Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/6F2747DE3DE511F19BE7396A9C833773.roa
File:                     6F2747DE3DE511F19BE7396A9C833773.roa (raw, json)
Hash identifier:          EIFF9n7nIw8O07orwFHUSOVHnVSTRstMZzTfvLGr7aA=
Subject key identifier:   53:62:D8:3C:38:9F:CD:4A:ED:D3:5E:5C:91:F6:FE:19:65:3B:F9:EA
Certificate issuer:       /CN=A913C35A/serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
Certificate serial:       02
Authority key identifier: 7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/6F2747DE3DE511F19BE7396A9C833773.roa
Signing time:             Wed 22 Apr 2026 00:51:45 +0000
ROA not before:           Wed 22 Apr 2026 00:51:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154643
IP address blocks:        162.4.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl
                          rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C35A, serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
        Validity
            Not Before: Apr 22 00:51:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e81ba1-d081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:94:bb:7f:76:0b:b8:76:fa:66:58:27:7c:
                    e8:29:2c:99:ed:d1:d0:9a:61:ca:3d:7a:4f:d1:99:
                    22:91:11:42:76:34:6b:1f:13:fd:0d:8c:5d:d1:e6:
                    e9:91:1f:25:c6:09:4e:1e:72:84:b3:60:e5:b7:1b:
                    eb:05:30:af:2f:b9:2d:78:5d:c0:57:d8:a9:28:ac:
                    08:37:3c:e5:d0:fd:4a:ab:d5:47:ed:09:7d:71:af:
                    c1:38:b5:25:78:f0:8e:5b:35:07:9f:3b:90:34:87:
                    2e:ef:65:4b:f9:6e:27:49:d9:45:40:21:b2:08:12:
                    24:a6:b0:0d:1e:b7:88:10:d1:f4:d6:95:3a:ee:ed:
                    dd:fe:5f:ac:4a:84:c6:a1:55:b1:d9:5b:1b:cf:6a:
                    bd:4e:64:a6:46:c3:73:56:bd:0a:a2:43:c6:e5:7a:
                    1d:51:8d:8d:59:76:af:0b:84:63:c8:34:f3:a5:84:
                    85:30:aa:5a:10:78:58:3a:23:17:c6:de:f8:ac:a6:
                    30:6f:bb:da:8f:cf:ac:99:6b:13:1e:5a:05:37:00:
                    38:3c:64:60:6c:cb:60:e9:af:df:30:e3:4f:e5:ad:
                    99:b3:20:55:73:40:31:1f:ae:11:7f:9c:36:7f:a2:
                    13:09:10:00:46:70:44:5a:3b:93:a6:1d:0c:51:69:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:62:D8:3C:38:9F:CD:4A:ED:D3:5E:5C:91:F6:FE:19:65:3B:F9:EA
            X509v3 Authority Key Identifier:
                keyid:7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/6F2747DE3DE511F19BE7396A9C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:9d:c5:43:57:dd:e6:c8:7a:ce:a0:35:3f:e1:74:10:4f:
         fd:62:bc:85:64:83:c6:2b:a7:50:08:0c:af:dc:be:10:f0:59:
         4b:84:69:45:d3:f9:fe:c4:59:d4:d1:13:b6:fb:08:33:ae:6e:
         52:bf:e8:85:05:36:ae:40:86:8f:2c:8e:72:88:37:34:34:c6:
         7a:e4:90:5e:50:a2:3f:72:81:c5:17:40:d9:f7:b0:2b:fc:35:
         e9:4a:94:27:ca:65:76:ba:c9:b7:77:ad:9e:80:35:ed:bb:fe:
         db:1c:61:a6:7e:e9:0b:e9:19:51:50:1f:27:03:03:bb:e1:27:
         ef:a1:7d:10:59:f5:69:7f:78:c4:99:65:c5:34:28:b5:50:5a:
         58:e9:0d:f9:35:0a:db:f6:a4:f4:24:8e:42:d2:a9:55:17:cd:
         02:0d:be:b0:a5:68:ba:14:18:31:f9:45:96:8a:dc:40:d3:5a:
         ea:ed:08:ab:39:0e:8d:bc:d1:87:f4:51:a0:74:4e:b7:85:25:
         05:1d:38:c9:e6:6a:d0:cc:1f:63:6f:f2:9b:45:19:58:7e:eb:
         75:4f:5c:df:a3:3f:f2:83:b8:c2:e8:dc:43:66:3d:0b:5e:b8:
         43:80:50:d0:45:ee:19:a5:32:83:6f:c3:2d:7a:31:91:57:c8:
         57:9e:4e:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 11:35:36 2026 by rpki-client