Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04C0B3B6438611F1A8FD19D2C4833773.roa
File:                     04C0B3B6438611F1A8FD19D2C4833773.roa (raw, json)
Hash identifier:          TTlN6RZzzEu2vOYfD+dZvygecXchnTrQP5Uc+fAkwqA=
Subject key identifier:   91:37:D1:6D:64:50:B3:A0:4B:8F:EC:40:B1:FD:BD:57:A0:0B:A9:5F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2ED7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04C0B3B6438611F1A8FD19D2C4833773.roa
Signing time:             Sun 31 May 2026 16:21:12 +0000
ROA not before:           Sun 31 May 2026 16:21:12 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141322
IP address blocks:        162.4.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11991 (0x2ed7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:21:12 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5ff8-6feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:67:19:46:4d:31:f4:5c:6f:98:5f:87:29:
                    3c:b9:20:73:a8:ff:71:56:ae:e6:3c:20:d8:f2:b6:
                    9c:32:53:23:1e:fc:b9:8d:48:e1:4c:33:79:39:62:
                    1c:7f:db:79:a6:88:30:73:cc:7d:46:8a:b4:c6:68:
                    89:54:91:2e:74:71:22:00:33:61:f3:00:0e:98:b5:
                    ee:7b:59:0a:c4:24:4f:d1:d1:6c:2e:1c:71:ff:ba:
                    fd:7e:4e:05:96:f4:d9:fc:c7:81:a3:f3:08:60:ad:
                    fc:f4:14:08:1b:74:d8:63:a9:1f:4e:44:17:f9:6f:
                    f8:7c:81:26:c2:ad:b8:df:d6:e9:b8:0e:56:bc:63:
                    e5:c7:1e:b4:04:18:98:9b:b6:8f:e8:27:7a:2e:76:
                    cd:5a:e1:70:85:fb:8f:87:3e:7a:bf:d3:a5:7d:ff:
                    84:2f:a4:b7:a5:e1:aa:7a:ac:d6:7f:f4:08:58:73:
                    e7:03:f2:c1:9f:d8:b9:6c:e6:31:60:1c:1a:44:de:
                    53:04:f6:1d:f1:9b:e2:9a:9b:7f:b1:5a:79:55:63:
                    58:0c:d0:37:21:a0:8b:98:33:1e:95:0a:af:80:1f:
                    e4:33:95:44:ee:84:39:65:18:0c:4d:b5:91:3f:f9:
                    26:42:86:0b:1d:81:3e:60:55:fb:1e:28:0f:8d:41:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:D1:6D:64:50:B3:A0:4B:8F:EC:40:B1:FD:BD:57:A0:0B:A9:5F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04C0B3B6438611F1A8FD19D2C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:51:e9:a8:16:fa:7d:0f:07:a6:95:08:86:ec:58:4f:7a:4d:
         73:c2:37:03:9a:2c:f3:98:3a:e8:d6:18:c9:d6:ae:7f:b0:6d:
         46:71:f4:c8:d8:37:f5:63:ed:3c:c4:ed:44:87:20:41:9d:5e:
         55:1e:cc:2c:3d:41:0d:62:0f:87:5a:47:05:97:56:c1:cf:f5:
         8d:7a:81:f0:d3:54:2b:a5:7b:79:0e:ad:70:a3:9d:0e:f9:34:
         85:67:6d:57:3a:87:dd:38:e8:36:ac:31:5a:35:a6:3e:66:8c:
         7d:f5:bc:6f:1d:47:07:e9:2b:76:15:3d:54:7f:3b:5e:44:4b:
         76:0a:da:e8:c5:ea:d8:e2:a2:3c:92:50:a9:28:f1:02:7f:04:
         76:c9:20:38:66:80:95:bf:39:db:bb:67:8c:a1:75:f9:e6:78:
         26:7c:18:60:1b:33:b4:3d:28:2a:25:d9:5a:8f:f1:08:b3:33:
         13:cb:a7:ec:4b:1c:92:8f:fe:0b:7f:73:c3:b5:81:ea:21:64:
         df:ea:c6:7d:ba:a1:29:7b:b3:b2:58:19:eb:81:1f:d9:7a:da:
         45:1b:2b:69:a4:a9:a3:24:48:e7:d8:af:17:07:2f:3e:eb:35:
         f8:b7:e2:0b:3b:65:e3:eb:5d:d3:b5:0e:0f:9a:ce:b5:39:d0:
         b1:bf:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:28 2026 by rpki-client