Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/243C67FE55CD11F19CECB2B5A8833773.roa
File:                     243C67FE55CD11F19CECB2B5A8833773.roa (raw, json)
Hash identifier:          Gh2g+A+hy3CyM7ywchuFzI/qMxiOQm+zUJkUhcqgKUg=
Subject key identifier:   9E:F4:33:8D:60:B3:22:B1:88:F2:87:8A:8B:A2:0B:85:48:CC:8A:EF
Certificate issuer:       /CN=A917BEA1/serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736
Certificate serial:       06
Authority key identifier: F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/243C67FE55CD11F19CECB2B5A8833773.roa
Signing time:             Fri 22 May 2026 10:58:19 +0000
ROA not before:           Fri 22 May 2026 10:58:19 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     150750
IP address blocks:        162.4.162.0/24 maxlen: 24
                          162.4.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA1, serialNumber=F1A4612A06E10EF5BD963173EC26538B7D403736
        Validity
            Not Before: May 22 10:58:19 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1036cb-adb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:9c:1b:24:4e:d7:21:43:a6:7c:f9:b1:77:
                    2e:b8:26:e8:cb:52:ad:43:da:a1:1f:1d:01:9c:2c:
                    6d:cf:72:b6:da:82:52:b8:3d:a3:71:c4:37:0e:c6:
                    69:f2:15:e5:a4:b3:b8:c1:67:ab:ee:a3:d6:92:3e:
                    c2:1e:72:a6:43:17:64:86:63:3e:de:f2:cb:ad:04:
                    12:06:6a:69:b4:55:73:99:da:91:f5:9c:ce:d2:dc:
                    d3:f4:b0:fe:1e:4e:a8:c1:1f:77:d0:85:0b:f2:71:
                    ff:86:73:29:2d:a3:75:d1:5d:ff:23:b3:97:87:9f:
                    14:b0:8e:28:02:f7:f6:06:ca:df:e6:56:8b:3d:1a:
                    41:31:85:33:a4:ba:85:c4:f0:4f:d1:b7:4e:ce:54:
                    77:e1:9b:ad:f0:c3:b4:c8:61:cd:76:ad:85:9f:a1:
                    80:b8:e6:cc:1a:b0:a4:e3:0e:b6:3e:a0:38:b5:35:
                    da:47:7d:37:a6:ec:31:50:45:27:b3:64:d8:bd:4f:
                    b1:64:3f:8e:7a:6d:ef:80:60:34:c3:2b:a7:63:57:
                    f4:1b:38:69:93:f6:98:19:6c:05:85:21:ad:66:79:
                    21:c8:65:fb:60:92:c2:48:12:45:8b:75:2d:b2:f2:
                    df:c1:b5:af:aa:e9:c8:eb:6d:2b:bf:9e:ed:af:b0:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:33:8D:60:B3:22:B1:88:F2:87:8A:8B:A2:0B:85:48:CC:8A:EF
            X509v3 Authority Key Identifier:
                keyid:F1:A4:61:2A:06:E1:0E:F5:BD:96:31:73:EC:26:53:8B:7D:40:37:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/8aRhKgbhDvW9ljFz7CZTi31ANzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8aRhKgbhDvW9ljFz7CZTi31ANzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA1/E71398C654E511F1AEEFDFE69C833773/243C67FE55CD11F19CECB2B5A8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:92:eb:ac:08:ea:ac:aa:53:46:9c:f7:ac:ab:8e:9b:39:
         a1:df:cb:d3:a8:05:4f:bb:8a:0a:4e:68:3b:2e:91:5f:99:72:
         38:57:60:cf:d5:d1:be:00:22:ba:af:86:7d:62:85:4a:5d:8b:
         3d:20:d2:55:7c:d0:ef:1f:0a:d5:ff:18:75:1a:52:eb:ac:94:
         87:b6:50:53:94:3b:9c:73:9a:7c:f9:62:20:26:0d:8d:78:fd:
         7b:a1:7d:89:31:c0:17:03:d9:e0:61:56:ee:70:be:76:28:32:
         35:e1:cf:83:b1:1e:80:1d:08:7b:0d:c8:47:f8:20:8b:20:2c:
         8e:6d:87:00:30:02:51:5b:0c:ef:db:60:ec:8d:9d:84:9a:a6:
         fa:d2:4b:f6:38:b3:e6:eb:9f:f8:f7:1f:df:4f:a3:b5:cb:5c:
         f2:1a:32:91:81:3d:6c:53:19:51:83:6c:4e:92:fa:d0:1b:e8:
         2b:f7:10:27:3b:f7:6b:c2:23:aa:23:d6:a7:73:8f:d4:e3:63:
         06:25:d1:1d:89:56:c7:8f:dd:fd:1b:f1:9d:d3:21:70:3f:d6:
         a8:37:96:55:44:11:4c:64:51:58:76:ce:8c:a4:d1:75:b9:2a:
         ff:bd:68:36:36:5c:b9:55:25:b3:25:a9:3c:ea:fb:69:78:c0:
         3e:34:1e:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:08 2026 by rpki-client