Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/83E78C14713511F1AE5C985D73A30FBC.roa
File:                     83E78C14713511F1AE5C985D73A30FBC.roa (raw, json)
Hash identifier:          l/vRgwoEsx8MvAV5uaw1m2BHaiwrdgs1W/jJQWqVTjQ=
Subject key identifier:   EB:D6:CC:31:82:14:2C:27:F8:FA:3A:70:0C:E5:49:BB:59:DD:11:32
Certificate issuer:       /CN=A91676C8/serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
Certificate serial:       38
Authority key identifier: 47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/83E78C14713511F1AE5C985D73A30FBC.roa
Signing time:             Fri 26 Jun 2026 08:03:28 +0000
ROA not before:           Fri 26 Jun 2026 08:03:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154723
IP address blocks:        162.4.64.0/23 maxlen: 23
                          162.4.64.0/24 maxlen: 24
                          162.4.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl
                          rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676C8, serialNumber=47B5B1F30C6BBDBB11651CC6A078FEA77237A2E2
        Validity
            Not Before: Jun 26 08:03:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3e3250-ba5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:57:a1:0e:52:d8:1a:8c:cd:44:dc:2b:10:
                    f7:f6:00:07:79:8b:e6:6b:8a:a1:90:c3:75:d8:0f:
                    b6:59:39:cc:e5:da:c6:c1:1e:b1:c7:db:27:c7:61:
                    92:e3:92:14:88:d8:05:90:7d:da:9d:e3:9f:25:6f:
                    32:03:40:f9:5c:6e:32:5e:1e:fa:d5:2f:67:e1:d9:
                    ad:8b:6e:f4:87:43:e7:7c:b8:3a:25:74:eb:e0:72:
                    db:f9:1e:1a:b1:eb:25:81:3c:2b:c5:9b:75:79:67:
                    35:84:1f:98:6f:31:8d:e3:0d:f2:5d:5e:73:33:2d:
                    b5:43:ea:39:e5:35:5c:39:95:f1:4c:74:af:5f:8c:
                    65:f7:79:86:65:11:8c:eb:fb:f7:6e:88:5e:d2:99:
                    a6:c7:44:d8:95:f4:dc:6f:8a:fc:b4:7b:85:8a:70:
                    0d:49:69:5f:fa:e1:c0:3d:68:67:8d:f8:91:84:28:
                    16:27:7f:40:10:b0:e3:f6:10:51:a1:85:91:67:cd:
                    89:82:2d:ac:9c:74:20:03:bb:8d:7a:f1:dd:7a:6c:
                    84:69:65:f7:cf:d9:fa:ea:5c:88:b5:57:f9:71:b7:
                    14:df:56:7a:91:64:dd:75:c7:72:35:55:64:d5:a3:
                    b3:7e:93:54:ad:55:5b:82:ba:b0:4a:7c:07:98:f1:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D6:CC:31:82:14:2C:27:F8:FA:3A:70:0C:E5:49:BB:59:DD:11:32
            X509v3 Authority Key Identifier:
                keyid:47:B5:B1:F3:0C:6B:BD:BB:11:65:1C:C6:A0:78:FE:A7:72:37:A2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R7Wx8wxrvbsRZRzGoHj-p3I3ouI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/2F9B022644A311F1BDE90A3FB1833773/83E78C14713511F1AE5C985D73A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:83:fb:85:dd:f2:a0:ad:67:b1:b3:33:7a:58:6c:79:fe:13:
         70:4b:69:ec:9e:04:ad:91:f3:6c:44:ed:47:99:21:30:bf:a3:
         f4:4c:1a:2d:23:b2:69:ca:a9:98:30:9d:ad:43:5e:8d:cd:ea:
         99:f2:9e:4c:ba:6c:33:a5:af:f9:86:f7:5b:ec:1d:66:00:62:
         c0:5e:48:39:89:1b:07:5e:f8:6d:8d:30:f1:e8:3a:75:9a:09:
         cc:05:f3:e5:8a:a6:a8:6f:c2:cb:b8:a3:4d:1f:c2:1f:9b:03:
         93:54:7f:bc:69:ae:f2:77:37:c2:1e:b9:f3:99:33:1c:8e:95:
         d2:84:e6:dd:8f:cb:31:42:cb:33:db:79:65:65:1e:69:db:1f:
         17:23:6f:3b:b0:7f:93:95:d8:9c:ac:69:10:ef:7c:f1:58:d1:
         48:3e:d7:86:d0:f8:cd:85:bb:fe:69:70:46:9b:1f:61:4c:d7:
         79:de:61:3c:1a:ae:32:a0:f0:a6:10:4e:74:9a:b6:9e:28:d4:
         7e:0a:55:99:7b:3b:e4:be:7b:ee:de:8b:fd:d4:d2:41:25:f4:
         21:7a:8f:1d:4b:ce:8d:42:37:62:37:5c:3f:42:dd:26:f8:16:
         83:32:18:25:7c:3e:5a:a2:49:f3:74:1f:57:75:c1:6d:01:2c:
         89:b1:82:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:26 2026 by rpki-client