Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/EE42117C927511F18A54FCC54511F970.roa
File:                     EE42117C927511F18A54FCC54511F970.roa (raw, json)
Hash identifier:          4onIQnShgHHglJV/eY63U0D9thFh3TgjTZuJUpaZPkM=
Subject key identifier:   D8:B3:42:A4:34:E8:27:63:A6:68:59:76:1A:D2:96:9B:C1:79:0E:91
Certificate issuer:       /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258
Certificate serial:       34
Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/EE42117C927511F18A54FCC54511F970.roa
Signing time:             Fri 07 Aug 2026 15:37:43 +0000
ROA not before:           Fri 07 Aug 2026 15:37:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     174
IP address blocks:        162.4.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258
        Validity
            Not Before: Aug  7 15:37:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a75fbc7-0bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:fd:e4:86:05:d1:09:30:27:6b:36:79:b4:
                    ca:d1:bb:6c:1e:d5:94:a2:09:6a:3e:ac:54:70:25:
                    d9:f3:95:b4:d9:c4:0b:63:3b:77:83:14:6d:fb:c2:
                    13:8a:c0:19:49:1c:07:29:e3:80:ae:6f:8b:a6:ac:
                    c9:fb:9c:ec:09:16:5b:f1:fe:07:06:2b:ad:e2:da:
                    bd:cd:4b:c9:ff:06:2c:96:8e:cb:9e:c3:9d:b9:7f:
                    be:e4:e8:df:96:b7:1d:a0:be:25:ba:35:fe:01:b5:
                    39:6e:29:fb:14:b9:5e:31:97:64:e0:9e:9c:13:ca:
                    03:9c:90:0b:5f:65:a3:57:3d:91:1b:93:cf:b1:be:
                    9c:07:53:7c:bd:bc:c3:89:c4:2d:4b:04:4f:be:44:
                    a1:b3:2a:48:44:84:f0:3c:da:10:af:9a:43:e3:46:
                    a3:8b:cf:11:e9:33:c6:8d:aa:f9:d6:3e:39:4d:45:
                    20:33:05:c4:a6:c4:61:84:23:c6:46:83:59:ac:61:
                    64:d2:4c:cf:21:58:a9:06:ff:68:dd:df:3c:2d:a9:
                    2d:cd:7a:e2:03:33:66:17:6e:ac:fb:e6:e6:70:2e:
                    a0:d0:20:41:34:dd:01:1a:76:72:af:fc:43:32:e1:
                    4f:0b:c1:01:89:cc:18:f3:f9:86:5b:02:d4:b8:0d:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B3:42:A4:34:E8:27:63:A6:68:59:76:1A:D2:96:9B:C1:79:0E:91
            X509v3 Authority Key Identifier:
                keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/EE42117C927511F18A54FCC54511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:8f:8b:ca:54:48:b6:22:a7:71:59:e9:63:b2:cd:a5:e5:c0:
         6a:24:70:29:4d:dd:1a:8e:c9:3f:80:19:7a:69:89:56:43:3c:
         2f:f7:04:e2:85:ec:9d:a9:55:55:dd:b8:24:17:bd:d8:39:b8:
         56:1c:ee:63:ee:26:17:58:ff:32:aa:20:e8:95:f9:31:5b:72:
         a3:c1:5a:2a:0a:95:68:af:30:e4:4b:05:a8:94:6b:1c:ad:c1:
         b8:61:46:a6:eb:83:16:3f:fd:47:35:62:b3:8c:de:a6:af:c2:
         fe:0e:16:07:97:6c:b9:84:a6:31:30:88:dc:c9:f7:1c:ec:6e:
         89:dc:0f:9d:b5:ab:5b:ed:98:1f:9d:c6:8d:12:7f:2a:08:99:
         a6:6d:5a:ab:2e:3e:b4:cb:d4:70:9f:46:8e:29:a1:e9:0a:94:
         61:c9:51:7b:7a:14:b2:16:da:0d:6c:49:a4:d7:a8:c5:3f:ef:
         08:fc:7a:06:cc:cd:c0:ff:70:fc:71:e7:2b:89:ee:c3:cb:b7:
         56:cc:ac:e8:b8:a3:6c:4f:15:3d:c3:b0:85:6c:c1:4c:bc:3f:
         5b:9c:53:0f:d4:3f:3a:d2:8d:ed:b5:a8:e5:68:d3:7d:94:44:
         2c:79:e0:4a:32:51:67:5b:4e:0f:51:0c:59:8f:77:6a:c6:0c:
         0c:52:11:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 07:21:45 2026 by rpki-client