Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/7B40808086A411EE90BD604AC4F9AE02.roa
File:                     7B40808086A411EE90BD604AC4F9AE02.roa (raw, json)
Hash identifier:          w44VixRpBqm9590hZfQTF3nSsO8G75kX9m8pT7ag21k=
Subject key identifier:   40:46:B0:D6:C8:B8:64:FE:E2:7E:F6:3A:1D:FC:37:A7:54:AC:D0:05
Certificate issuer:       /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Certificate serial:       065E
Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/7B40808086A411EE90BD604AC4F9AE02.roa
Signing time:             Sun 31 May 2026 23:28:44 +0000
ROA not before:           Sun 31 May 2026 23:28:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     55330
IP address blocks:        58.147.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl
                          rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619D8, serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
        Validity
            Not Before: May 31 23:28:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1cc42c-3b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:85:1e:ae:14:1b:56:9d:f6:e2:02:67:2e:
                    47:d7:70:3b:5a:40:b0:24:b3:e7:7e:53:76:5b:99:
                    d2:c1:9e:44:45:7a:46:7e:43:7f:7d:0f:a9:df:50:
                    6a:95:dc:f2:86:d5:3a:a4:d9:a7:5c:0e:bd:4c:96:
                    2f:25:f5:36:8f:d4:3c:f4:2f:0e:5b:b3:15:a6:b4:
                    44:f7:8b:11:10:c8:34:88:8c:59:9e:00:3a:24:1d:
                    2b:a4:db:3c:79:77:af:42:f1:3f:66:e3:82:00:b6:
                    10:8a:c4:7c:1a:c3:3b:00:a9:f3:68:ce:f5:5e:0e:
                    44:0d:bc:d7:13:71:ba:b4:26:d3:16:4e:ac:ea:f4:
                    99:5d:c4:01:49:44:31:74:13:6e:a2:4d:dd:5e:e5:
                    0d:9d:e3:f9:f0:b4:a8:a1:2e:c2:88:35:53:02:26:
                    39:ca:d4:e4:00:73:8e:ba:69:69:70:71:fc:11:ec:
                    c6:0b:ca:90:3d:99:b5:dc:72:0d:e8:1e:98:66:6d:
                    a8:ef:da:5c:7a:4e:aa:87:0e:9c:e4:59:8a:84:58:
                    17:33:91:fd:79:4f:45:e4:e7:40:a9:37:68:6d:93:
                    d1:16:9d:84:ea:15:d8:31:96:ec:d2:d0:c0:0c:f7:
                    9c:e2:4b:dc:00:08:97:91:d6:a0:67:d0:8e:d6:a1:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:46:B0:D6:C8:B8:64:FE:E2:7E:F6:3A:1D:FC:37:A7:54:AC:D0:05
            X509v3 Authority Key Identifier:
                keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/7B40808086A411EE90BD604AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:54:cc:3a:fe:27:b7:9c:cc:85:21:08:ff:f6:f0:58:45:
         d1:b6:26:b7:f9:5d:71:7c:33:a8:08:ea:49:7a:93:ae:4e:9c:
         2f:f6:65:fa:79:fd:e7:a9:d2:75:1f:59:61:d6:d4:7f:1b:fe:
         c5:2f:8a:2a:dd:d6:83:06:f7:80:2a:db:5d:77:74:11:1e:d3:
         9b:e1:b9:84:5d:8e:34:b3:61:7b:4e:19:df:ba:42:4b:fc:2e:
         d1:b4:bc:d9:07:4f:2b:bf:85:28:f6:93:98:4c:d5:b6:cb:06:
         3a:1a:cb:66:fe:29:95:b2:29:6a:97:9d:ad:ad:76:48:ab:91:
         47:3d:8a:e2:32:db:47:34:c9:17:3d:f6:28:85:84:2b:c7:e9:
         63:49:71:0c:42:b3:db:75:6c:9e:06:0c:63:b9:85:3f:87:89:
         76:70:03:e7:63:da:28:76:63:bc:65:ce:47:17:be:2a:ec:79:
         6f:69:ba:c8:43:d4:1c:c8:80:7f:8b:3b:08:81:11:74:f0:ee:
         9c:09:41:39:55:2b:d3:03:74:ee:70:11:2c:65:f0:a3:99:55:
         95:54:9a:c8:e7:ae:99:69:85:ea:04:fd:07:f5:be:22:60:a6:
         3a:ab:db:58:e8:d8:09:c7:67:a6:4b:32:50:fb:90:b6:84:47:
         e0:71:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:47 2026 by rpki-client