Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa
File:                     58EE9E1227E311F1A1CB4281AA833773.roa (raw, json)
Hash identifier:          ke/LfOJ0ZKhmHw2EzTdXLtCmQ4LbPHYhXcvWovxzDWQ=
Subject key identifier:   F5:13:93:4B:91:65:23:60:20:08:16:91:9E:1B:AB:A4:0F:74:0A:60
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       05
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa
Signing time:             Wed 25 Mar 2026 00:47:38 +0000
ROA not before:           Wed 25 Mar 2026 00:47:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38809
IP address blocks:        162.145.128.0/17 maxlen: 17
                          162.145.252.0/22 maxlen: 22
                          164.97.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: Mar 25 00:47:38 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69c330aa-190d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:ba:77:5f:8f:52:21:35:c7:15:f7:40:aa:
                    3b:12:f0:25:a7:f4:19:6d:58:4a:8e:5e:6d:e0:68:
                    19:85:0b:2a:cc:da:4e:1c:68:88:23:c3:ba:0c:24:
                    e5:25:b0:50:ff:92:1d:a1:69:4a:56:8c:fa:43:45:
                    a6:07:d0:ce:60:74:da:4f:6c:4e:e2:2c:66:05:c4:
                    ff:d2:5d:87:44:b5:1d:0d:2f:66:c2:94:c3:50:3f:
                    97:48:30:76:63:07:b6:36:25:cf:9b:eb:58:7f:61:
                    61:52:68:5a:48:98:17:38:c4:20:38:9c:86:57:83:
                    6e:46:38:89:82:ef:9c:f3:61:f6:bb:b9:c3:11:3c:
                    da:72:6f:4e:c4:1b:1a:17:5e:84:34:97:37:15:c0:
                    87:a1:b7:65:71:15:af:32:49:e2:06:c3:a0:93:85:
                    db:cf:ab:3f:0c:95:84:de:45:8a:85:d1:80:cb:44:
                    ce:47:f2:62:d9:59:a7:c1:12:ca:61:31:0f:c2:59:
                    19:33:71:9e:7e:3b:35:e9:21:24:58:86:b6:78:fd:
                    cc:11:22:16:91:ea:06:29:0d:94:d3:89:7b:b9:11:
                    df:3f:7f:d3:a9:1a:c1:a2:c8:a9:28:c6:44:45:f8:
                    86:32:ab:f0:ee:3d:66:ea:4c:76:7d:0b:92:53:48:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:13:93:4B:91:65:23:60:20:08:16:91:9E:1B:AB:A4:0F:74:0A:60
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/58EE9E1227E311F1A1CB4281AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.145.128.0/17
                  164.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:db:c6:21:f5:22:da:8b:fc:8a:44:10:1f:75:8e:f6:75:5b:
         03:75:d1:5a:ec:69:aa:7f:6c:05:a2:66:ca:bf:98:69:c6:81:
         cd:1b:91:44:36:9c:8c:91:84:29:57:d4:e2:cc:c6:69:50:7b:
         2b:dd:e2:59:9c:8f:d3:c1:06:39:4b:b7:66:6a:96:92:e5:7a:
         24:ce:57:18:c8:a6:b5:5a:ba:19:fd:5c:9e:f7:86:22:c8:53:
         2d:b7:4d:47:58:53:a6:2e:0e:94:95:92:89:68:36:3b:e6:73:
         1b:84:ce:6f:cc:0b:3c:4d:a4:4e:9d:a6:fa:86:c5:35:fe:79:
         7e:97:8a:c6:5c:79:73:d5:b8:bd:08:1f:fe:f7:93:0b:73:42:
         f5:8b:ab:14:82:7d:2b:07:cf:6f:fb:a8:f8:69:8c:ec:94:bd:
         3f:02:2f:cb:0d:69:99:d2:5d:ae:82:9d:d9:be:4b:92:73:f5:
         b9:6a:e0:0c:17:55:ba:4c:93:23:f4:54:82:96:5c:4c:d6:24:
         77:92:a1:29:2c:14:5b:0d:68:8b:ca:3d:5c:1e:02:f1:4e:33:
         ed:42:dc:a4:9d:f6:4b:18:b9:c9:dc:35:59:06:d1:87:9d:08:
         41:72:74:6e:6e:38:c6:b0:5d:4d:f0:9c:cc:95:29:1c:00:7c:
         d7:08:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:17:19 2026 by rpki-client