Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
File:                     1EC9E19C7AD111F188194D1271A30FBC.roa (raw, json)
Hash identifier:          MpR0pLa42VtvAVSR7IX6co5ikrGvSIOJh1Z0FQ/Mnw0=
Subject key identifier:   6A:2D:53:D6:FB:01:34:33:2C:B9:8B:29:1E:27:90:9D:2E:BC:50:69
Certificate issuer:       /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial:       28
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
Signing time:             Wed 08 Jul 2026 13:30:01 +0000
ROA not before:           Wed 08 Jul 2026 13:30:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149514
IP address blocks:        162.4.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
                          rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
        Validity
            Not Before: Jul  8 13:30:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4e50d9-3753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:27:1b:7c:d5:1e:d3:bb:50:8a:ec:c8:87:
                    43:93:f8:d3:75:c3:35:7c:72:13:5c:5b:69:5a:f2:
                    1d:79:6f:76:f8:15:a6:fb:43:aa:39:d6:86:d9:59:
                    9c:5b:50:8a:3c:31:d8:12:6e:16:33:27:05:03:62:
                    62:70:79:d5:4a:ae:15:16:9d:2f:50:aa:99:21:e0:
                    d5:ca:32:f9:d0:e7:5e:8f:c0:5a:5a:88:be:8a:ca:
                    f7:a8:e2:11:f3:4b:d9:bf:b7:bb:48:d8:0e:30:6b:
                    5d:d3:22:09:65:2a:b2:85:40:70:38:c5:6b:5a:f7:
                    a2:cf:8a:1c:18:65:92:a4:08:0a:c6:0e:a5:e1:d3:
                    10:fd:a0:1f:e4:50:18:42:9c:1e:75:52:34:a6:19:
                    62:98:a1:58:bd:4d:71:dc:49:7a:72:35:59:19:5c:
                    4f:08:d5:f2:55:4f:48:bf:c1:b4:ff:69:af:02:0b:
                    ea:b1:8c:a9:02:40:19:15:14:38:d9:da:0f:0f:db:
                    63:c5:e5:a7:1d:55:b9:77:97:5e:0d:89:57:25:1d:
                    7d:6c:ec:6d:f3:ee:e4:e8:ce:0b:d8:5d:54:35:32:
                    e5:5c:86:a4:fd:95:aa:c9:7f:5c:57:f8:92:e7:b6:
                    05:35:ab:de:f5:b0:c5:b2:9e:b3:e6:f2:13:dc:e6:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:53:D6:FB:01:34:33:2C:B9:8B:29:1E:27:90:9D:2E:BC:50:69
            X509v3 Authority Key Identifier:
                keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f7:16:25:de:4b:c7:b0:47:a3:85:2c:bc:8a:9d:17:7c:cf:
         78:21:aa:fa:10:2a:51:1d:3f:cf:1f:37:9b:39:1f:9a:f8:f0:
         e3:1c:2d:b1:25:0f:6b:96:25:d7:3e:39:c4:aa:02:2f:71:2c:
         34:fb:b8:09:49:83:62:af:f4:3a:ef:1d:cb:a0:68:3e:4d:26:
         a1:11:36:57:8d:48:51:1f:18:bc:26:86:9a:63:be:64:be:cf:
         d5:32:6e:30:dc:9c:5d:db:32:3d:7c:1a:0f:9b:29:3c:0c:82:
         62:e2:28:d0:09:20:29:03:cf:11:e0:08:22:2f:bd:45:69:c3:
         90:99:8a:6f:6e:4a:6a:29:62:a3:b1:a4:b2:13:54:ee:62:5e:
         fa:f2:5d:82:01:34:28:2f:e9:19:28:ef:7b:0a:3e:ee:d7:e0:
         1c:f7:f5:32:ce:df:34:73:4d:96:a1:2b:cd:a6:09:4e:8d:ac:
         1e:a5:c6:c0:cf:30:08:6d:d9:cf:0f:a7:17:55:7d:ec:2d:89:
         6c:ac:6b:d4:8b:f2:63:49:ff:63:e8:e4:75:b5:80:af:be:13:
         0a:94:f9:c7:4c:f7:6d:a9:8f:86:ab:96:73:2f:29:dc:b8:c0:
         41:32:0a:89:b1:a6:3d:bc:cc:9e:7f:ee:cd:a0:10:40:f5:64:
         45:00:91:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:32 2026 by rpki-client