Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/215ADBDAC12D11ECB27B492EC4F9AE02.roa
File:                     215ADBDAC12D11ECB27B492EC4F9AE02.roa (raw, json)
Hash identifier:          goZ5bh7WX89A7SLTiCRfw6l6+X+ittOyhc0F84sYTaU=
Subject key identifier:   33:FD:88:6D:1E:F2:FE:12:66:A5:6D:B9:4D:00:F5:CE:25:B3:15:A2
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B1A
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/215ADBDAC12D11ECB27B492EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:27:42 +0000
ROA not before:           Mon 14 Jul 2025 14:50:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131162
IP address blocks:        58.97.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15130 (0x3b1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4932d-c2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:af:c6:cf:03:3f:de:68:df:18:dd:de:4e:
                    2d:3b:88:1f:7a:08:3b:83:db:94:64:b5:50:47:c1:
                    21:af:a9:82:0b:33:52:a6:3b:e5:55:80:a6:e1:b1:
                    42:44:e1:fd:53:ad:78:ac:1f:6b:74:31:28:22:71:
                    9c:95:ac:0f:32:f0:ef:00:d7:24:21:fe:8b:87:9d:
                    b3:c4:59:7e:32:1d:d6:96:2f:21:9d:34:31:ce:d1:
                    c1:c4:5f:05:8a:dc:1b:ba:ed:18:a4:36:54:23:c0:
                    12:fd:fa:90:0d:5d:5f:2e:70:17:e9:f5:15:13:e8:
                    9b:ef:34:c9:9b:fc:33:9a:ce:23:57:c7:40:36:59:
                    1d:63:a7:be:3a:4a:d7:3c:17:25:e3:26:4c:af:1f:
                    8e:71:2b:08:90:64:e2:1e:f3:e1:b9:5b:4c:c4:b8:
                    ad:09:08:4a:ea:fa:b8:99:ce:33:0b:36:b6:7b:1e:
                    f6:7e:8b:67:28:a0:99:d6:ab:1b:9f:1d:c3:f4:df:
                    b4:4d:44:cb:fa:c0:8c:1a:f7:e0:81:44:eb:13:86:
                    4a:7b:58:9d:01:f2:c7:5a:70:aa:a4:58:8d:49:26:
                    94:38:4b:a6:0d:da:b8:0f:94:54:a8:78:8a:52:15:
                    d8:36:f5:c2:c7:ca:d5:9d:dd:bb:9e:c1:f7:b9:18:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:88:6D:1E:F2:FE:12:66:A5:6D:B9:4D:00:F5:CE:25:B3:15:A2
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/215ADBDAC12D11ECB27B492EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b5:52:e6:4a:0a:18:2a:74:e0:9b:1d:1a:15:c7:5b:34:25:
         e2:eb:bf:50:b3:5f:23:c0:c8:14:4c:e8:19:47:4a:03:4a:84:
         82:71:50:c9:4a:bd:2d:8e:c5:84:99:2c:26:45:97:7d:4b:55:
         d0:22:dc:f0:9a:5a:7a:d7:3c:28:81:6e:4f:82:70:d4:66:93:
         aa:4e:72:26:da:80:e5:72:81:ed:5a:8e:49:a2:af:ad:b6:7d:
         b7:82:f1:f2:86:49:81:d6:95:86:8a:5f:b6:db:66:27:b5:d4:
         cf:f3:9b:c0:34:80:36:71:0c:53:37:90:c0:5a:33:bd:a0:49:
         b0:4e:72:df:f2:7a:b9:ca:6a:0f:90:f7:ed:2e:7a:16:58:6a:
         45:93:8d:95:68:bb:f7:42:60:92:c8:5e:d3:68:ef:8a:3d:ed:
         8d:44:9d:2d:35:a0:67:be:ab:88:87:a3:b3:6e:f3:69:b9:5d:
         4c:fb:a6:e9:17:d2:49:88:2e:51:13:30:3b:f1:80:a9:a6:91:
         6f:1a:3f:16:20:2f:7e:82:a7:18:45:3d:a0:88:eb:41:fc:6e:
         b3:0d:39:19:b2:08:21:29:af:56:e0:8e:9d:83:fa:ec:d6:37:
         d9:4d:e1:af:ac:63:1b:bc:da:f2:de:31:da:64:41:d3:be:d0:
         6b:75:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:55 2026 by rpki-client