Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa
File:                     58EE9E1227E311F1A1CB4281AA833773.roa (raw, json)
Hash identifier:          WGdpagiMRLgP7fy+S61dSD4HqoS5W6QPvfvY0pABfdI=
Subject key identifier:   66:9C:A6:28:AF:30:11:8E:79:8B:CF:3E:25:61:D6:0C:9F:0A:D5:94
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       14
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa
Signing time:             Tue 14 Apr 2026 06:50:21 +0000
ROA not before:           Tue 14 Apr 2026 06:50:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38809
IP address blocks:        162.145.0.0/17 maxlen: 22
                          162.145.128.0/17 maxlen: 17
                          162.145.252.0/22 maxlen: 22
                          164.97.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: Apr 14 06:50:21 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69dde3ad-b50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:5a:5b:af:d4:4d:51:00:c6:ca:17:f3:9a:
                    7e:5c:d7:f7:00:3c:50:70:d2:35:4b:fa:fc:78:a7:
                    2b:14:dc:17:19:8f:41:10:00:7c:de:f2:7d:80:f4:
                    89:85:92:7e:68:45:40:50:05:19:3f:be:62:de:14:
                    85:ce:e8:d0:b7:38:9f:2d:8b:0f:6d:1d:44:70:b0:
                    8b:07:82:5e:a9:bf:94:8c:6e:2b:ef:aa:81:a0:7d:
                    60:af:c2:62:e4:81:68:cc:b3:a8:ad:c6:54:b3:78:
                    4c:24:70:9f:89:f2:6b:b1:07:df:b1:5e:18:99:af:
                    c0:03:8e:77:ed:e0:50:0b:9d:d5:0f:63:fa:23:ad:
                    fc:0f:1c:b6:f4:49:68:6f:8c:99:52:bb:1c:88:f4:
                    73:02:5b:a2:87:2c:57:a8:82:d6:25:1d:01:ed:a0:
                    91:ab:f7:8b:4e:84:f0:ba:df:8c:84:66:20:b0:dd:
                    26:88:27:b4:ff:2d:06:46:67:cd:7f:64:f7:89:62:
                    9f:d5:26:6f:d9:b5:c3:7b:16:67:9a:cd:1a:7b:40:
                    11:00:67:7d:53:a2:b8:1c:08:61:62:e0:44:c2:3f:
                    22:85:5f:e2:97:22:37:49:0f:e5:7b:e9:f6:36:4a:
                    6c:7b:b9:e2:5d:c1:28:9c:53:19:da:ee:ca:62:5a:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9C:A6:28:AF:30:11:8E:79:8B:CF:3E:25:61:D6:0C:9F:0A:D5:94
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.145.0.0/16
                  164.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:e3:5d:0f:3b:2f:45:aa:07:6f:6f:44:c1:83:39:ec:d1:ee:
         ed:2b:ff:cd:83:22:5e:e8:fa:87:32:53:15:bd:a3:a7:38:3d:
         8d:ce:b9:20:d6:da:13:76:9d:7b:70:53:12:68:40:d6:95:7e:
         a1:a6:24:0b:2c:57:f4:ad:2d:1a:53:4b:13:81:8b:e6:ea:4e:
         6d:e9:51:63:4e:45:ae:2c:76:13:95:b3:d8:f9:31:ab:4f:0d:
         70:2e:6d:78:67:e8:86:15:45:7d:9a:23:21:c1:51:15:64:ee:
         74:6b:d4:11:0d:4a:9c:ef:98:31:ea:9f:27:fb:94:95:f9:6e:
         b9:ea:af:d5:3f:92:93:94:a4:bf:e6:19:cf:ce:06:a9:ca:d9:
         d0:db:58:05:68:e6:5d:f7:0f:8d:a7:d2:d8:c3:55:bb:15:82:
         e4:47:8c:54:02:3b:3e:80:86:b4:66:d1:d9:f9:15:17:e0:5f:
         52:67:dc:c4:c3:5a:4b:15:68:8c:c7:fe:b5:17:4b:bf:c5:eb:
         5e:b4:ed:a8:82:36:c6:99:ee:04:79:37:d0:c6:3b:02:08:4b:
         8c:b9:b2:59:c7:a7:ab:fe:4d:2d:a6:c0:49:13:48:7b:cd:c6:
         ea:44:59:30:df:78:24:cc:f7:71:6f:2d:83:12:b8:a5:f0:f2:
         fc:d7:b9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:15 2026 by rpki-client