Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
File:                     559FC8C054F411F08DC15C53C4F9AE02.roa (raw, json)
Hash identifier:          0f4GSHCzNdKS9bURs+KpF8txlIHrkRwt0EzFhj9CMzQ=
Subject key identifier:   B9:5A:8E:4E:AC:01:57:12:F2:35:E7:6B:87:55:C4:87:5E:AA:BC:F4
Certificate issuer:       /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
Certificate serial:       8A
Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:20:13 +0000
ROA not before:           Sun 29 Jun 2025 14:21:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153789
IP address blocks:        165.101.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986
        Validity
            Not Before: Jun 29 14:21:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59c9d-cb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:a0:f2:54:53:1a:e9:03:6b:f9:4f:aa:08:
                    b3:cd:6c:d9:a8:96:94:17:94:29:90:d8:29:bf:e9:
                    ad:79:90:0c:30:f5:a1:31:c8:90:56:39:1a:8a:0a:
                    26:01:06:6d:c1:05:0b:ea:4a:92:a4:39:be:52:17:
                    4d:ab:3e:76:22:d1:83:21:f5:d0:07:08:71:a1:2d:
                    09:76:d4:cf:d6:b8:51:63:02:94:40:dd:9b:d1:f9:
                    58:f2:14:e0:9b:da:30:2f:d3:5d:39:cc:c8:07:3c:
                    30:d1:89:7b:60:51:5d:cb:62:2e:0e:ea:d8:f9:c7:
                    0c:5b:0e:7b:45:71:14:b9:50:c1:80:ae:a8:e0:56:
                    c9:5f:c2:63:f7:b2:e4:ca:86:62:cb:0e:87:4d:2c:
                    b0:b4:66:97:59:e1:68:ad:d3:7d:6a:00:05:48:9b:
                    88:93:86:b7:2b:f2:c4:08:82:f0:4c:60:a5:7d:3e:
                    13:bd:a7:d4:89:bd:26:c8:71:1f:e4:12:df:a7:3f:
                    73:83:20:f9:65:88:5a:91:15:e7:59:09:d5:28:b3:
                    d3:52:51:5c:bf:45:b3:d6:76:07:c1:2a:7d:2c:11:
                    69:f6:86:82:0e:55:b3:99:d8:20:2e:49:4a:63:e2:
                    04:1d:8b:6f:45:b6:f6:ad:43:d8:46:6d:c0:52:f5:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:8E:4E:AC:01:57:12:F2:35:E7:6B:87:55:C4:87:5E:AA:BC:F4
            X509v3 Authority Key Identifier:
                keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/559FC8C054F411F08DC15C53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:7a:ad:a8:51:7b:26:d1:4a:4d:a7:99:85:1e:6e:e3:a3:
         ab:ed:7c:80:f7:a8:f0:8b:5c:1a:55:87:81:c1:b7:26:12:db:
         8f:9e:ed:1c:e9:0a:32:57:a9:fb:48:ac:0f:db:45:68:02:80:
         d8:05:ac:6d:86:29:6e:46:fa:fb:2a:77:84:8a:78:23:75:13:
         f0:d3:0c:22:7d:ca:6a:62:7e:c1:95:b2:97:c4:8e:da:36:46:
         5c:b0:89:89:68:f3:4f:f3:38:d2:7a:0f:c8:9b:92:21:95:aa:
         c6:fe:b3:6f:82:31:7f:0c:74:b7:37:89:da:50:94:ad:c1:eb:
         d5:7c:c3:95:90:71:27:c7:b5:40:01:cd:5c:7a:55:79:31:f3:
         e1:c0:15:52:bb:e0:39:70:df:c8:11:90:2e:d4:94:b9:74:67:
         c0:5a:b0:25:54:6d:5f:c6:6f:34:1f:cb:73:d7:3f:a4:cc:68:
         00:40:d0:0d:9f:41:0c:0d:d2:81:83:77:ff:8e:94:2e:62:8a:
         0d:ce:d4:98:3e:00:61:7b:d8:f7:79:32:a1:44:f4:d4:bc:64:
         73:be:fa:e8:ef:bd:43:19:d8:10:74:28:2f:6f:30:88:76:16:
         f8:b2:f5:2a:b3:de:5a:45:3e:fa:86:0f:1c:32:e1:0d:5f:a1:
         7b:1c:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:44 2026 by rpki-client