Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/4A5161F463DA11F18803A8B98447A888.roa
File:                     4A5161F463DA11F18803A8B98447A888.roa (raw, json)
Hash identifier:          s+ETcjgKMznsV0hPLHChNZ83FbOj0Ckmfwu/mAyqAVA=
Subject key identifier:   F0:07:06:38:A1:54:AC:11:F5:08:05:E6:91:49:98:B7:A0:5C:B4:94
Certificate issuer:       /CN=A915307C/serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Certificate serial:       02
Authority key identifier: 60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/4A5161F463DA11F18803A8B98447A888.roa
Signing time:             Tue 09 Jun 2026 08:07:43 +0000
ROA not before:           Tue 09 Jun 2026 08:07:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     141433
IP address blocks:        162.4.216.0/24 maxlen: 24
                          162.4.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl
                          rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915307C, serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
        Validity
            Not Before: Jun  9 08:07:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a27c9cf-8c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:45:7a:61:dd:c9:6c:f9:dd:3c:8e:08:24:
                    aa:c8:12:08:26:f4:84:e8:c0:fa:49:f0:7d:60:ad:
                    02:48:1b:d0:40:3b:aa:75:5e:66:82:be:a2:7b:9b:
                    03:e5:3e:39:34:ae:6c:16:96:55:5e:1a:a5:82:61:
                    58:6d:35:60:e6:72:83:ea:62:8c:e4:16:05:d1:e8:
                    df:c9:50:9a:0e:bd:f4:e9:d6:3c:ed:af:b9:3d:7c:
                    e8:06:af:21:90:4b:a2:45:11:a4:b1:a6:81:1a:a7:
                    4a:42:ec:df:1b:c9:74:63:b0:a2:e8:04:89:10:1a:
                    6b:38:c4:3f:47:cd:48:89:ba:34:0e:c4:00:04:21:
                    a8:96:be:df:97:4e:9c:68:12:91:8a:5b:e9:99:1a:
                    da:ae:f5:04:6e:39:5d:37:6f:44:a0:c7:fd:9b:bb:
                    2d:c5:ad:94:79:15:e1:1a:ae:d8:d8:c0:42:4b:68:
                    66:0a:07:27:75:c5:65:72:1e:af:9c:ef:ee:06:9e:
                    9c:3c:f8:1e:81:1d:21:92:9a:3e:65:e4:ad:30:53:
                    94:27:d7:b1:eb:57:97:ac:33:a4:f1:d0:39:84:ae:
                    94:11:94:27:44:32:57:d8:75:60:c2:26:78:8e:85:
                    97:52:a5:b4:a6:4e:b3:c2:53:df:de:b1:8f:2c:af:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:07:06:38:A1:54:AC:11:F5:08:05:E6:91:49:98:B7:A0:5C:B4:94
            X509v3 Authority Key Identifier:
                keyid:60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/4A5161F463DA11F18803A8B98447A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:4d:23:76:3d:c7:76:e5:71:07:b2:77:be:0a:68:63:a3:
         9f:49:09:8d:d9:8b:b3:9c:8c:ec:02:d0:43:21:4b:57:53:71:
         e8:70:d9:73:08:e1:70:91:78:b7:9f:99:20:1a:31:05:d8:75:
         f3:61:08:ee:6a:fb:8f:cf:b6:bb:73:72:13:e1:83:bc:6a:5e:
         05:e0:2e:11:85:ab:92:1d:00:5e:6c:3d:6a:78:4e:67:9c:07:
         a4:1f:9a:52:58:e4:ed:96:91:88:3f:73:68:0f:3f:d9:22:eb:
         23:97:e7:b8:ca:37:e9:ad:60:6a:fc:dc:2a:a1:1f:8c:6e:85:
         8d:8c:d5:45:44:ad:e2:67:00:f6:a2:ed:92:43:84:52:29:c8:
         cb:6f:05:14:33:d4:bc:ce:fe:fb:91:f1:91:d2:1c:c1:75:22:
         6e:25:c0:63:96:c4:08:a9:00:f5:13:35:2a:31:cb:9a:22:14:
         bb:ef:34:58:cf:9a:fc:75:9a:41:fd:cc:b8:b3:ff:67:14:57:
         3f:bf:5b:bb:f5:76:fb:f3:56:09:f8:48:34:f6:dc:b0:ab:0c:
         b3:e6:ff:7c:0b:ef:cd:90:5e:5d:08:ae:31:a8:1b:03:de:7c:
         7a:60:8a:01:62:a3:04:fa:e4:c1:91:a2:ee:e8:cf:cd:c8:af:
         06:08:98:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:06:31 2026 by rpki-client