Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CE980DA047B511F1AD6B752EAC833773.roa
File:                     CE980DA047B511F1AD6B752EAC833773.roa (raw, json)
Hash identifier:          rJ7MwdMn12g2VriYRqbrvBuuT7dIwHbDf+/LEbL0SFk=
Subject key identifier:   F1:AF:F7:5A:69:1F:BD:8F:79:A5:0E:8E:4C:29:CD:0C:C8:D8:42:41
Certificate issuer:       /CN=A9163FDD/serialNumber=0AAB68B5E9CCD36CE02FC7EFFC31F2D3CA39DB27
Certificate serial:       04
Authority key identifier: 0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CE980DA047B511F1AD6B752EAC833773.roa
Signing time:             Mon 04 May 2026 12:36:01 +0000
ROA not before:           Mon 04 May 2026 12:36:00 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        162.4.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.crl
                          rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163FDD, serialNumber=0AAB68B5E9CCD36CE02FC7EFFC31F2D3CA39DB27
        Validity
            Not Before: May  4 12:36:00 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f892b0-d690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9c:99:7b:c9:94:8f:9f:cd:c5:40:9f:0e:82:
                    0c:0a:43:35:d8:86:1c:84:b8:58:70:13:2a:c7:a1:
                    20:fb:48:6b:e1:26:54:5b:3e:b5:b5:97:ae:85:7a:
                    77:09:34:ae:a4:54:72:17:9c:94:28:ab:e3:c0:4e:
                    b4:da:ea:4d:5d:4a:ae:dd:51:db:00:40:05:cb:72:
                    26:ea:50:05:d0:14:53:11:95:06:b8:3d:25:5b:32:
                    3c:bd:d5:bb:7f:69:9e:c1:a1:0a:3b:a7:f3:9d:b5:
                    3e:f1:5d:af:60:fc:ee:2b:9a:2e:2b:bb:37:cb:b9:
                    14:f6:b1:27:fd:75:10:3b:81:00:3b:64:e9:d0:05:
                    cc:e2:f1:ad:7b:eb:89:6d:9f:92:aa:5f:8e:34:35:
                    0c:cd:9a:66:d6:43:68:06:b1:9c:48:ab:b0:b1:8e:
                    2f:a2:be:b8:77:5a:ab:f9:18:fb:02:d2:6f:56:f3:
                    9c:dc:28:c8:eb:8b:9f:c8:12:5f:1d:4f:5f:bd:a9:
                    e0:ba:9f:db:98:b4:82:6b:13:21:56:9b:44:2b:20:
                    61:a1:cd:58:7d:89:ce:56:ab:09:8c:84:f4:86:2b:
                    86:e6:e8:dd:cb:5e:cf:07:46:37:21:42:9c:ea:5d:
                    b9:76:b5:18:4d:d4:2a:7d:6c:06:c5:44:77:67:19:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AF:F7:5A:69:1F:BD:8F:79:A5:0E:8E:4C:29:CD:0C:C8:D8:42:41
            X509v3 Authority Key Identifier:
                keyid:0A:AB:68:B5:E9:CC:D3:6C:E0:2F:C7:EF:FC:31:F2:D3:CA:39:DB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CqtotenM02zgL8fv_DHy08o52yc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CqtotenM02zgL8fv_DHy08o52yc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163FDD/35AF6C5047B511F1A32F452AAB833773/CE980DA047B511F1AD6B752EAC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:fa:ec:00:46:54:85:26:f1:1b:0b:d4:61:61:74:4f:f3:
         25:d0:00:f0:78:3e:d4:c0:d0:c6:31:ce:d0:51:81:95:16:4c:
         0c:a8:51:ef:d7:53:3c:1c:b2:5b:3e:41:ae:76:8b:4b:5f:61:
         90:f1:d1:d0:7e:a6:9c:bc:b5:63:46:a0:ef:c9:46:ee:53:86:
         18:63:c7:09:23:78:8a:5b:b1:8c:69:e1:09:eb:a5:45:cb:8d:
         47:40:21:36:73:44:2b:cf:cb:05:c8:9a:2f:c1:d3:4b:ca:07:
         66:4c:b9:36:f9:ec:09:75:d8:d5:85:ad:4f:e3:23:52:59:2d:
         32:92:8a:29:33:4c:55:21:61:e5:5c:4b:30:40:ea:6b:6c:35:
         02:9f:6a:37:40:5a:39:ce:6b:f1:87:22:fe:70:3b:46:cf:ed:
         b0:9f:48:14:ad:19:7e:fc:c1:8b:32:39:13:52:45:4c:8d:84:
         a6:3c:f0:82:69:19:a3:3e:09:61:71:47:86:5c:a0:fc:ad:71:
         e1:68:97:08:2c:ae:97:89:d0:74:2c:13:25:43:be:72:fe:5d:
         c4:72:e0:32:31:1a:d1:ca:2a:ee:80:04:3e:e1:5c:9b:bc:ad:
         43:a3:ac:4f:2a:ed:86:49:5d:c0:15:23:cc:cb:82:6d:e9:f3:
         cc:bf:86:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:26:11 2026 by rpki-client