Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/C90675DA672111F1933C10877647A888.roa
File:                     C90675DA672111F1933C10877647A888.roa (raw, json)
Hash identifier:          0RZGC6hVoQYgatJLulmcghVndr0GLTReQ7O0SzFQxnQ=
Subject key identifier:   2D:C3:F2:7F:91:58:1B:27:F1:60:58:85:5E:73:D0:EA:2A:B5:DD:40
Certificate issuer:       /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Certificate serial:       04
Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/C90675DA672111F1933C10877647A888.roa
Signing time:             Sat 13 Jun 2026 12:27:53 +0000
ROA not before:           Sat 13 Jun 2026 12:27:53 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134732
IP address blocks:        162.4.214.0/23 maxlen: 23
                          162.4.214.0/24 maxlen: 24
                          162.4.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
                          rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
        Validity
            Not Before: Jun 13 12:27:53 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a2d4cc9-547c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:35:b0:b4:42:5e:36:50:0b:e3:3d:3f:ac:
                    12:e6:d0:fd:a3:5a:51:b0:14:7b:36:0e:1d:63:56:
                    33:13:7a:99:53:5c:39:61:b4:ac:08:e3:ef:1f:ee:
                    a2:b6:6d:1c:51:72:a3:5a:07:7e:a9:9a:44:8a:8e:
                    e2:a1:db:12:d7:3f:90:95:6e:4d:6a:35:c9:3e:ac:
                    68:ff:47:76:49:01:56:b0:70:e5:9e:d9:41:79:30:
                    d7:6b:34:88:e0:ea:f5:a1:d1:58:7a:cb:82:7f:fa:
                    1c:52:34:ce:ca:d4:0b:82:37:ee:d3:f5:63:6e:d7:
                    a7:f8:6f:23:9b:c5:4e:b1:5d:13:27:22:a1:71:fc:
                    15:90:b3:eb:b1:38:00:2d:4f:4f:81:d4:1b:b3:9a:
                    a7:67:2b:d1:8c:f5:9c:62:22:69:70:13:4c:66:22:
                    e5:1b:6a:48:47:0a:6b:58:5c:9e:89:ce:76:7a:32:
                    47:6e:a5:40:45:fb:44:25:e1:7a:9f:a4:bc:57:d7:
                    d7:fe:3b:fc:c6:94:6c:6b:46:87:b9:76:bf:b4:eb:
                    21:37:f5:17:e8:8d:3d:c6:5c:37:6b:7d:c2:17:2a:
                    11:94:f2:dc:96:d7:60:02:30:cf:94:6c:25:ce:84:
                    0f:21:91:76:a7:e7:a2:ca:1b:0e:a2:9f:2e:75:c2:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:F2:7F:91:58:1B:27:F1:60:58:85:5E:73:D0:EA:2A:B5:DD:40
            X509v3 Authority Key Identifier:
                keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/C90675DA672111F1933C10877647A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:70:33:fd:8c:c9:ed:b2:18:22:1e:53:a6:0b:cb:b5:8e:69:
         f3:77:e4:df:3d:71:a3:51:c2:ba:b7:65:57:42:b0:31:aa:17:
         50:22:3e:ad:72:ba:b1:b1:88:cd:2b:45:43:d7:0c:3f:63:01:
         ad:cb:23:1e:a1:ea:94:18:ef:d8:f6:4a:0e:c5:0f:40:30:74:
         ec:3b:76:a9:f0:f9:b5:bb:47:14:12:c1:14:85:ea:ef:dc:52:
         dc:a3:69:65:dc:6d:f3:cc:29:1e:47:cc:71:5d:f9:81:e7:e3:
         07:a6:bb:31:70:36:22:16:4c:d9:12:ea:e9:56:3c:8c:0b:25:
         c9:56:db:f0:e4:7e:c4:a9:e8:9f:15:ef:e6:1b:28:94:10:c6:
         e6:02:4f:d9:0d:8d:5c:9a:09:f3:5a:9c:ec:38:85:bc:92:89:
         a5:bd:a2:c9:54:63:09:a4:04:cf:65:73:35:79:9e:80:8d:77:
         8b:98:21:92:90:92:5d:25:9a:1b:84:22:68:ee:41:78:75:9e:
         57:57:28:0d:a2:45:cd:6c:72:50:e4:a5:10:dd:e1:d0:6c:c1:
         b4:5e:73:8a:c7:9c:bb:b5:47:94:58:18:9f:f0:ba:e9:9e:d3:
         ee:c6:38:06:d4:b4:08:ff:fc:c1:33:77:fb:3a:d3:26:d0:fd:
         8f:ac:26:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:16 2026 by rpki-client