Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
File:                     5596B61C1E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          K0bG+l0VThBINHpK68G3b34XGccmX/ohMt6QvzRvCgE=
Subject key identifier:   FD:03:C6:9E:87:DB:0A:F2:58:8B:42:22:D6:28:0F:39:DB:C7:FB:93
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B74
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:00 +0000
ROA not before:           Mon 14 Jul 2025 14:51:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     55916
IP address blocks:        58.97.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15220 (0x3b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:31 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4937c-04e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:f9:12:29:bf:dd:2e:39:c3:cd:a1:dd:ab:
                    1d:b8:12:58:d0:69:d7:c6:bf:e9:9f:60:c1:fd:55:
                    45:41:31:45:96:af:33:22:11:04:7d:31:b2:9e:63:
                    84:18:ea:4d:44:34:56:54:8a:ac:18:0a:ac:24:1e:
                    9d:72:68:5f:27:9e:7c:a1:37:37:b9:0f:69:fc:de:
                    90:a2:c4:92:4e:eb:bf:45:9f:58:8f:b1:9f:01:c9:
                    6c:42:68:05:bc:de:86:7c:0d:ac:46:46:1c:34:b4:
                    c1:08:22:d3:a0:ec:6c:ff:f5:9f:ac:51:6a:9d:b2:
                    8d:1a:f4:97:1f:54:e4:de:95:5b:35:c4:eb:0e:5a:
                    cd:66:bc:7d:11:b4:7d:8b:10:1a:7a:80:0e:62:02:
                    d8:18:08:d6:c4:92:b7:8e:d5:46:09:5d:b0:88:54:
                    15:07:21:7d:cb:3a:2a:ed:fb:7c:55:be:d1:63:a2:
                    13:48:3f:87:89:ab:c0:c9:02:5e:81:0e:15:d3:dc:
                    9c:da:aa:cb:26:32:86:a1:ce:8c:08:5d:df:0a:b3:
                    0a:0a:48:2d:5e:6d:c5:7e:48:25:55:4a:39:4b:f0:
                    cd:bf:d7:52:3f:3a:ab:9f:bf:48:7d:95:db:2e:9d:
                    a8:25:08:29:67:97:6f:04:60:d3:8d:1d:f7:e4:a6:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:C6:9E:87:DB:0A:F2:58:8B:42:22:D6:28:0F:39:DB:C7:FB:93
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5596B61C1E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:8c:f2:f0:1d:56:13:b8:61:d0:7b:a6:35:81:0c:56:19:
         2e:01:29:90:e9:ca:2b:81:16:00:22:de:e1:52:f1:38:87:e2:
         15:5d:65:66:3f:65:b0:ea:1a:62:f7:d1:1a:76:d9:96:0d:7a:
         96:6e:dd:ef:d5:2c:fa:b9:d5:a4:15:ef:bc:82:06:7c:72:ec:
         67:43:de:20:c4:a6:96:b6:46:9b:f9:28:47:f6:25:48:13:23:
         32:c3:ca:d8:c0:f1:11:8c:73:48:5f:3f:16:bf:ca:40:17:63:
         f0:1a:a4:67:8b:1c:e1:e4:d7:8d:54:f9:62:2e:c0:a0:f5:9e:
         5e:d5:c5:ab:c9:37:1e:3b:34:85:bc:57:19:86:51:f5:3f:92:
         b3:d5:65:4c:c1:53:75:0a:02:db:81:e6:ab:76:f6:57:ad:c7:
         62:4c:f6:f0:59:ac:6e:e8:dd:d7:eb:ed:d0:9b:da:d8:6f:cd:
         4a:63:3d:1e:26:e9:13:d7:8e:2b:22:72:4a:20:0e:dd:7c:d6:
         f5:52:37:ae:06:e6:1b:a6:b4:be:ab:d8:c2:f4:e4:d4:5e:75:
         a4:b7:7a:b6:e1:ec:6f:16:f4:4d:a7:65:9c:f2:bd:55:b4:44:
         cb:df:26:bf:64:a1:35:f3:6f:9e:7e:22:ad:05:74:5a:97:a3:
         be:a9:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:02 2026 by rpki-client