Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/E58C711C6E2111F189BF576272A30FBC.roa
File:                     E58C711C6E2111F189BF576272A30FBC.roa (raw, json)
Hash identifier:          2KzEYDFnfXibar/cKmNE28FNWE3E+aAr6Na8gmkWSTw=
Subject key identifier:   E7:DA:0F:97:D9:10:5B:61:AA:AA:7C:8A:6F:28:41:5F:89:B2:68:5F
Certificate issuer:       /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Certificate serial:       0C
Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/E58C711C6E2111F189BF576272A30FBC.roa
Signing time:             Mon 22 Jun 2026 10:05:29 +0000
ROA not before:           Mon 22 Jun 2026 10:05:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     137581
IP address blocks:        162.4.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
                          rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
        Validity
            Not Before: Jun 22 10:05:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a3908e9-695b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:eb:8c:43:01:52:84:c9:e8:fd:84:24:e8:
                    05:4f:0a:c3:31:d5:1d:46:cc:c1:08:63:22:9c:a0:
                    9f:e9:f3:b5:94:10:0a:8e:ba:eb:4f:cc:f3:6e:c4:
                    eb:ee:ae:24:3f:1d:a2:36:de:0c:07:ab:36:22:94:
                    17:67:ff:98:b2:fa:db:e0:4c:8e:47:6b:03:5b:8a:
                    4b:99:f4:25:6d:d7:e6:46:41:2b:af:c8:dc:9f:31:
                    66:75:ac:04:5f:50:b5:91:4e:2d:c8:cd:5c:1b:e9:
                    cc:41:d2:65:bc:25:e2:21:95:02:af:b0:f9:3a:74:
                    b3:d9:c0:d1:85:dc:ff:ca:55:f8:40:99:98:0e:2e:
                    8c:db:a5:84:4f:b7:2f:24:47:8c:d0:ea:fb:aa:3a:
                    7b:40:f8:43:96:63:14:63:ee:f0:a5:df:71:ad:15:
                    62:04:15:fe:fa:c2:ec:7d:12:2f:f3:b7:94:a4:d1:
                    97:1a:df:19:91:52:64:02:7b:bf:3d:00:8d:68:d0:
                    34:0f:52:48:b6:80:3f:2a:cd:93:e6:b6:62:d7:19:
                    a1:7c:d8:ce:bc:05:6a:6a:3a:8e:55:1a:3e:88:fd:
                    e6:db:87:33:2c:07:59:42:00:66:cc:a0:a5:3f:39:
                    92:91:a9:cf:24:16:01:9b:02:19:67:32:b2:20:b6:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:0F:97:D9:10:5B:61:AA:AA:7C:8A:6F:28:41:5F:89:B2:68:5F
            X509v3 Authority Key Identifier:
                keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/E58C711C6E2111F189BF576272A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:87:17:49:32:cc:77:f6:53:49:83:a1:17:52:a1:0e:2c:0a:
         d5:a7:5e:3a:aa:89:0c:66:8c:50:9b:81:ee:30:f1:c1:43:fe:
         7b:da:f9:bd:33:dc:71:71:39:e7:7b:be:72:ab:76:c7:c0:93:
         98:e5:9c:1a:71:3c:71:2b:5b:d0:97:e1:bd:1d:cf:5c:cd:3a:
         f3:69:69:8e:2a:aa:c6:85:51:2c:fe:0c:5b:27:5a:97:fb:2d:
         f9:40:94:38:0b:5c:db:cc:e4:0c:76:f6:66:bd:65:d7:bd:8a:
         0d:30:54:70:24:b4:8d:25:21:b3:81:c3:b4:59:d7:08:53:da:
         a5:de:34:02:d5:fc:ab:91:21:01:20:9d:98:4c:93:03:f7:81:
         77:05:2d:7a:ac:cf:1a:d2:d6:5f:a5:8c:00:3b:a1:e7:61:69:
         7b:cb:5e:0b:47:05:fe:98:69:4b:d3:ac:b8:c8:cb:7d:31:0f:
         6f:c8:c1:93:0f:96:07:7a:48:0b:d3:cc:76:3f:22:c6:d9:1c:
         f8:4a:9e:1f:db:54:08:84:62:bc:68:21:8a:55:d5:da:62:8a:
         36:33:3d:a4:8c:67:69:f3:6c:03:37:84:0d:24:e2:49:cc:bf:
         68:c6:19:3a:93:01:4b:10:1b:95:24:09:46:f0:c2:bd:c6:c0:
         88:16:fc:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:49 2026 by rpki-client