Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04C0B3B6438611F1A8FD19D2C4833773.roa
File:                     04C0B3B6438611F1A8FD19D2C4833773.roa (raw, json)
Hash identifier:          s8DmM5rYmr45m1kxRjuOiyceRz6RrvSf2/ELTlzrmu4=
Subject key identifier:   30:16:66:65:6F:95:B1:44:D7:37:26:D6:DB:E0:05:D5:1A:80:A4:04
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DCB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04C0B3B6438611F1A8FD19D2C4833773.roa
Signing time:             Wed 29 Apr 2026 04:43:51 +0000
ROA not before:           Wed 29 Apr 2026 04:43:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141322
IP address blocks:        162.4.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11723 (0x2dcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Apr 29 04:43:51 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f18c87-eb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:6d:20:d9:b8:fa:84:d9:d3:6c:c4:28:2e:
                    5d:d3:ac:c1:d5:ef:a7:02:ec:ae:19:a6:16:05:29:
                    66:7d:6c:cc:72:b1:42:0d:ce:df:d7:f4:b2:56:51:
                    98:e8:ae:ae:9a:25:ed:4b:31:af:a3:bb:d2:99:8f:
                    03:e2:13:43:23:8a:2b:cc:76:ef:27:7c:9e:71:90:
                    01:b2:39:95:fd:de:4b:e9:b8:78:a7:b8:1b:9f:17:
                    03:ad:e7:19:45:f7:2a:6b:25:9d:c9:d6:fc:a3:17:
                    2c:89:43:42:43:7e:f6:7d:a9:68:73:39:95:70:53:
                    71:9b:e1:e9:20:af:bf:39:cb:d4:a7:3e:63:29:73:
                    4b:f8:60:f8:ee:86:5f:3a:18:77:95:2f:32:2f:76:
                    19:3d:2a:08:e3:a2:7c:fe:03:ee:e9:b3:cc:39:aa:
                    5b:21:fd:10:ef:da:5b:73:c0:35:f6:30:96:c5:48:
                    d0:28:58:04:02:d1:61:c7:f0:66:c7:f6:c2:9f:98:
                    bf:4e:96:31:60:bb:b1:19:eb:1a:17:2c:3f:68:27:
                    83:f7:cf:8a:c7:87:6f:93:e7:0a:d8:b4:55:ff:2b:
                    03:50:f0:23:20:f0:11:85:b3:e9:9b:11:9d:36:4c:
                    8f:4a:6b:bd:4e:75:91:d8:49:61:7f:b3:1b:51:96:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:66:65:6F:95:B1:44:D7:37:26:D6:DB:E0:05:D5:1A:80:A4:04
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04C0B3B6438611F1A8FD19D2C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:3d:15:f1:5c:e3:ea:ac:72:e6:69:94:f9:e3:e9:d7:76:
         68:39:14:45:84:fb:7b:80:dc:d5:e1:67:af:55:97:a3:94:97:
         0b:db:7f:34:4e:0e:c2:73:08:da:f2:17:93:8e:d7:10:a5:72:
         71:58:08:b4:8b:25:72:a1:2d:35:76:c8:49:b3:1d:ba:d0:2c:
         53:f7:0f:b6:6d:db:7e:d3:89:59:5c:72:a7:ab:a2:92:06:73:
         1f:5a:51:ce:2e:1d:f1:1a:2b:77:3f:fe:eb:ce:bc:5f:fd:80:
         70:70:32:40:29:b8:cf:64:fa:4b:33:97:a5:aa:19:dd:c1:49:
         33:58:81:4e:37:fb:82:3a:7b:b4:2d:4e:cc:bc:a4:61:3c:43:
         55:af:61:a2:d0:a4:4c:88:00:41:11:88:98:9c:2a:ef:27:7b:
         02:bb:40:c8:0d:6c:48:12:89:76:94:63:97:82:6d:7c:79:e0:
         72:dc:6f:5d:5f:00:32:52:7b:60:6a:3d:0d:47:c0:56:f6:c4:
         96:10:c5:5a:43:7c:75:99:d1:00:c6:3a:21:03:ca:dc:81:e9:
         1a:33:e4:ca:c7:59:d3:18:82:91:f1:8e:0c:98:a8:17:a3:66:
         e8:29:a8:f1:f3:3f:ab:49:c9:89:8c:89:09:ae:8e:4a:1f:86:
         79:36:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:13 2026 by rpki-client