Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A85F41D8656C11F1A436E5949F47A888.roa
File:                     A85F41D8656C11F1A436E5949F47A888.roa (raw, json)
Hash identifier:          vRkETwjRqN8cHag9MSPLuKmsyTTObPbHTum42Xmn+tA=
Subject key identifier:   61:AB:0E:B5:08:7A:BB:F0:4B:1B:33:71:82:64:09:01:29:5E:3D:AD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3047
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A85F41D8656C11F1A436E5949F47A888.roa
Signing time:             Thu 11 Jun 2026 08:07:58 +0000
ROA not before:           Thu 11 Jun 2026 08:07:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133001
IP address blocks:        162.4.226.0/24 maxlen: 24
                          162.4.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12359 (0x3047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 11 08:07:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a2a6cde-17c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:a6:d3:ec:ed:cb:5e:72:94:a0:b2:69:4d:
                    c8:ee:2a:bf:c6:c3:9d:96:c4:af:c3:0b:47:b0:98:
                    b8:23:ec:2d:b7:fe:40:71:6a:55:e5:5a:43:e8:53:
                    30:84:d7:13:a3:0f:5e:c9:95:82:80:28:5f:ea:31:
                    7b:91:d0:4d:45:95:6d:dc:28:1e:e4:66:fb:62:96:
                    25:bb:4a:72:ec:83:53:59:e9:18:55:32:a7:c9:e7:
                    71:31:2f:1e:4e:2f:dd:05:45:b1:9f:46:7a:ac:9a:
                    1b:ba:d5:82:c8:a7:42:c4:5b:f6:ad:e1:a7:cc:d6:
                    25:b0:0b:40:21:60:70:2c:49:5f:dc:cf:b1:88:1c:
                    fa:33:68:0f:55:da:24:db:80:67:78:cc:be:5c:3f:
                    e6:58:99:18:1b:be:02:51:66:48:99:02:19:61:ab:
                    99:b9:6c:73:ce:05:b0:5c:3e:7a:4a:80:99:86:19:
                    b7:3a:ba:ed:2b:51:9d:ec:77:45:2e:c9:14:a3:01:
                    d7:3a:40:58:8e:a5:22:d2:5f:a0:bb:c5:1c:c2:d5:
                    ce:4a:ad:9f:1c:15:96:7f:f9:35:a7:bc:14:db:f0:
                    76:25:e0:c0:cf:96:43:10:91:45:c0:79:8a:6b:27:
                    b3:45:cf:01:bd:ef:29:3a:2b:c6:e8:49:b7:51:13:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:0E:B5:08:7A:BB:F0:4B:1B:33:71:82:64:09:01:29:5E:3D:AD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A85F41D8656C11F1A436E5949F47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:63:fe:69:a5:09:7f:b8:b5:6e:58:ff:ad:44:79:ec:ba:c9:
         b8:11:b6:26:12:2d:bd:a8:cf:0d:01:85:77:b5:9b:39:1f:65:
         30:b3:8f:30:4b:30:e5:3a:38:2f:6f:d5:96:01:e4:c1:9a:8c:
         4a:06:37:f3:68:11:a8:3d:51:85:f9:18:49:5a:36:a8:65:17:
         de:f3:fa:eb:a6:2b:fa:71:32:d4:ec:ba:bf:a8:64:aa:d2:dc:
         79:fb:f1:7f:9c:08:6b:14:ba:b3:8b:5c:18:fd:3b:ed:37:41:
         10:42:3f:59:14:67:80:5e:58:11:96:9a:b4:09:d6:1f:c5:70:
         85:f8:ab:f4:7d:60:88:65:e5:97:52:0a:6a:b4:c9:bb:b5:9b:
         40:5b:46:b8:35:c3:19:04:4d:dc:99:16:95:d6:0d:7c:62:32:
         1d:ef:65:81:0f:b2:8b:c1:08:72:c2:c9:aa:e1:27:43:48:4a:
         05:32:da:d1:3a:d2:7e:08:e0:b2:3f:33:17:e3:58:20:49:d7:
         6d:a4:e3:cb:4d:ed:c6:e5:2d:b4:46:de:15:c3:a3:56:d5:4e:
         fc:91:2c:4f:87:30:9c:54:e7:fe:d6:26:cd:be:bb:d5:80:c9:
         33:74:14:50:48:80:55:81:b5:65:e9:93:09:21:dd:66:32:4a:
         9e:d0:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:30 2026 by rpki-client