Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
File:                     586B5D9ED9F811E9A6874F46C4F9AE02.roa (raw, json)
Hash identifier:          7zglLDP11gzpQTB1+7hilO7iWT3HFWV4SBuiijDuHdQ=
Subject key identifier:   F9:3D:F9:22:98:84:75:25:97:55:4F:A3:01:58:E3:38:C7:85:7E:35
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       3608
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:56:25 +0000
ROA not before:           Mon 02 Feb 2026 15:11:36 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45642
IP address blocks:        58.82.178.0/24 maxlen: 24
                          218.100.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13832 (0x3608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Feb  2 15:11:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bd9-3b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:f8:9b:84:52:a4:b2:ef:ae:3c:ad:b6:e9:
                    c4:fa:e4:51:ed:c1:a0:1f:7c:60:98:ca:be:81:71:
                    e0:09:a2:ae:01:d6:4d:1e:1b:f8:35:98:82:d8:0e:
                    4e:aa:92:8f:80:a1:d3:61:21:21:c8:1b:07:c4:57:
                    b0:d1:3b:e6:8e:97:38:05:8e:b2:ae:18:40:55:01:
                    61:77:52:f7:3f:5f:92:1b:35:a7:5f:3b:6f:5b:57:
                    c7:33:0a:45:6e:28:89:7a:e2:f3:41:35:63:68:d5:
                    43:50:98:7c:cf:df:7d:0b:bf:2d:ed:f6:69:6d:54:
                    a2:f9:3e:31:ec:11:d9:a6:20:2a:88:cc:0f:b7:34:
                    d0:5b:16:31:5b:89:93:8a:a1:17:fc:99:7e:cd:a9:
                    94:ed:39:c6:f4:73:26:af:69:fc:bd:77:c3:89:be:
                    7a:67:73:ea:65:36:cb:93:6f:25:fa:9f:e7:1f:7f:
                    b6:89:11:20:b1:8f:53:98:e3:f3:a6:24:a1:bf:6f:
                    ae:75:ac:e6:55:a9:2b:a7:b9:20:5f:66:a9:1d:f3:
                    88:93:4f:60:66:b8:f5:80:2e:3f:93:80:41:27:16:
                    6d:d8:72:7f:62:02:54:2f:63:c1:77:9e:dd:bd:27:
                    52:d1:23:df:04:58:15:f3:8e:26:ad:d2:0e:73:80:
                    87:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:F9:22:98:84:75:25:97:55:4F:A3:01:58:E3:38:C7:85:7E:35
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.82.178.0/24
                  218.100.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:cf:a6:22:5b:5c:0a:84:fa:cc:03:be:1d:0b:db:10:69:
         19:33:df:91:cf:82:1e:3c:3b:81:f8:eb:94:73:1a:30:af:a8:
         83:42:36:23:3e:ce:86:ce:9a:2e:d5:6c:87:35:c8:f9:dc:fc:
         20:35:50:4c:93:09:b2:77:ca:3c:d2:e8:3a:27:2e:e9:b0:74:
         3c:1e:e4:a1:5c:4f:b3:a6:ee:23:ba:9d:53:a2:5e:df:92:c8:
         56:de:0c:33:17:8e:4a:86:d7:6b:76:6e:69:59:3f:62:a4:58:
         88:76:96:42:5c:9d:3e:dd:aa:ac:d2:ce:fc:28:d0:89:45:98:
         2a:0f:fd:da:b0:94:ca:1a:0e:ac:8f:c4:95:8d:c2:e2:86:74:
         a3:ff:d9:e8:ea:04:23:2e:ea:7e:86:79:50:68:36:2f:68:d2:
         a3:a7:4a:48:9e:e0:53:eb:a2:1f:b5:af:53:1b:04:b5:72:32:
         42:8a:b5:cf:27:c6:08:bf:f9:0c:bf:bb:a4:ed:8d:60:bb:cc:
         f4:8b:21:ad:41:22:05:27:0b:4f:6f:fe:59:30:e5:be:5f:4e:
         31:ff:bc:57:05:8c:e0:46:e9:d7:9e:0b:67:dc:10:61:2f:ed:
         80:4a:cf:90:91:c2:46:d8:2e:d2:fb:fe:5b:26:e8:be:15:e5:
         d7:13:e5:39
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5
QzhGNjU5MEQwHhcNMjYwMjAyMTUxMTM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGJkOS0zYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnn4m4RSpLLvrjyttunE+uRR7cGgH3xgmMq+gXHgCaKuAdZNHhv4NZiC2A5O
qpKPgKHTYSEhyBsHxFew0Tvmjpc4BY6yrhhAVQFhd1L3P1+SGzWnXztvW1fHMwpF
biiJeuLzQTVjaNVDUJh8z999C78t7fZpbVSi+T4x7BHZpiAqiMwPtzTQWxYxW4mT
iqEX/Jl+zamU7TnG9HMmr2n8vXfDib56Z3PqZTbLk28l+p/nH3+2iREgsY9TmOPz
piShv2+udazmVakrp7kgX2apHfOIk09gZrj1gC4/k4BBJxZt2HJ/YgJUL2PBd57d
vSdS0SPfBFgV844mrdIOc4CHswIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPk9+SKY
hHUll1VPowFY4zjHhX41MB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE
OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvNTg2QjVEOUVE
OUY4MTFFOUE2ODc0RjQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAOlKyAwQA2mRCMA0GCSqGSIb3DQEBCwUAA4IBAQCobM+mIltcCoT6
zAO+HQvbEGkZM9+Rz4IePDuB+OuUcxowr6iDQjYjPs6Gzpou1WyHNcj53PwgNVBM
kwmyd8o80ug6Jy7psHQ8HuShXE+zpu4jup1Tol7fkshW3gwzF45Khtdrdm5pWT9i
pFiIdpZCXJ0+3aqs0s78KNCJRZgqD/3asJTKGg6sj8SVjcLihnSj/9no6gQjLup+
hnlQaDYvaNKjp0pInuBT66Ifta9TGwS1cjJCirXPJ8YIv/kMv7uk7Y1gu8z0iyGt
QSIFJwtPb/5ZMOW+X04x/7xXBYzgRunXngtn3BBhL+2ASs+QkcJG2C7S+/5bJui+
FeXXE+U5
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:51 2026 by rpki-client