Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/DA0D812299DD11F1A687E2994011F970.roa
File:                     DA0D812299DD11F1A687E2994011F970.roa (raw, json)
Hash identifier:          cqbbpaaJnrNP22rsDFsjbMqGdC/b8rWtCraBg5tgIBM=
Subject key identifier:   1E:8C:68:5D:C7:19:82:C6:BD:10:F2:E1:E1:E9:82:A8:E3:59:EC:42
Certificate issuer:       /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial:       67
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/DA0D812299DD11F1A687E2994011F970.roa
Signing time:             Mon 17 Aug 2026 01:49:16 +0000
ROA not before:           Mon 17 Aug 2026 01:49:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        58.97.148.0/24 maxlen: 24
                          58.97.150.0/24 maxlen: 24
                          58.97.151.0/24 maxlen: 24
                          58.97.152.0/24 maxlen: 24
                          58.97.153.0/24 maxlen: 24
                          58.97.154.0/24 maxlen: 24
                          202.86.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
        Validity
            Not Before: Aug 17 01:49:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a82689c-fd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:71:33:c3:e6:d8:4b:33:4e:58:ba:1f:fe:
                    ad:77:cc:83:51:7e:a2:87:8d:82:5e:5a:86:43:19:
                    5d:f4:0c:23:1e:dd:f4:e1:6b:a3:ef:44:68:59:c7:
                    29:15:c9:bd:7d:36:c7:88:7e:ca:3a:b1:b5:f5:cf:
                    6d:8c:c2:57:6b:32:be:ad:e9:01:61:d7:da:3a:90:
                    47:7c:c5:56:91:86:c9:88:66:3d:09:4c:d2:a7:ad:
                    76:50:85:ae:f8:ea:25:9d:12:8c:d1:73:7f:c3:10:
                    c4:e3:a1:4d:ca:a8:ec:1e:86:5a:d1:b6:f2:f0:5d:
                    d0:6d:c2:c9:60:2e:ea:00:d1:9b:e8:20:24:f3:66:
                    54:d8:06:8d:96:ce:c9:70:48:04:bf:b8:0f:a7:9d:
                    95:79:d7:bd:70:e2:8f:c6:63:61:9c:14:17:42:2c:
                    af:cd:e3:61:cf:88:70:af:8e:33:cc:1f:83:be:79:
                    45:cf:6b:41:29:e3:8d:c6:8e:11:95:92:eb:15:f1:
                    f1:72:4f:37:1e:11:05:27:b2:fd:5e:69:a3:bb:88:
                    3f:e8:e9:81:b7:fd:25:84:bc:fe:ad:5c:e1:c6:2c:
                    f5:7b:c7:82:e3:8c:23:53:67:0f:8d:c0:89:c7:99:
                    80:1d:28:9a:29:2c:8f:ec:62:ee:15:b0:c7:77:49:
                    99:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8C:68:5D:C7:19:82:C6:BD:10:F2:E1:E1:E9:82:A8:E3:59:EC:42
            X509v3 Authority Key Identifier:
                keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/DA0D812299DD11F1A687E2994011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.148.0/24
                  58.97.150.0-58.97.154.255
                  202.86.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:62:7d:22:b5:66:1d:e7:b0:5b:7a:77:cb:b5:66:24:5f:
         db:16:9e:d5:05:d8:4d:9d:85:74:e0:b3:0b:a7:48:9b:d9:aa:
         f9:5f:4b:33:b0:04:74:a8:23:0b:a1:80:f5:90:1a:c7:26:73:
         74:96:05:ea:da:74:4f:c8:ee:52:65:2d:55:68:66:8a:3f:a3:
         73:75:45:b5:fc:be:0a:b9:0d:9c:e3:43:37:41:34:f6:fe:30:
         07:b1:0e:60:77:61:6d:97:67:b3:bb:d8:dc:58:7e:fb:3d:5f:
         9c:00:c4:62:99:f6:13:2d:b6:29:b0:4b:57:2b:57:0a:4e:95:
         c8:b0:15:b8:7a:4f:d8:27:bb:5f:d8:75:71:6c:27:7f:bb:97:
         a9:be:d0:2b:be:20:25:4f:94:52:f3:af:f7:2c:fe:45:f6:0d:
         ed:47:3d:30:21:be:55:7b:d7:94:35:50:61:a6:f9:4b:35:c5:
         6a:bb:95:0a:d3:1d:06:f7:82:44:bc:7e:b0:89:40:0e:18:4f:
         2a:f5:ca:30:32:9d:55:af:a6:49:ad:a7:a9:c7:42:31:a2:25:
         63:9c:3d:63:12:e1:1f:da:c5:37:bc:0c:9a:d8:73:08:7f:ec:
         7e:73:df:bb:7c:96:6d:6a:0a:79:46:9e:80:22:5f:3d:e0:45:
         d7:a6:5e:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUMyRTExMC8GA1UEBRMoNDBDODU1OTAwRUJFQjREREVFMTE5QzgwOEU0NTlBQUZE
Rjc1QjU4NDAeFw0yNjA4MTcwMTQ5MTZaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODI2ODljLWZkNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVtHEzw+bYSzNOWLof/q13zINRfqKHjYJeWoZDGV30DCMe3fTha6PvRGhZxykV
yb19NseIfso6sbX1z22MwldrMr6t6QFh19o6kEd8xVaRhsmIZj0JTNKnrXZQha74
6iWdEozRc3/DEMTjoU3KqOwehlrRtvLwXdBtwslgLuoA0ZvoICTzZlTYBo2Wzslw
SAS/uA+nnZV5171w4o/GY2GcFBdCLK/N42HPiHCvjjPMH4O+eUXPa0Ep443GjhGV
kusV8fFyTzceEQUnsv1eaaO7iD/o6YG3/SWEvP6tXOHGLPV7x4LjjCNTZw+NwInH
mYAdKJopLI/sYu4VsMd3SZlpAgMBAAGjggJ0MIICcDAdBgNVHQ4EFgQUHoxoXccZ
gsa9EPLh4emCqONZ7EIwHwYDVR0jBBgwFoAUQMhVkA6+tN3uEZyAjkWar991tYQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxQzJFL0E0NDg0N0I4MjRE
ODExRjE5NzFGRTEwNEFDODMzNzczL1FNaFZrQTYtdE4zdUVaeUFqa1dhcjk5MXRZ
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUU1oVmtBNi10TjN1RVp5QWprV2FyOTkxdFlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUMyRS9BNDQ4NDdCODI0RDgxMUYxOTcxRkUxMDRBQzgzMzc3My9EQTBEODEyMjk5
REQxMUYxQTY4N0UyOTk0MDExRjk3MC5yb2EwMwYIKwYBBQUHAQcBAf8EJDAiMCAE
AgABMBoDBAA6YZQwDAMEATphlgMEADphmgMEA8pWGDANBgkqhkiG9w0BAQsFAAOC
AQEAjH5ifSK1Zh3nsFt6d8u1ZiRf2xae1QXYTZ2FdOCzC6dIm9mq+V9LM7AEdKgj
C6GA9ZAaxyZzdJYF6tp0T8juUmUtVWhmij+jc3VFtfy+CrkNnONDN0E09v4wB7EO
YHdhbZdns7vY3Fh++z1fnADEYpn2Ey22KbBLVytXCk6VyLAVuHpP2Ce7X9h1cWwn
f7uXqb7QK74gJU+UUvOv9yz+RfYN7Uc9MCG+VXvXlDVQYab5SzXFaruVCtMdBveC
RLx+sIlADhhPKvXKMDKdVa+mSa2nqcdCMaIlY5w9YxLhH9rFN7wMmthzCH/sfnPf
u3yWbWoKeUaegCJfPeBF16Zexw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:09:23 2026 by rpki-client