Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/643C1850C5F711F1896968A73F11F970.roa
File:                     643C1850C5F711F1896968A73F11F970.roa (raw, json)
Hash identifier:          TiedaBJGidcY96U96PhuGhXUfhvgBxulvqw3tyY352Q=
Subject key identifier:   5A:0D:D0:FB:D7:87:7C:07:58:39:C7:94:6F:23:80:49:8D:C7:93:B3
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       1497
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/643C1850C5F711F1896968A73F11F970.roa
Signing time:             Mon 12 Oct 2026 04:42:55 +0000
ROA not before:           Mon 12 Oct 2026 04:42:55 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141730
IP address blocks:        167.179.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 14:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5271 (0x1497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Oct 12 04:42:55 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6acc654f-36b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:34:1e:71:0a:18:c9:61:1e:8f:ac:b8:12:
                    0f:cd:0d:ae:76:24:b3:75:f6:85:75:78:6a:a4:a6:
                    f5:4f:f9:7a:c4:45:6b:1b:c9:72:ff:05:c2:13:9f:
                    16:04:b4:47:05:37:ed:0a:79:72:42:dd:bf:6a:8b:
                    75:f4:71:3a:4f:cf:6d:6c:3e:cf:15:7f:a9:fa:41:
                    66:ac:77:ad:71:06:ed:d3:bc:29:2a:c9:8e:51:8e:
                    03:60:60:99:b9:83:36:e5:4e:b3:0c:3b:3c:56:6d:
                    a7:4a:54:2d:05:76:60:ec:8a:41:f0:06:28:35:f6:
                    b2:62:5f:eb:06:f5:c2:06:b2:2f:fc:b9:b9:2b:66:
                    60:b9:1c:47:58:72:4c:c9:56:ec:6f:c3:c4:f2:9d:
                    7b:2c:86:db:51:77:05:d9:68:ca:3d:6a:8c:0d:33:
                    de:21:5a:bb:dc:d5:e5:ea:de:1c:e2:01:ca:17:16:
                    72:3b:aa:36:86:47:79:eb:14:38:5b:f6:e5:65:28:
                    ff:01:02:b9:19:50:36:87:1a:bb:e7:de:0e:90:f3:
                    b9:dd:a0:28:80:db:c0:8a:c8:62:66:0c:8e:83:40:
                    11:11:ec:1b:1a:7d:44:52:1a:6e:68:41:ae:5d:cb:
                    a5:e0:81:30:08:18:4f:9e:23:9b:56:90:af:f2:ac:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0D:D0:FB:D7:87:7C:07:58:39:C7:94:6F:23:80:49:8D:C7:93:B3
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/643C1850C5F711F1896968A73F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:14:50:d7:71:f7:47:94:ac:23:1e:6b:b5:ab:94:65:0e:f0:
         5f:16:b1:e3:da:30:31:4b:f1:4f:ab:ab:4b:24:b9:67:6e:64:
         3a:e2:b6:57:88:ad:ce:0f:9d:8c:eb:0a:ec:c5:d9:a3:82:70:
         87:65:2e:ca:0b:93:dc:91:27:fb:26:39:4f:c6:02:44:80:35:
         91:27:3a:aa:ae:14:fa:02:87:fb:d7:c4:07:a1:cc:68:03:21:
         9d:2d:e6:30:0b:d8:57:90:7e:94:35:dd:36:9e:ca:13:2d:d8:
         2a:3c:a1:b2:99:bf:2b:f3:c8:5c:7e:ee:92:99:1c:85:a3:c4:
         45:5a:b7:4b:a7:5f:11:b5:74:e8:d8:bd:92:69:f1:f5:5c:7c:
         fc:d2:d9:68:60:97:52:00:5f:41:b6:71:e5:ad:13:ba:10:e2:
         5a:59:1c:7e:69:bb:fb:ef:ec:1b:43:29:14:a3:3a:8a:bc:97:
         32:49:d2:24:9d:1d:0e:da:04:7a:59:b6:b2:75:6c:f9:2d:f9:
         09:f8:bf:b3:c9:97:ea:4d:e2:73:fe:32:02:80:71:7e:40:60:
         a5:03:9d:3e:b4:ef:a9:ff:75:c6:a2:a8:3a:57:9d:ab:9c:3b:
         5c:5b:a8:ae:ae:fb:53:91:92:e6:70:37:3f:20:20:9b:c3:8a:
         c4:0d:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:10 2026 by rpki-client