Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/84CC9A10957111F18DA344A36D11F970.roa
File:                     84CC9A10957111F18DA344A36D11F970.roa (raw, json)
Hash identifier:          k55agLSIaP5N2zf0tHKzs/9MtU/5VvxHelGsDQykezo=
Subject key identifier:   74:F6:8D:6F:99:49:4A:90:BD:5A:4D:C7:7C:56:29:08:F0:67:3B:27
Certificate issuer:       /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial:       0161
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/84CC9A10957111F18DA344A36D11F970.roa
Signing time:             Tue 11 Aug 2026 10:43:42 +0000
ROA not before:           Tue 11 Aug 2026 10:43:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140641
IP address blocks:        160.187.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
        Validity
            Not Before: Aug 11 10:43:42 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7afcde-fff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:2c:ff:f1:eb:90:ba:d5:7e:6e:4d:8e:8d:
                    d6:8b:b8:84:2c:26:c8:d6:28:d8:39:99:d7:33:dc:
                    f4:b2:59:61:c2:05:f7:5e:a4:7c:4b:f3:28:74:0b:
                    3b:3b:2f:cb:18:56:85:aa:3c:95:a9:44:d4:d7:b6:
                    1b:c9:a5:5c:bf:97:0c:09:1e:4e:76:e5:e0:cc:59:
                    39:5c:8d:67:ce:36:35:8c:f2:0f:0d:3d:93:df:60:
                    35:07:c2:d1:bf:07:0a:92:09:8f:b0:ac:3a:4e:ff:
                    91:7b:8d:67:4b:c3:40:3b:dc:32:c6:84:b5:3a:69:
                    a0:eb:20:fd:04:df:12:8b:ed:c6:9c:3e:ab:f6:fd:
                    7f:76:0a:1b:ec:db:91:28:4a:70:b0:27:73:90:d0:
                    48:42:f4:eb:67:49:d5:55:db:62:f6:67:c8:f9:0a:
                    15:07:6e:b8:07:07:89:8c:b3:2c:a3:3a:2d:af:01:
                    fb:75:42:ba:35:64:a5:9b:6f:f5:9d:29:66:1d:50:
                    91:39:ea:3e:c2:c6:96:8c:20:e2:66:3e:4e:c0:84:
                    ea:39:5d:66:30:cb:5b:50:29:11:ba:21:bf:24:b4:
                    e4:81:bd:8a:67:ec:94:ad:f1:cd:eb:99:27:db:29:
                    7e:da:64:62:e2:95:95:44:d6:10:11:f7:83:c7:f6:
                    ba:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:8D:6F:99:49:4A:90:BD:5A:4D:C7:7C:56:29:08:F0:67:3B:27
            X509v3 Authority Key Identifier:
                keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/84CC9A10957111F18DA344A36D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:48:d4:b6:eb:a3:47:0f:05:1c:9f:35:0c:fb:ea:10:65:ad:
         16:93:23:e3:38:68:c3:50:fa:8f:7f:b1:c7:ad:19:db:96:64:
         4a:e1:59:d2:7c:58:51:43:d6:40:fc:f1:07:af:ac:8c:b8:35:
         36:ea:63:0c:15:2b:7a:90:cf:f4:69:50:7c:2b:d3:90:16:38:
         31:18:fd:63:6a:4d:56:55:aa:06:fa:98:ff:10:51:fc:1d:75:
         fe:ec:5d:2a:f8:de:8b:94:a0:71:98:09:08:06:c6:6b:5e:93:
         88:f5:75:ae:7a:ac:6f:f9:b4:07:39:c2:1e:81:33:eb:1e:7d:
         c0:94:ad:f8:56:69:4e:c8:9c:8a:d1:12:eb:17:dc:ba:8e:40:
         c4:a4:35:88:bb:15:1d:79:23:0c:1d:fe:50:25:02:2c:70:51:
         cf:a4:52:5b:23:50:1c:10:5f:0b:12:59:ea:b8:95:62:0b:96:
         be:a0:c8:b0:46:63:90:83:25:f8:1f:ec:fa:fa:d9:6e:4b:60:
         4d:ae:5e:aa:4a:b7:bd:c6:4c:d6:be:7b:f5:c8:50:54:a1:54:
         dc:6a:29:f1:3b:cc:da:96:c3:54:bf:97:74:f0:8e:be:65:10:
         cd:52:52:f0:7f:c6:d8:6f:ac:c8:bc:d5:6d:65:91:63:39:4a:
         47:5e:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:47 2026 by rpki-client