Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/014CA83A648211F197D1B1707D47A888.roa
File:                     014CA83A648211F197D1B1707D47A888.roa (raw, json)
Hash identifier:          z4wusRhaMQWAqUx9v+XVNHfPfifevbWFopoJNLme36Y=
Subject key identifier:   D0:76:D2:EC:E5:BC:C6:CD:89:B9:FB:77:16:55:4E:BF:60:8B:83:09
Certificate issuer:       /CN=A918B16C/serialNumber=4967B1EBE3C972734430FED23A6350D1D482A02D
Certificate serial:       0C
Authority key identifier: 49:67:B1:EB:E3:C9:72:73:44:30:FE:D2:3A:63:50:D1:D4:82:A0:2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/014CA83A648211F197D1B1707D47A888.roa
Signing time:             Wed 10 Jun 2026 06:53:16 +0000
ROA not before:           Wed 10 Jun 2026 06:53:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150001
IP address blocks:        162.4.228.0/23 maxlen: 23
                          162.4.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=4967B1EBE3C972734430FED23A6350D1D482A02D
        Validity
            Not Before: Jun 10 06:53:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a2909dc-870f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:7a:14:50:0c:d3:8c:d8:20:1f:fa:69:57:
                    e4:b8:23:ab:76:10:a8:88:be:11:4a:2d:87:6a:db:
                    14:24:75:c3:5f:67:95:3f:b9:8f:27:57:95:65:52:
                    c9:88:e3:c1:6c:db:97:b5:54:49:cc:b9:c3:8e:5c:
                    77:d9:74:e0:70:db:c6:a2:78:53:85:6f:4e:ff:62:
                    9b:0a:72:7d:10:ed:d8:34:b9:85:75:6a:89:b1:3d:
                    87:a4:0c:d3:ff:0d:2a:63:ab:ee:ec:ee:bb:6d:fb:
                    ec:56:71:20:87:14:03:96:15:be:dc:d6:18:93:09:
                    58:5c:58:4c:9a:62:22:7e:39:a1:d9:3a:6e:eb:c0:
                    ef:d2:d1:c4:42:a9:f6:79:96:52:9c:89:34:42:70:
                    b3:ec:d3:c1:92:ec:43:21:29:38:95:56:5b:e9:ae:
                    00:19:f2:d7:36:84:39:5f:cc:80:ad:0e:3b:52:49:
                    83:8c:0a:83:f7:f4:36:ab:a5:21:f3:dd:43:18:0b:
                    ef:cf:79:f9:b0:be:7d:c6:99:c7:d2:6c:6f:e6:d7:
                    b6:e4:aa:c5:f0:af:a6:34:eb:e4:75:7e:50:76:eb:
                    97:88:1e:30:59:0c:db:5a:5c:32:89:b3:51:4d:11:
                    e3:ac:3a:86:b7:f3:28:4d:bb:3d:e4:ee:98:e8:1f:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:76:D2:EC:E5:BC:C6:CD:89:B9:FB:77:16:55:4E:BF:60:8B:83:09
            X509v3 Authority Key Identifier:
                keyid:49:67:B1:EB:E3:C9:72:73:44:30:FE:D2:3A:63:50:D1:D4:82:A0:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/014CA83A648211F197D1B1707D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:9f:af:cb:21:0c:82:79:d6:ec:48:13:b7:82:98:b9:68:
         8b:a5:01:74:13:6c:16:bf:36:81:6f:b5:59:5a:9a:01:58:18:
         b8:8d:95:ba:a8:b0:15:08:03:63:7d:7a:1a:5b:fd:fe:c9:8b:
         f2:d9:93:c8:04:a2:8b:8d:8d:ab:9b:bf:c5:b2:dc:75:72:db:
         36:55:d7:0d:55:2e:3d:76:5e:1f:2a:71:98:f5:dd:5a:e8:be:
         8f:ac:9a:5d:87:87:ab:d1:d2:78:cd:c7:e6:aa:c2:3c:7a:9e:
         4e:50:b7:41:94:55:7d:c0:30:21:15:ee:37:41:52:28:1e:5e:
         00:e6:73:a7:c3:a9:f1:21:a8:9a:0b:49:53:93:61:93:08:bb:
         83:07:1f:53:e1:83:75:3a:79:0a:80:ad:66:48:80:bf:0e:92:
         92:ce:ab:42:f2:57:15:a7:50:2b:9a:5e:ce:d1:37:38:93:1d:
         e8:5a:ea:31:fc:90:e0:24:4b:a8:65:3a:c4:30:3f:ac:4e:a4:
         4b:b3:20:51:52:fd:0d:b4:6b:e5:d8:6c:66:dd:78:a4:07:d8:
         54:67:86:f7:61:dd:31:84:cb:79:4a:d4:d8:63:1f:d5:ce:64:
         6c:80:a7:c5:3c:01:8d:fa:11:3d:bb:65:73:6a:cc:d0:28:bb:
         dc:d7:5d:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:27:09 2026 by rpki-client