Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/71E3AE9C49E611F19E2EA428B5833773.roa
File:                     71E3AE9C49E611F19E2EA428B5833773.roa (raw, json)
Hash identifier:          SVrt92QUxEJZNMnBQkhwo9GWyfKOQxkinsISsxhBSJU=
Subject key identifier:   25:3B:9D:8D:01:80:BC:1D:23:5F:CE:07:DB:7A:0F:BA:19:C3:E9:BF
Certificate issuer:       /CN=A913EECE/serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Certificate serial:       04
Authority key identifier: 7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/71E3AE9C49E611F19E2EA428B5833773.roa
Signing time:             Thu 07 May 2026 07:29:13 +0000
ROA not before:           Thu 07 May 2026 07:29:13 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     10031
IP address blocks:        162.4.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
                          rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EECE, serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
        Validity
            Not Before: May  7 07:29:13 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc3f49-c4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:68:1d:06:77:17:99:ab:61:e3:e1:b3:0b:
                    12:fa:a0:a6:d2:19:32:fd:56:fe:df:66:d3:1a:ca:
                    9e:e1:cb:75:f2:23:02:b0:e6:c6:97:33:31:34:a2:
                    5d:ce:d3:e1:7b:9d:63:55:4a:d3:a6:02:38:3e:3d:
                    c6:8b:ba:8c:dc:8f:2a:f3:26:24:e2:2c:4b:a0:38:
                    cf:24:b0:e1:b1:3a:3e:cc:05:c0:69:99:9c:97:cd:
                    be:0d:e0:76:ef:d0:45:44:bc:7e:59:ea:10:68:3b:
                    fb:8b:84:b3:bf:ef:6a:56:f6:0b:71:f3:d6:8a:3c:
                    34:a2:9b:50:6a:57:db:a4:28:1d:eb:4a:cb:28:28:
                    3a:be:05:15:e5:c3:27:d1:b7:87:50:31:1c:cf:9f:
                    57:06:59:09:7e:b1:c3:11:a3:8a:03:3d:5c:42:da:
                    64:60:33:0e:a5:64:ec:86:3b:3e:e7:33:0a:a2:c0:
                    65:de:1c:72:51:ac:bd:53:5f:01:ca:e7:9f:f1:aa:
                    16:cc:b2:27:b9:bf:fa:9e:2a:b0:73:83:06:15:d1:
                    3e:cc:f5:fe:24:7d:e3:8f:57:77:9f:15:d2:d5:f4:
                    80:13:c1:71:79:58:f8:e9:21:25:f2:45:6a:2f:2a:
                    98:c8:8a:2b:e2:e8:d3:d9:da:08:a9:89:08:88:ce:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:9D:8D:01:80:BC:1D:23:5F:CE:07:DB:7A:0F:BA:19:C3:E9:BF
            X509v3 Authority Key Identifier:
                keyid:7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/71E3AE9C49E611F19E2EA428B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:de:e4:6f:8c:56:b1:2d:78:7c:3d:a1:49:84:5a:b8:21:
         f8:07:86:52:c3:89:01:3a:30:88:80:26:45:e1:cc:39:2e:e6:
         9d:e5:ca:0a:6d:ae:4e:db:23:13:18:54:23:13:d2:f6:ad:da:
         57:e3:93:db:9a:03:b1:a7:31:ee:95:1a:92:70:0a:55:c9:4e:
         c9:2e:e5:12:2e:e7:86:90:5e:f8:8f:ae:34:65:e6:54:7f:4c:
         f6:da:25:7f:3c:0b:af:53:b6:6e:9b:62:18:fa:fb:78:57:47:
         06:e4:c8:e7:04:00:83:d6:e6:e1:2c:8a:c9:2d:06:bc:44:97:
         9b:3b:48:01:21:67:8a:ba:4d:93:6c:6e:f6:3d:85:b6:37:fe:
         cc:9f:bd:98:c5:d0:38:a9:74:97:db:ff:b6:6a:6b:8b:27:46:
         b1:2c:b4:4a:bc:87:b1:9c:0f:f5:a4:f2:73:ae:14:8d:56:42:
         90:a8:98:d2:8b:d4:59:f1:ed:c9:a1:ee:bb:db:65:b1:02:0f:
         4a:57:2b:2d:3b:8d:d3:bb:dc:ff:4b:68:0f:5e:f9:9b:01:c2:
         ff:80:c3:c5:7f:1c:ee:10:7f:3d:e6:fc:b0:85:9c:7a:3a:58:
         ff:8d:90:c6:83:68:13:79:1c:61:1e:5e:ee:4a:6a:95:3d:d0:
         57:cb:c0:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 13:25:17 2026 by rpki-client