Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/39651CE6A6C711E9933CF621C4F9AE02.roa
File:                     39651CE6A6C711E9933CF621C4F9AE02.roa (raw, json)
Hash identifier:          0S/ooPJ2C5kXa2YUe26MqZS0wv4CYq55uodN29fbqkM=
Subject key identifier:   5E:42:3D:44:03:55:1E:9F:83:ED:98:86:D0:D6:0C:AF:F4:37:04:81
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       34D6
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/39651CE6A6C711E9933CF621C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 14:50:27 +0000
ROA not before:           Wed 02 Jul 2025 14:50:27 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58884
IP address blocks:        58.97.162.0/24 maxlen: 24
                          202.57.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13526 (0x34d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE, serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Jul  2 14:50:27 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68654733-5bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:9a:1f:6f:76:40:09:5c:9a:d9:a5:fb:c1:
                    fc:cd:c4:2a:9e:95:06:6a:2e:e5:b8:f6:2c:e7:f4:
                    90:93:44:32:02:10:15:73:34:93:ff:d1:f3:f5:b8:
                    c2:0c:12:3c:e4:d0:bb:0d:96:ee:f8:8b:6c:4b:a8:
                    5d:42:ef:19:dd:d6:1f:c8:4d:e0:4e:84:d2:bb:65:
                    29:74:d4:94:de:9a:2d:ee:3f:dc:ae:e4:62:9f:6f:
                    da:04:67:4d:58:71:ff:55:93:18:76:77:bb:07:49:
                    12:57:0e:72:cd:d4:81:90:a3:7d:45:fa:a8:29:7f:
                    04:eb:3c:e9:8b:dc:ec:b9:88:df:23:ba:bb:f7:47:
                    00:55:d1:d5:e5:fc:e9:0e:7a:87:17:58:0c:f4:0f:
                    eb:f6:54:c5:2e:51:5b:03:c0:6a:77:5f:dd:4f:ff:
                    e5:46:84:1b:4f:df:1b:c5:63:7c:99:9b:18:73:37:
                    08:ab:b9:09:dd:07:7d:df:fd:e3:e7:96:ec:5f:cc:
                    35:7f:8a:80:e9:87:ff:d7:d0:62:be:51:0b:3e:43:
                    8f:09:ee:71:fa:d1:26:21:c4:1f:ae:8b:c0:1d:71:
                    08:2d:08:f5:1c:65:f9:d7:d2:98:22:58:c7:77:5f:
                    a0:37:ee:27:b8:19:e7:b2:bb:00:ab:b6:ff:b8:a2:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:3D:44:03:55:1E:9F:83:ED:98:86:D0:D6:0C:AF:F4:37:04:81
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/39651CE6A6C711E9933CF621C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.162.0/24
                  202.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:9b:f1:ef:7d:a3:3d:14:a1:ea:f5:e0:53:4a:6d:9a:02:02:
         58:31:c9:c4:d9:13:db:ae:6d:e5:c9:8a:dc:98:7f:9f:06:d6:
         ca:80:86:67:3a:db:d2:17:ae:18:00:67:e7:b4:e1:e3:03:61:
         aa:15:28:b2:03:dd:64:7a:dc:11:7c:d3:d6:b6:fd:b9:7b:ee:
         f9:45:aa:b4:2f:8e:3b:1b:96:84:b4:0b:83:9e:1f:5c:1e:dd:
         1e:fc:ac:f6:06:c7:aa:af:83:f0:71:e3:be:43:1d:e3:fa:13:
         95:dd:d9:dd:b3:f8:5e:04:99:80:01:34:0d:ca:d4:ca:88:50:
         0f:ea:f1:eb:d7:eb:d2:fb:9c:2d:e1:ad:48:34:5a:90:18:8d:
         ba:29:fc:05:3c:e0:90:3c:6a:a2:ca:7c:89:87:fe:27:dd:9c:
         8b:ad:c4:f5:6d:15:95:23:3a:40:a1:07:92:e1:94:16:98:e2:
         bc:6d:6c:96:c5:a0:ca:90:2b:28:31:ed:5a:19:2d:95:39:20:
         41:56:aa:26:0c:bc:12:de:78:08:e0:5b:d8:6d:d0:2e:1a:d0:
         2f:bc:15:26:08:eb:8a:9a:d7:8c:18:12:84:6b:64:d1:0c:16:
         fe:ab:77:28:a7:15:5a:62:18:79:41:86:4f:20:3b:40:6e:35:
         c4:00:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:38:21 2025 by rpki-client