Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/58548E7E58D711F193388669A6833773.roa
File:                     58548E7E58D711F193388669A6833773.roa (raw, json)
Hash identifier:          5SoJbf8FG3By3aUEH9+1tHflBLhQTGm7shpUveBVDcQ=
Subject key identifier:   6B:ED:DF:1B:E9:53:92:C4:2A:4B:22:D5:EE:27:0C:15:8E:D9:B8:74
Certificate issuer:       /CN=A91801AC/serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
Certificate serial:       38
Authority key identifier: 89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/58548E7E58D711F193388669A6833773.roa
Signing time:             Tue 26 May 2026 07:48:55 +0000
ROA not before:           Tue 26 May 2026 07:48:55 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        203.34.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl
                          rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801AC, serialNumber=890CAE70EE052737295100BF0CF011EB320462B7
        Validity
            Not Before: May 26 07:48:55 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a155067-8380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:f4:63:a3:2c:33:91:46:a5:8c:ea:55:c5:
                    1d:98:a5:ee:dd:c7:47:11:86:e6:7d:ee:0d:a0:7b:
                    65:a3:10:68:f4:88:e1:d4:a4:41:ab:95:77:5f:b5:
                    aa:85:a6:b3:9b:41:ad:95:de:ef:8b:23:ee:a5:e8:
                    d8:ea:9b:d5:82:e2:d3:49:d9:24:82:0c:6a:d4:95:
                    0a:48:ad:91:73:9a:85:a5:b1:36:f4:a0:8c:38:7d:
                    7e:ca:62:10:f4:5e:cb:8c:43:01:1b:2c:29:ae:ff:
                    a2:d1:fb:8f:81:e1:ea:9d:d5:a8:d2:c6:ce:58:b2:
                    d6:26:94:72:40:5d:d2:c7:cd:ca:0b:15:a3:1a:c3:
                    f2:5c:81:aa:3c:6d:8a:11:14:79:51:68:24:32:e2:
                    74:af:ca:bc:11:1d:bd:16:ec:81:e5:8a:58:aa:a1:
                    29:94:84:6c:6c:56:da:bb:7a:26:e2:de:4e:83:e1:
                    c6:aa:28:7e:52:49:8a:bc:50:f3:e8:c6:e5:ca:bd:
                    21:78:f4:7a:73:db:d6:77:21:62:3a:7d:aa:31:94:
                    47:af:79:fb:17:bf:5b:3b:f2:ce:47:fc:8d:3d:95:
                    37:4a:1f:1b:37:c1:6b:32:3f:1f:aa:68:de:84:17:
                    11:8a:8e:a4:84:9c:6a:2b:1e:6e:c8:8c:af:45:64:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:ED:DF:1B:E9:53:92:C4:2A:4B:22:D5:EE:27:0C:15:8E:D9:B8:74
            X509v3 Authority Key Identifier:
                keyid:89:0C:AE:70:EE:05:27:37:29:51:00:BF:0C:F0:11:EB:32:04:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/iQyucO4FJzcpUQC_DPAR6zIEYrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQyucO4FJzcpUQC_DPAR6zIEYrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801AC/B075028A12CA11F1BCBA005E063D8C67/58548E7E58D711F193388669A6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:f9:81:61:0d:0d:b6:2e:7c:56:c9:a0:b6:9d:fa:0b:55:
         a8:5f:e2:7c:ba:ec:45:59:bd:8d:b4:db:59:a3:db:7f:0e:16:
         9a:fa:dc:a5:f0:31:70:f5:b4:b6:0c:cc:1f:13:87:ca:97:f3:
         29:7f:4d:3e:e2:53:80:5d:4e:d8:99:6c:12:75:15:e3:b5:11:
         28:54:ec:6b:32:b0:39:f1:54:5e:88:db:b9:c6:07:f0:e8:e6:
         c4:6e:8d:04:04:06:48:72:a3:bb:d3:fe:3d:f4:61:a1:69:85:
         4c:80:cb:7c:39:7b:10:eb:68:92:ef:9d:42:d3:ac:ae:ce:f2:
         2d:ba:a7:de:19:13:61:d1:6b:53:90:8c:4b:4e:ae:9e:97:66:
         a0:4d:a7:5f:4a:6f:fc:a2:59:6a:eb:11:b3:27:b0:61:23:af:
         16:bb:9f:db:ee:6c:02:e5:ea:ce:1e:7a:c1:b9:bc:2e:fe:f0:
         66:c9:ba:c2:2f:6e:e8:ec:9d:e6:8d:6c:6d:ad:d2:32:cb:19:
         fe:b6:67:1e:06:8b:1d:52:38:47:82:af:08:23:b7:b9:82:86:
         74:d3:23:f6:10:68:77:5d:88:cf:16:76:25:0b:e8:ba:12:03:
         60:4f:70:1a:4e:1e:f7:00:c6:2d:55:9e:a7:00:57:94:73:79:
         ba:20:d3:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:27 2026 by rpki-client