:8c:58:ab:2f:35:2d:ca:d6:ae:73:fd:
         6b:80:82:fc:89:a3:26:df:f3:ea:e1:f4:2b:9f:59:fe:90:e3:
         3d:ee:b7:ba:95:40:0f:68:65:eb:29:7b:d7:f7:01:d2:05:44:
         67:61:c0:21:cf:27:ad:71:14:9d:da:71:56:9a:39:5d:0b:87:
         2e:08:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:20:11 2026 by rpki-client