Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/39651CE6A6C711E9933CF621C4F9AE02.roa
File:                     39651CE6A6C711E9933CF621C4F9AE02.roa (raw, json)
Hash identifier:          95iGtOvfRyw7h4EyWnz45wfLtTcqDnaGt3rbtrh66CI=
Subject key identifier:   69:A8:C5:9D:E5:CA:6A:DE:84:0A:40:2C:B2:F2:97:87:A9:CF:0B:C8
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       359E
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/39651CE6A6C711E9933CF621C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 15:12:24 +0000
ROA not before:           Tue 30 Jun 2026 15:12:24 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     58884
IP address blocks:        58.97.162.0/24 maxlen: 24
                          202.57.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13726 (0x359e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Jun 30 15:12:24 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a43dcd7-e8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:64:cb:8a:3d:c5:42:d4:7e:eb:4f:85:9a:
                    41:1a:43:6e:fb:62:ad:fd:98:b3:1a:fc:e2:23:69:
                    48:11:11:57:55:aa:09:56:77:e7:da:90:72:d4:83:
                    e4:d6:e1:cb:4d:43:de:1b:7c:83:ae:42:99:87:76:
                    b7:24:75:5f:2c:72:bc:c9:a1:d4:df:13:ed:5f:4c:
                    5f:9b:bc:56:f3:bf:2c:42:a8:4b:fc:d3:07:60:bc:
                    2d:ec:07:ee:d3:5b:31:f8:5a:12:a3:34:59:49:ff:
                    fa:0c:bd:26:74:74:1d:62:21:7e:85:a9:5a:ad:6a:
                    ca:62:4d:62:ef:de:05:7c:a6:1a:9a:f3:ad:cb:1b:
                    16:18:84:e3:9f:fa:18:5b:66:32:08:7f:ed:6c:94:
                    2e:46:d1:7f:d8:62:69:65:e1:29:ca:12:3f:b1:b5:
                    33:d9:cb:16:b2:08:e0:bc:b6:1a:cd:a6:7e:b1:45:
                    b2:0a:7f:c0:f2:92:f1:1b:ee:60:38:cc:35:cd:3e:
                    4e:60:72:06:cb:84:aa:27:cd:bf:6f:32:0b:e8:ff:
                    bf:d7:d0:c8:7c:43:3c:dd:77:00:28:27:1d:04:92:
                    50:5d:16:d2:f1:09:00:d7:0e:15:e2:29:c4:37:a7:
                    bb:46:95:28:7a:7a:b6:c8:d5:78:f4:f7:66:85:11:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A8:C5:9D:E5:CA:6A:DE:84:0A:40:2C:B2:F2:97:87:A9:CF:0B:C8
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/39651CE6A6C711E9933CF621C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.162.0/24
                  202.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:e6:e6:46:6c:90:98:c5:c6:85:d0:ee:47:e0:93:01:f1:
         90:2e:82:bb:1d:60:c6:13:34:72:73:94:b8:9f:5b:4a:77:4b:
         8e:3c:b0:4d:8b:6f:a3:d6:62:93:40:a5:a1:69:6d:d0:ef:c4:
         7d:b7:83:c7:f8:3a:d3:38:68:04:c8:36:bf:27:c6:2c:69:86:
         1a:59:9f:58:6c:b8:f9:40:9f:6b:3f:0a:05:bd:7b:e5:40:33:
         af:b7:fc:51:4d:ae:67:eb:0b:2a:5b:5e:b5:50:a4:cf:7c:fb:
         25:d4:e6:2c:60:5a:b6:d0:01:3e:90:59:9e:14:2f:a2:17:45:
         ec:01:c5:57:c5:a9:2e:05:98:d8:4a:4d:a8:cc:53:9f:82:75:
         ea:88:80:a6:08:88:82:0f:aa:9d:63:d1:8a:63:c9:2d:92:92:
         b0:59:b8:cb:fb:0d:91:6f:0c:8b:66:ee:e0:82:64:a0:64:e5:
         3e:a3:a1:85:0a:88:44:04:e6:33:19:24:d4:c8:99:4d:44:88:
         f9:16:6c:2c:87:90:d7:a1:90:a0:6e:e8:1a:a6:30:90:0e:be:
         35:4a:20:15:5c:c1:11:60:50:f7:4c:fb:5d:25:d4:cd:28:dd:
         91:45:fe:78:41:b4:db:b2:b3:0f:8a:94:1e:c0:56:da:31:2d:
         64:e2:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:27 2026 by rpki-client