Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/EEF2771E648111F1BC2B05637D47A888.roa
File:                     EEF2771E648111F1BC2B05637D47A888.roa (raw, json)
Hash identifier:          w7gxyvW7+/g3lO/7yBFTJMrjccR6hJAbOB6ohVS/a2g=
Subject key identifier:   1C:32:E1:DE:E0:17:5C:69:84:B5:B3:DD:C6:AE:7C:88:61:DD:00:E5
Certificate issuer:       /CN=A918B16C/serialNumber=4967B1EBE3C972734430FED23A6350D1D482A02D
Certificate serial:       08
Authority key identifier: 49:67:B1:EB:E3:C9:72:73:44:30:FE:D2:3A:63:50:D1:D4:82:A0:2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/EEF2771E648111F1BC2B05637D47A888.roa
Signing time:             Wed 10 Jun 2026 04:07:45 +0000
ROA not before:           Wed 10 Jun 2026 04:07:45 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154708
IP address blocks:        162.4.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=4967B1EBE3C972734430FED23A6350D1D482A02D
        Validity
            Not Before: Jun 10 04:07:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a28e311-9f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:b8:d5:ff:39:44:9e:07:3b:c0:ea:dc:3f:
                    4b:c0:3e:28:56:59:5b:14:9c:9d:e7:80:89:7e:7d:
                    49:11:7e:c5:4c:1d:97:d6:ac:2b:1a:8a:8d:0b:20:
                    c8:a0:94:dc:31:d1:92:f4:9c:4c:d9:61:3e:8a:57:
                    2a:51:db:38:af:c8:b2:1d:28:8e:fb:49:7d:93:35:
                    c1:61:40:7d:10:e5:d4:77:b3:3c:d0:cb:74:92:00:
                    c7:df:52:9d:89:b6:87:5f:d0:1e:be:0a:59:23:81:
                    26:87:c6:21:1b:b9:8d:76:d6:55:f4:c1:38:9d:a1:
                    87:11:53:aa:eb:40:92:68:30:a8:17:2c:4f:52:44:
                    28:07:aa:31:1a:cc:70:21:c0:ef:4f:5c:59:ea:b6:
                    ea:d5:ba:ae:81:49:d5:c9:fa:96:e1:1e:4c:2f:bf:
                    f5:84:f2:12:4e:2a:e1:ac:64:2a:c3:35:3e:88:a2:
                    58:da:77:49:db:6e:bb:ee:6e:ab:d0:e0:21:b2:b5:
                    2d:a8:f0:41:bd:23:77:75:8b:84:9b:7b:c3:3a:bd:
                    37:4f:9d:be:1c:a0:19:f5:ce:f5:b8:a9:bb:17:79:
                    8f:ff:7f:13:7c:18:42:fc:44:50:35:b9:0e:b7:99:
                    d2:5a:72:f1:a8:fd:89:c3:13:11:f4:73:c2:ae:a3:
                    7c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:32:E1:DE:E0:17:5C:69:84:B5:B3:DD:C6:AE:7C:88:61:DD:00:E5
            X509v3 Authority Key Identifier:
                keyid:49:67:B1:EB:E3:C9:72:73:44:30:FE:D2:3A:63:50:D1:D4:82:A0:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/EEF2771E648111F1BC2B05637D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:3c:73:42:50:32:ea:9f:53:6b:8f:1e:70:42:97:bc:03:
         5f:77:00:20:3d:63:a9:7a:1c:b7:69:ed:1d:ba:cc:a8:44:1a:
         03:a7:b2:23:b1:55:3b:93:36:ee:da:12:69:ee:c4:73:41:72:
         1d:77:d1:e1:1b:7e:3f:21:1d:35:39:18:6f:39:ca:b7:89:cc:
         9b:11:04:43:dc:2f:b9:7c:c4:a9:d9:4e:f2:f3:a9:be:d0:f7:
         0c:1a:a3:c9:d9:cc:22:ad:b7:54:d8:2f:94:47:62:f1:7b:e6:
         88:b7:d3:de:4f:b1:60:0a:f8:33:4a:54:15:d1:d7:36:d7:e8:
         86:77:ee:42:2f:cf:e3:43:77:48:af:f9:98:dc:0c:32:77:24:
         5b:8b:3e:c1:6f:64:39:6f:4f:4b:7a:54:ae:41:e0:29:f8:e9:
         c2:3c:a8:48:e3:ad:60:66:8f:d7:5e:0b:1a:ac:78:8c:e0:28:
         4c:01:80:a0:43:fb:25:f6:14:9b:70:c0:61:5d:f3:23:57:1b:
         57:ed:97:42:3e:70:ab:d9:d2:d3:2e:1f:c5:97:b3:16:73:08:
         24:5f:f6:24:a3:15:7c:86:b8:26:db:5d:0a:0f:5e:b1:9c:48:
         cd:9d:5f:8b:dc:d7:3b:66:80:f8:db:99:76:58:88:3f:f0:32:
         49:7f:68:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:57:13 2026 by rpki-client