Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa
File:                     58EE9E1227E311F1A1CB4281AA833773.roa (raw, json)
Hash identifier:          yPIdqNt/dpH6aJ38rvENnZ/i7R2Mb/uLxcqBp1Vco0I=
Subject key identifier:   C8:98:1B:99:3E:6B:BC:71:9C:B4:30:BD:21:B0:90:DE:7F:EE:05:05
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       2A
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa
Signing time:             Tue 19 May 2026 09:42:02 +0000
ROA not before:           Tue 19 May 2026 09:42:02 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     38809
IP address blocks:        162.145.0.0/17 maxlen: 22
                          162.145.128.0/17 maxlen: 17
                          162.145.252.0/22 maxlen: 22
                          164.97.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: May 19 09:42:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a0c306a-a776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:36:a1:8d:d1:8d:68:48:7d:a0:19:5d:fe:
                    4d:93:99:9a:fc:30:8a:b0:7c:e8:af:fd:12:c3:ab:
                    61:68:8e:bb:37:af:b9:dd:b5:87:9d:d9:68:13:4a:
                    ca:f8:9c:e7:a1:ba:c8:29:49:85:c5:c9:5c:fd:a5:
                    c7:87:0e:d7:0e:55:82:f8:81:e3:04:71:42:1f:e3:
                    98:e5:08:74:a0:18:81:6d:08:b2:bd:59:92:2e:52:
                    d6:8a:7e:c0:d7:0d:e2:be:fd:2f:99:0e:97:06:7a:
                    8e:de:23:00:7f:19:f8:56:a8:32:ca:04:36:b3:b2:
                    b6:4f:76:cd:5a:33:5f:3f:e1:b9:41:99:d2:29:da:
                    3b:00:5e:ee:06:fe:4a:64:0e:d0:1b:35:97:61:7b:
                    38:9e:a3:af:32:10:33:23:19:28:64:ad:7b:c5:27:
                    a7:6a:64:11:5e:a1:c0:e7:ec:2e:c8:26:c2:85:6a:
                    ef:f6:20:cd:23:5b:38:41:23:bc:8b:f3:2f:d8:51:
                    aa:5d:8d:b1:79:d8:4b:a5:b8:a3:04:cf:40:03:50:
                    b9:c7:e1:13:20:f9:d3:e4:9a:6f:85:07:77:75:e3:
                    bb:84:0b:ef:6c:02:af:e9:ae:be:d3:4e:30:36:ed:
                    18:e7:86:5c:f1:9f:c2:bb:06:95:1d:e4:9d:cf:1a:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:98:1B:99:3E:6B:BC:71:9C:B4:30:BD:21:B0:90:DE:7F:EE:05:05
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.145.0.0/16
                  164.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:8f:b2:f0:12:f3:23:0c:4c:f4:8e:81:e8:03:09:c9:cb:
         7d:aa:36:5b:74:6d:99:05:6e:fa:ef:6a:d1:79:a7:70:d7:8c:
         09:66:f8:ba:a0:1d:03:9e:2e:a4:12:61:98:78:05:c3:49:4f:
         ac:5d:89:4f:d3:d3:9e:56:98:1d:46:0a:02:0f:ae:56:ab:3c:
         f2:6c:15:a3:30:65:0f:15:f5:ef:ea:11:78:d6:da:c3:d5:ab:
         de:db:f3:8d:21:2b:09:00:31:36:bc:e1:cb:30:07:b6:ca:89:
         a3:ab:98:97:21:84:31:59:36:f0:bf:8d:02:95:f7:04:3a:77:
         10:86:b8:08:5a:a9:bd:1c:da:65:52:0a:6a:0d:e3:6f:ab:2f:
         ba:7a:75:be:ba:92:07:46:7f:9e:d7:d7:5c:20:a6:5e:48:7d:
         d3:8b:a9:89:fe:0d:be:28:a9:0b:3f:0e:fd:2e:91:13:57:8a:
         cd:c2:83:30:82:9b:8b:b4:10:32:77:da:f8:e3:7f:31:b0:6c:
         04:4d:ab:7c:9f:ff:2d:8e:99:1c:7b:ad:c2:53:ed:44:11:5e:
         4b:8e:c7:96:47:a7:42:2c:45:54:c9:b5:39:ae:22:de:64:23:
         ed:31:a2:c4:c6:d0:dc:82:88:bb:ce:84:bb:4f:ec:50:d0:b5:
         1f:c7:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:20:54 2026 by rpki-client