Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa
File:                     4B5400D81E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          s+QzSsU7e/S9Bzd19SmA3QKc0EXNLbIq9QYecgYLDkM=
Subject key identifier:   3D:74:04:EA:C2:A1:DE:D3:05:8E:3E:1C:A0:9F:26:E2:51:63:FF:07
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B5C
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:39 +0000
ROA not before:           Mon 14 Jul 2025 14:51:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38599
IP address blocks:        58.97.39.0/24 maxlen: 24
                          61.91.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15196 (0x3b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49367-07b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:44:2f:ba:c2:80:2a:b6:e6:b1:73:ba:33:
                    6d:82:0f:8c:4b:29:df:e9:3a:67:48:07:15:86:52:
                    5a:fe:07:9c:3c:58:1c:6a:d5:13:f7:0a:76:3c:90:
                    31:9f:e0:0e:3b:e2:6c:c9:ed:8d:5e:4d:ca:8d:0f:
                    8b:8b:19:2a:0c:71:19:d6:9f:1e:1e:92:10:1e:67:
                    af:fc:95:84:28:a0:6b:8a:23:04:67:aa:75:fc:dd:
                    81:d0:86:61:d8:6f:96:67:34:9c:01:6a:dc:14:2a:
                    85:95:ad:22:b3:49:34:ea:15:63:f8:49:bd:51:0e:
                    e8:91:23:b9:86:59:5a:e7:cb:ed:ba:03:2c:bf:b3:
                    ed:61:f7:18:e1:aa:cd:33:81:86:ca:55:3d:da:2f:
                    46:19:12:52:96:b1:e0:71:c9:d7:ef:90:e4:ae:10:
                    85:44:1d:34:4e:75:e7:e0:f3:f3:ec:52:cb:e9:5e:
                    e4:96:ce:eb:78:67:42:45:09:fc:8a:51:45:00:7d:
                    05:87:e5:52:e7:45:14:a3:d7:d5:7b:fb:c6:7a:aa:
                    84:99:c2:ae:6f:65:45:3a:aa:b4:61:3d:b4:ce:e7:
                    07:32:92:cf:79:49:95:0c:d8:06:c0:6c:a7:9a:fd:
                    68:a5:6a:25:c6:78:18:f7:41:b8:14:76:da:fa:19:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:74:04:EA:C2:A1:DE:D3:05:8E:3E:1C:A0:9F:26:E2:51:63:FF:07
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4B5400D81E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.39.0/24
                  61.91.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:57:e6:6d:6c:59:64:93:6f:65:5a:6b:95:22:29:f8:0e:fa:
         98:4f:0e:56:fe:11:2f:a9:a5:b7:a2:ce:6c:ea:b5:80:71:cc:
         2e:be:96:b0:a8:17:7b:6b:c3:c9:51:e3:ad:42:97:07:d5:8f:
         11:eb:4c:b1:e2:99:dd:2e:47:a2:c5:46:72:ea:35:7e:a3:7d:
         bd:55:fd:0c:c1:6a:8c:77:d3:dd:04:ca:48:31:17:89:cb:1b:
         b9:c1:e2:1c:d0:6f:77:e5:a3:04:e7:15:47:3a:cf:fe:eb:b5:
         ad:18:92:7f:1c:41:ea:0b:b6:11:f6:b1:a3:91:50:3e:9e:13:
         75:a0:55:eb:94:39:23:60:8c:96:0e:55:0a:6b:74:5d:a8:83:
         71:2f:f2:b5:c8:8c:9e:5d:65:7f:b9:0c:a1:ab:a4:e0:ca:92:
         58:ac:dd:2a:cd:1f:1f:b9:71:b7:af:79:c3:b0:a5:12:2b:e1:
         50:c3:b9:a5:07:74:f5:2c:a5:e2:de:a7:8d:57:b5:c8:dc:d6:
         65:f0:03:f5:d0:be:8d:55:2f:cc:97:c2:d4:52:27:c4:5f:70:
         ef:a8:57:db:78:90:cf:e8:f3:8f:eb:85:0c:78:1f:30:92:32:
         ae:2d:bb:d1:cd:60:0f:1d:d2:50:4a:54:2c:c0:a7:9f:03:dd:
         08:53:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:02 2026 by rpki-client