Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/35680D703CAB11F19196D905AE833773.roa
File:                     35680D703CAB11F19196D905AE833773.roa (raw, json)
Hash identifier:          lokmrKBfvxGUBpmD/bgQTR6UZzH2reC0wErlGLib+sQ=
Subject key identifier:   93:54:B2:E6:D3:93:54:6B:B3:05:71:AF:37:54:1C:01:7F:4F:25:2C
Certificate issuer:       /CN=A9112762/serialNumber=11FBD1D8CB8A743735789904D175990EF21D9AA3
Certificate serial:       02
Authority key identifier: 11:FB:D1:D8:CB:8A:74:37:35:78:99:04:D1:75:99:0E:F2:1D:9A:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EfvR2MuKdDc1eJkE0XWZDvIdmqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/35680D703CAB11F19196D905AE833773.roa
Signing time:             Mon 20 Apr 2026 11:22:26 +0000
ROA not before:           Mon 20 Apr 2026 11:22:26 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151988
IP address blocks:        162.4.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/EfvR2MuKdDc1eJkE0XWZDvIdmqM.crl
                          rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/EfvR2MuKdDc1eJkE0XWZDvIdmqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EfvR2MuKdDc1eJkE0XWZDvIdmqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112762, serialNumber=11FBD1D8CB8A743735789904D175990EF21D9AA3
        Validity
            Not Before: Apr 20 11:22:26 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e60c72-47e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:f9:df:e7:81:5f:3a:ff:aa:d3:c7:14:ae:
                    bd:72:9b:ba:b1:c9:07:3b:d6:f5:09:67:bc:9f:70:
                    45:ac:61:ba:4b:28:f8:ea:e2:b2:85:77:dc:76:98:
                    79:80:9d:d8:3f:46:0c:21:a1:48:30:ac:d4:4a:01:
                    4e:28:ad:aa:00:1c:68:7b:4e:df:c8:c0:70:cc:e2:
                    73:f7:e0:43:0d:9b:e3:b4:c7:01:18:d4:f0:ab:19:
                    bf:9c:6e:ec:11:e2:bb:0e:50:ef:70:f4:b2:8a:1b:
                    28:ae:ae:ee:1e:a4:19:05:b2:56:67:af:ef:a6:ed:
                    98:a4:bd:ea:a2:ba:a5:aa:ec:a8:b2:e8:77:c3:e6:
                    d3:df:1e:6f:14:f7:fa:58:9b:39:62:b1:94:13:9a:
                    69:d2:63:72:12:5d:7d:cd:30:07:fc:dd:2f:eb:eb:
                    01:a0:2e:25:e1:31:b2:a1:64:88:30:0c:04:45:bb:
                    e0:31:24:e8:0c:a9:f6:31:ee:38:2d:68:a3:29:fd:
                    0e:70:17:63:2c:f5:b7:1e:60:f6:d3:c1:6d:2f:2b:
                    3c:10:30:89:c2:29:49:c5:5b:a8:ac:0a:40:35:88:
                    66:99:37:17:1c:5a:45:b7:f8:c4:0d:66:43:36:a9:
                    f7:f4:9e:c1:c5:cd:a4:6d:81:03:48:48:4b:82:34:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:B2:E6:D3:93:54:6B:B3:05:71:AF:37:54:1C:01:7F:4F:25:2C
            X509v3 Authority Key Identifier:
                keyid:11:FB:D1:D8:CB:8A:74:37:35:78:99:04:D1:75:99:0E:F2:1D:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/EfvR2MuKdDc1eJkE0XWZDvIdmqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EfvR2MuKdDc1eJkE0XWZDvIdmqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112762/48118DB43CA311F1A2F83546AB833773/35680D703CAB11F19196D905AE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:46:e7:8f:13:89:ae:b6:1a:e8:a0:bf:9e:83:0c:13:73:1d:
         2a:47:c9:4d:c7:84:ec:da:d1:d5:2d:9a:c9:e4:5d:77:c8:95:
         f8:ab:b8:13:d3:97:a0:e4:a5:30:20:c6:5f:ec:27:ef:17:78:
         e1:3b:7a:92:06:ff:9e:2a:de:3b:ff:ef:fe:65:b2:ae:cc:17:
         c3:23:6d:8d:5b:5d:c9:38:6f:f4:1e:af:95:e6:f1:3d:09:81:
         c1:4a:68:31:f6:2b:68:0c:24:c2:ff:0c:e7:8b:9c:5b:f7:be:
         39:96:4d:23:c6:18:3e:c0:ce:0b:76:0a:de:67:cb:f1:ba:b5:
         cf:57:43:71:01:dd:0c:2c:d4:64:f6:c9:6a:58:98:0b:35:ff:
         3c:53:f4:94:4f:16:5e:c8:7d:49:f1:c6:5d:72:bf:f5:62:f0:
         17:a4:23:a8:8e:2f:fd:fc:57:41:de:e6:0d:e8:10:9e:5d:21:
         47:f1:1f:77:97:58:e7:54:70:b0:b3:98:87:28:6b:65:03:7e:
         be:d1:eb:25:39:1f:04:85:94:d6:60:9a:62:98:ac:42:c5:15:
         0c:d0:8b:7c:a4:1e:40:c3:2e:8b:3a:fd:ba:bc:a5:dd:81:aa:
         6e:b2:0d:05:0c:f8:d5:82:7a:12:a1:1c:a4:51:2c:40:4d:d0:
         48:d6:ad:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:39 2026 by rpki-client