Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/A8DB81885E3911F1AE025C80017AAC22.roa
File:                     A8DB81885E3911F1AE025C80017AAC22.roa (raw, json)
Hash identifier:          iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=
Subject key identifier:   F4:A5:38:65:3D:79:1B:90:05:CA:62:91:2B:E6:03:FD:A2:BA:E2:D9
Certificate issuer:       /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial:       02
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/A8DB81885E3911F1AE025C80017AAC22.roa
Signing time:             Tue 02 Jun 2026 04:15:16 +0000
ROA not before:           Tue 02 Jun 2026 04:15:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149835
IP address blocks:        162.4.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
                          rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 04:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
        Validity
            Not Before: Jun  2 04:15:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a1e58d4-9fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:fd:af:44:c7:d1:3b:f9:6e:95:e5:31:0e:
                    5a:91:a5:8b:f7:c4:83:cb:74:75:5c:af:5d:4e:e8:
                    aa:03:dc:b3:62:4e:0c:c6:47:d1:80:59:08:20:b4:
                    22:bf:d7:a8:f9:c0:37:70:45:5b:26:3b:84:1f:b1:
                    1a:86:4e:69:39:d7:2c:c0:3e:c3:f7:44:1e:48:71:
                    3a:59:5d:65:6c:27:da:77:5b:0d:b5:2b:f8:62:14:
                    0d:99:77:6f:cc:b7:fa:cc:60:60:59:61:3f:31:8d:
                    73:ed:07:3e:84:80:59:2a:bf:0a:aa:a3:1c:4a:3e:
                    3b:62:5d:56:b4:ff:79:c3:65:f6:16:b1:a4:36:47:
                    90:be:f0:67:1e:cc:d3:24:6d:51:f0:75:41:4d:5b:
                    22:19:21:54:42:d6:04:b9:77:58:90:19:a1:af:ef:
                    c5:06:94:48:19:b6:7f:41:87:e3:13:6e:2c:2f:1a:
                    94:ab:82:74:11:6c:1b:66:a2:ab:a1:68:43:4c:7e:
                    f4:b2:d2:bc:de:dd:45:2e:f5:95:83:28:29:3e:8d:
                    b7:52:74:f4:a2:e9:9f:35:d7:50:fb:41:33:01:23:
                    25:24:a6:7d:0e:58:aa:15:ce:3f:9c:93:9d:31:90:
                    b1:4e:f5:7a:67:3a:00:b5:1b:b3:53:65:90:3b:38:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:38:65:3D:79:1B:90:05:CA:62:91:2B:E6:03:FD:A2:BA:E2:D9
            X509v3 Authority Key Identifier:
                keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/A8DB81885E3911F1AE025C80017AAC22.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:dc:20:9f:55:eb:57:9c:a7:10:1a:5f:6f:eb:7d:38:a8:
         bc:f9:22:70:7c:0f:f1:16:12:ae:67:40:aa:9a:20:70:11:7d:
         12:5b:bd:fc:23:0f:c2:77:c9:76:89:9f:01:46:32:46:27:c2:
         06:3c:d0:cd:3e:26:f9:dc:17:9a:d9:62:fe:5b:43:b2:19:2f:
         56:c3:f5:a0:fb:28:8d:d7:00:f8:fe:7b:9a:1a:bb:c7:07:d6:
         15:77:d0:23:c1:b8:e7:a9:54:ad:ad:75:4f:ad:8f:30:c5:bf:
         d4:ee:ef:ee:c3:7d:da:66:90:1f:ec:04:65:44:a0:5a:d7:ee:
         c0:69:0e:a9:f6:07:83:18:5e:97:d3:eb:55:9f:00:c1:2c:31:
         b3:c5:fb:5d:77:ae:04:ee:0e:21:10:3e:00:24:49:c7:dc:10:
         4c:8c:12:7b:bd:2d:b6:b4:be:85:cb:18:d3:b0:0c:59:e3:cf:
         27:3f:3d:0a:a6:33:e8:5a:7c:de:00:bf:38:4c:61:57:ec:40:
         f5:33:22:f6:4b:06:a7:3d:1a:81:c6:b0:0e:17:05:d2:12:63:
         e4:6e:52:e0:f5:16:bd:d7:9a:7d:71:76:b9:40:10:fb:b4:0a:
         b2:82:f1:5e:d9:a7:60:5c:ea:fa:a7:18:d3:71:f8:41:8b:79:
         60:c1:55:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:06 2026 by rpki-client