Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/2F41CD0643A811F184296E0D94833773.roa
File:                     2F41CD0643A811F184296E0D94833773.roa (raw, json)
Hash identifier:          amZ2JPM+XPf34fxY5++TkE/nmH2uk8BWR0qod2Uva1c=
Subject key identifier:   BD:A7:88:D4:C4:25:39:6F:EC:43:39:01:1E:3A:27:F2:7A:A6:DD:6F
Certificate issuer:       /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial:       04
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/2F41CD0643A811F184296E0D94833773.roa
Signing time:             Wed 29 Apr 2026 08:48:48 +0000
ROA not before:           Wed 29 Apr 2026 08:48:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140572
IP address blocks:        162.4.48.0/23 maxlen: 23
                          162.4.48.0/24 maxlen: 24
                          162.4.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
                          rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
        Validity
            Not Before: Apr 29 08:48:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1c5f0-5d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:f3:d5:68:3e:3d:44:ed:a5:ea:fd:30:12:
                    dd:a5:7f:df:10:ee:6e:d7:9f:bd:48:8f:d7:46:36:
                    8d:ad:bf:51:e4:9a:ae:a5:e4:03:3a:36:5e:7d:98:
                    5a:e8:8b:bb:b5:4c:c7:a1:d9:9b:66:4e:0e:03:6a:
                    bc:f6:3a:9b:b6:98:c8:61:b1:12:72:10:db:c6:e4:
                    ef:9e:8b:aa:e8:0c:86:3f:51:6e:c1:c6:f4:06:67:
                    c9:f4:ea:7f:fd:ed:f5:c1:3e:51:6c:ae:d2:d0:1b:
                    4d:a9:4b:0f:8b:ed:7f:56:41:e2:fc:fc:c8:fa:8a:
                    6f:e7:8a:36:2b:88:c0:57:3e:2a:26:26:93:7a:ad:
                    e6:8b:98:c4:03:b8:a4:ac:54:33:80:4e:15:ed:16:
                    f9:42:ac:c4:c8:c0:e0:91:bc:04:15:4a:c6:e1:e1:
                    6b:ef:34:ba:9a:7a:12:0a:01:d1:df:2d:04:0c:7d:
                    86:c7:1f:af:32:98:9c:16:17:ac:fd:45:5a:fc:25:
                    3f:9e:da:c6:ad:4c:74:e5:f6:19:2c:e1:14:3f:82:
                    6b:50:c6:04:c9:31:94:7e:e5:6f:42:6e:43:27:bc:
                    8a:b2:2a:f5:c6:c4:d6:ea:65:7e:33:0f:b6:9e:f7:
                    8b:85:28:2d:dc:0f:19:d2:ac:2b:6a:7c:b5:f5:85:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:88:D4:C4:25:39:6F:EC:43:39:01:1E:3A:27:F2:7A:A6:DD:6F
            X509v3 Authority Key Identifier:
                keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/2F41CD0643A811F184296E0D94833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:68:b4:75:87:8e:cd:1c:4c:ba:42:fc:1e:16:8a:97:c5:
         37:60:7e:bb:4b:97:8e:3c:5d:f4:33:dd:d2:79:08:de:37:3f:
         09:82:2b:8a:15:64:62:1f:15:17:8c:50:cc:50:d0:71:ed:17:
         ac:3c:70:38:33:54:4c:8c:1a:15:e5:ca:b2:8f:4b:96:f9:43:
         d0:70:5b:09:83:7b:7c:bc:e0:0a:93:41:1d:8a:14:99:1d:ba:
         d7:90:b5:e9:51:d4:4a:67:e1:32:6c:d5:0c:37:d7:71:2d:a9:
         e1:28:8c:a2:9d:f3:df:c4:a1:35:ce:cd:38:b1:91:29:eb:2d:
         68:1a:5e:fa:14:fc:b7:84:53:bd:30:30:3c:c4:ff:2e:55:30:
         e4:10:05:1f:f0:da:a5:c3:ab:2e:f5:dd:a2:fb:6c:1d:0d:dc:
         47:27:1b:8c:d1:aa:f7:44:6b:b5:65:80:a9:9c:dd:7b:cc:77:
         99:de:66:d1:99:9d:a9:8f:e3:a4:6d:c6:a1:6d:3f:36:58:24:
         25:47:38:68:ff:61:96:01:b7:1c:7a:57:2b:dc:72:b5:a0:fb:
         79:bf:6e:48:b8:94:16:22:4e:ab:07:da:9f:fd:be:e3:4b:fe:
         7c:0f:ed:ca:bb:43:d1:ca:9e:c3:ae:ab:8a:b4:14:f3:62:a0:
         1c:bf:01:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 07:57:06 2026 by rpki-client