Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/7B40808086A411EE90BD604AC4F9AE02.roa
File:                     7B40808086A411EE90BD604AC4F9AE02.roa (raw, json)
Hash identifier:          Z2FxJ7Xtmf1Vvq0RfsbVGtsJZ8lwsSfq+elPh6GXASs=
Subject key identifier:   C5:6B:A1:10:C8:37:7E:BA:5B:88:E6:7F:4B:4F:07:EF:71:C1:E9:71
Certificate issuer:       /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
Certificate serial:       062A
Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/7B40808086A411EE90BD604AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:52:43 +0000
ROA not before:           Sat 17 May 2025 00:13:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55330
IP address blocks:        58.147.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl
                          rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619D8, serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5
        Validity
            Not Before: May 17 00:13:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40c6b-e82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:28:db:0c:42:a1:b3:02:b4:ff:51:5f:97:
                    36:0a:0e:30:79:dd:df:2f:59:c8:66:bd:2f:e1:45:
                    91:87:66:3b:31:33:19:53:55:f3:f6:9b:c2:60:a5:
                    b4:9a:e4:c1:6d:34:d1:30:71:ef:94:aa:94:f5:85:
                    9c:b1:43:b7:33:56:7e:b7:17:d0:a6:3c:f1:df:b4:
                    8e:27:0f:41:af:cb:f6:1e:d3:c5:2a:72:f9:e1:2f:
                    6b:08:2b:e9:db:a5:a1:5c:6e:d0:5b:f4:2c:b7:16:
                    d8:35:15:c8:28:82:b8:91:32:1f:42:61:ee:86:f3:
                    85:5b:b9:d3:33:ce:57:96:d1:3d:f6:8d:79:d1:83:
                    89:56:77:40:d6:ae:13:99:e1:15:6c:65:77:54:df:
                    9b:1f:97:a5:97:58:8a:c8:53:11:e2:65:27:e2:ea:
                    b8:d8:8d:8d:78:51:27:47:ee:f5:dd:08:bf:ed:07:
                    e7:0a:bd:bf:f7:a1:83:b5:11:28:d8:95:7e:1a:52:
                    57:51:f5:e0:0b:0f:21:6b:09:5d:04:d7:de:ea:4b:
                    a3:07:ec:74:5a:af:69:3c:da:3f:8f:af:49:17:c4:
                    c1:df:1a:af:f8:64:ee:6d:24:c7:d4:fb:22:76:40:
                    e8:47:08:e0:e3:c3:79:a5:e2:c7:0d:2f:ea:13:a7:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:A1:10:C8:37:7E:BA:5B:88:E6:7F:4B:4F:07:EF:71:C1:E9:71
            X509v3 Authority Key Identifier:
                keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/7B40808086A411EE90BD604AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:cb:4d:b2:99:e2:b3:f0:64:88:0c:92:1a:f3:39:61:a0:
         b0:40:6e:5a:22:50:00:5c:8e:69:5b:19:ab:04:a1:ed:fc:59:
         45:99:aa:fc:ef:05:86:5c:70:63:e8:73:6e:6f:ef:07:a5:24:
         77:0d:5c:7e:0f:5d:2d:d9:55:57:59:84:36:2a:82:57:e5:75:
         21:b7:d9:32:00:0d:a8:7d:ff:f5:54:0f:58:96:c6:c0:99:f5:
         42:6d:1a:dd:65:5f:5f:5b:4c:7c:31:92:d3:98:46:02:ad:2d:
         ad:29:a0:32:06:8f:12:d6:a6:de:1a:8d:18:cf:e1:fe:85:ee:
         f3:6a:16:95:1d:18:33:e0:a3:f9:2a:be:15:33:8f:ec:f6:06:
         81:fe:61:cb:20:83:e5:57:2a:4b:a3:47:e6:95:f7:29:3f:b8:
         58:91:da:47:3e:df:d4:76:d5:98:72:ca:63:6d:e6:73:97:1e:
         d4:c2:cd:16:a3:83:72:77:12:53:bf:f1:0b:50:9b:ba:94:86:
         76:58:26:6e:f5:f6:0c:97:e8:f7:e2:b8:04:3c:5e:61:d0:9d:
         45:98:7b:f9:06:2b:cb:a8:b7:2c:a5:fc:ff:b0:89:25:a5:97:
         e3:6c:5a:57:f3:6e:5c:d7:02:f8:b0:c7:84:4e:29:25:bf:b9:
         e7:85:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:31 2026 by rpki-client