Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/045117A63F0611F1B36B08F4C9833773.roa
File:                     045117A63F0611F1B36B08F4C9833773.roa (raw, json)
Hash identifier:          yc41YsNACmYj/Sr/DAPgp/0vliNwQTb4cuVsDR9CDfY=
Subject key identifier:   93:4B:45:90:1E:2F:0D:33:47:BC:3B:C5:C2:58:DD:57:BC:FA:3E:E3
Certificate issuer:       /CN=A915BC71/serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
Certificate serial:       02
Authority key identifier: 35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/045117A63F0611F1B36B08F4C9833773.roa
Signing time:             Thu 23 Apr 2026 11:17:30 +0000
ROA not before:           Thu 23 Apr 2026 11:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138926
IP address blocks:        162.4.32.0/24 maxlen: 24
                          162.4.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl
                          rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 09:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC71, serialNumber=35764D94207D44D89A70557C66D2A2EF3D1C5480
        Validity
            Not Before: Apr 23 11:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e9ffca-94e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:d7:75:9a:d0:18:fb:8f:25:af:b2:60:db:
                    7d:f7:26:a7:e1:fa:cf:26:61:05:1c:04:3e:16:c5:
                    8d:63:41:69:b0:a5:a9:dd:ef:f0:3b:9e:a7:1e:14:
                    df:d5:a6:de:ac:75:dd:d7:88:4b:97:fb:eb:26:21:
                    61:61:20:52:23:48:fb:a8:21:79:1d:ff:42:ec:9e:
                    dc:d6:b1:9a:65:27:1b:e8:3b:22:9b:d4:78:6e:00:
                    8f:4c:c6:bf:f1:89:5f:aa:9e:9d:6b:60:c4:e0:78:
                    dc:10:ab:8c:74:10:78:47:47:61:57:85:eb:b6:e8:
                    f6:4e:37:15:2a:7c:ce:0e:b6:59:a1:b6:36:8a:35:
                    53:83:13:5b:48:ac:d9:71:62:d2:27:b3:6e:60:29:
                    c6:bd:b5:d3:36:d0:69:e0:d2:ff:b3:df:63:19:19:
                    01:c7:d6:2b:64:d9:84:91:32:63:cd:40:f7:c3:c1:
                    d9:f1:c7:0b:6f:1b:47:c0:c7:9b:b7:10:dd:32:68:
                    7e:d2:14:02:34:22:68:c8:34:c7:aa:18:f9:ad:79:
                    b1:1e:58:16:be:46:b3:4c:e0:be:60:f7:44:53:44:
                    99:81:07:a0:98:9e:15:4b:18:25:e8:17:2c:fd:28:
                    6a:03:10:65:b5:a5:b6:88:e7:ec:14:e3:ff:ac:7e:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4B:45:90:1E:2F:0D:33:47:BC:3B:C5:C2:58:DD:57:BC:FA:3E:E3
            X509v3 Authority Key Identifier:
                keyid:35:76:4D:94:20:7D:44:D8:9A:70:55:7C:66:D2:A2:EF:3D:1C:54:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/NXZNlCB9RNiacFV8ZtKi7z0cVIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXZNlCB9RNiacFV8ZtKi7z0cVIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/88A3B4BA3F0511F1BE3FC0C2C9833773/045117A63F0611F1B36B08F4C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:a9:bd:24:c9:61:d4:21:ab:ac:92:ff:ff:ff:6e:47:91:04:
         22:6e:4a:25:14:00:22:8d:0d:f8:4c:69:d0:98:dc:2b:e2:da:
         8d:db:e3:ea:2a:8f:6d:1b:ca:fb:12:50:62:58:46:0f:b4:ba:
         41:e6:19:3b:6d:cd:f6:8b:0c:56:77:99:1a:20:6d:0c:c0:77:
         8a:95:0a:b6:31:b7:65:11:76:93:aa:d9:82:32:52:e2:71:85:
         1a:56:40:2d:6a:29:cc:8a:d8:52:ca:01:dd:62:0a:ea:8a:83:
         dc:52:8b:da:9b:29:83:92:fc:5f:d8:46:06:e8:4b:c8:25:2d:
         9a:ce:8e:aa:7b:41:5e:b4:dd:d4:b0:52:7a:34:01:65:ff:d2:
         97:f9:82:9b:f4:c1:68:24:8d:eb:21:31:67:d3:4f:ec:0d:ae:
         1e:aa:40:c6:f7:b7:58:57:11:30:d5:6d:20:54:99:09:b3:65:
         99:62:fd:25:b6:53:5e:0c:5e:f9:15:20:28:15:ea:0e:78:65:
         9a:52:31:56:59:c5:c4:6e:e4:1b:a3:c9:ae:62:b4:1c:9f:7c:
         ba:2c:53:3b:c7:cf:d0:44:6b:9a:ca:10:90:5b:23:dc:35:a5:
         9d:41:25:46:bb:eb:62:f5:6c:68:b0:5a:30:d7:56:7b:d1:9b:
         b9:f3:b8:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 28 16:43:13 2026 by rpki-client