Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/014CA83A648211F197D1B1707D47A888.roa
File:                     014CA83A648211F197D1B1707D47A888.roa (raw, json)
Hash identifier:          GXdZtozQAhiSsoR9ZwCYdr6x3UN60jsuaKrL/hFP62o=
Subject key identifier:   3D:75:63:B0:2B:B2:F6:D9:30:C8:87:CE:E5:36:A3:50:01:1D:49:C6
Certificate issuer:       /CN=A918B16C/serialNumber=4967B1EBE3C972734430FED23A6350D1D482A02D
Certificate serial:       1B
Authority key identifier: 49:67:B1:EB:E3:C9:72:73:44:30:FE:D2:3A:63:50:D1:D4:82:A0:2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/014CA83A648211F197D1B1707D47A888.roa
Signing time:             Fri 03 Jul 2026 12:32:07 +0000
ROA not before:           Fri 03 Jul 2026 12:32:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150001
IP address blocks:        162.4.228.0/23 maxlen: 23
                          162.4.228.0/24 maxlen: 24
                          162.4.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=4967B1EBE3C972734430FED23A6350D1D482A02D
        Validity
            Not Before: Jul  3 12:32:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a47abc7-e90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:c0:22:90:72:46:2e:70:20:92:a8:27:57:
                    98:88:42:5f:19:d7:d8:fc:e5:7e:7f:94:35:fb:84:
                    40:c1:1c:62:b3:de:6d:f9:01:59:57:87:aa:30:59:
                    0e:49:9d:ca:c6:eb:21:7b:5d:f9:01:09:5e:80:1e:
                    fb:55:a0:9b:e8:6a:46:d0:da:2b:f1:d0:d7:63:d6:
                    c7:42:66:43:8e:6c:ae:3e:e0:a0:33:68:53:28:d2:
                    ae:02:35:08:66:1a:a5:cb:46:f3:cc:d3:39:be:29:
                    12:cd:92:6f:58:46:e4:89:2a:ba:c0:c2:82:1f:f8:
                    e3:3a:6d:bf:4e:4f:10:61:14:8d:68:28:98:68:2c:
                    d5:ae:60:6b:9d:32:0d:e1:1a:84:c2:a3:e8:47:da:
                    74:c9:1d:9b:69:2e:b1:9e:2e:7d:e2:fe:f5:57:32:
                    8f:06:8f:09:60:47:69:bc:a1:4e:1d:c5:82:11:11:
                    e4:4e:3f:5e:d1:9d:d1:6b:90:0b:3e:5d:11:98:1b:
                    93:58:95:72:81:88:c0:3a:35:86:e2:8e:ee:27:f4:
                    b8:e7:d4:5e:dd:bd:02:bc:62:22:8d:08:a2:da:c0:
                    bf:15:1e:c4:72:87:66:71:47:dd:89:81:0e:79:f4:
                    c4:79:f3:27:00:23:3b:b4:6c:40:d4:df:83:e9:9a:
                    af:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:63:B0:2B:B2:F6:D9:30:C8:87:CE:E5:36:A3:50:01:1D:49:C6
            X509v3 Authority Key Identifier:
                keyid:49:67:B1:EB:E3:C9:72:73:44:30:FE:D2:3A:63:50:D1:D4:82:A0:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/SWex6-PJcnNEMP7SOmNQ0dSCoC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SWex6-PJcnNEMP7SOmNQ0dSCoC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/2151F3A6646411F1BCDE2C4B7447A888/014CA83A648211F197D1B1707D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:be:5d:6b:90:6c:2e:ce:44:05:3a:11:9a:f1:ec:16:b0:26:
         76:e2:0c:e3:41:00:a8:f8:aa:dc:31:2f:55:75:26:91:38:2c:
         c2:32:f1:47:a7:8b:21:6e:8c:4f:c7:db:40:a5:f0:c4:a6:f8:
         ad:f3:fa:82:7d:3e:7e:5a:48:fb:54:8b:f2:57:81:0a:04:0e:
         c8:a1:a6:af:42:28:54:1d:d0:1b:f9:1f:ef:67:ae:1e:4e:d3:
         a2:ae:48:e0:3d:db:8c:94:6c:b1:8a:c4:1f:a5:51:f3:c0:0b:
         3d:bc:c9:f3:c5:0f:93:a9:39:f0:0b:94:0b:00:92:31:22:d8:
         65:8b:68:d6:88:e1:8a:ee:9b:24:f1:c3:67:6b:fd:b0:47:12:
         76:aa:72:1c:47:1f:33:3d:3e:e1:95:83:ff:cc:8a:2f:10:40:
         74:fb:2c:41:b7:24:ae:f0:e2:48:14:5c:f3:67:9b:20:dd:0b:
         b3:f7:92:35:73:19:eb:0d:52:8e:0e:49:b0:e4:23:43:fe:c1:
         00:d1:39:ce:b4:22:7e:ab:f9:51:50:58:ef:be:2a:0d:25:03:
         16:3f:a4:d6:c2:9c:51:33:31:ba:ab:dd:a2:aa:51:ea:b6:8c:
         2f:97:ff:eb:19:95:00:ab:56:ab:23:26:70:b7:e3:22:ba:15:
         dd:c8:64:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:02 2026 by rpki-client