Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/B3FF987E5B8211F19BF8DAE6A7833773.roa
File:                     B3FF987E5B8211F19BF8DAE6A7833773.roa (raw, json)
Hash identifier:          h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=
Subject key identifier:   24:A6:1D:7F:B1:8A:35:E6:98:5C:B9:00:00:AF:2E:94:33:77:0C:06
Certificate issuer:       /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Certificate serial:       08
Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/B3FF987E5B8211F19BF8DAE6A7833773.roa
Signing time:             Fri 29 May 2026 17:20:35 +0000
ROA not before:           Fri 29 May 2026 17:20:35 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     133694
IP address blocks:        162.4.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
                          rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
        Validity
            Not Before: May 29 17:20:35 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a19cae3-b911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:6d:1a:de:af:ed:08:bb:49:bd:8d:07:d6:
                    84:be:b0:3d:e8:c7:7c:d5:da:8d:a3:d6:3c:7b:03:
                    9a:39:7f:d3:36:00:b5:ac:d0:70:2b:cd:ea:1c:b8:
                    9f:0a:8d:71:9e:17:0f:50:1f:69:31:2c:b9:63:68:
                    21:3d:83:39:0f:03:d2:e3:c4:5d:7e:31:13:51:15:
                    05:a4:ff:6c:5e:e9:23:4b:9e:9b:52:96:d6:6f:d2:
                    81:36:62:9b:9a:df:ee:ed:bb:03:20:89:69:69:8e:
                    05:ad:63:eb:43:2d:6a:da:97:2c:c4:a1:59:88:58:
                    22:3a:64:de:0a:03:f6:1d:b5:07:7d:bb:37:24:de:
                    d0:d4:dc:36:4c:08:e3:4a:82:99:47:88:78:36:28:
                    8f:bc:84:16:37:78:b9:c3:7c:4d:05:a3:4b:ef:26:
                    dc:95:e6:65:05:df:85:f6:7f:7c:3c:d5:16:43:c7:
                    5f:a9:34:7c:56:af:a2:aa:93:00:89:1d:df:a2:52:
                    aa:21:27:bb:e9:fe:15:95:86:de:da:05:0e:fa:09:
                    d2:44:1d:81:f5:14:63:ea:82:76:d8:38:e5:3e:94:
                    39:4c:65:55:8a:4a:e4:ea:35:66:48:5d:d1:5c:cc:
                    a7:c4:d5:d3:12:27:33:ac:55:d3:90:24:80:7e:9c:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A6:1D:7F:B1:8A:35:E6:98:5C:B9:00:00:AF:2E:94:33:77:0C:06
            X509v3 Authority Key Identifier:
                keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/B3FF987E5B8211F19BF8DAE6A7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:4e:b7:cd:ff:aa:55:75:83:03:7f:4b:71:03:c8:12:90:29:
         d5:24:8f:9a:74:fb:f2:b0:90:14:7f:0a:77:dc:6d:11:8c:41:
         97:c1:c4:17:77:1a:95:e2:9f:d1:87:b7:96:66:16:ca:fe:d8:
         0c:78:35:55:f9:19:fa:0d:e0:7c:bf:29:df:43:16:2d:dc:41:
         3d:d1:29:3a:5c:7f:38:ba:f4:55:5b:57:fb:f5:6d:94:f6:1a:
         5d:0b:9e:00:13:c6:a2:bb:eb:d1:01:65:e6:a1:bb:86:8d:86:
         30:dd:b8:9f:af:f6:68:e6:6c:8d:91:6c:e0:7c:59:6a:c8:40:
         9f:22:7c:4a:fe:ec:a4:9d:79:72:38:80:1e:32:71:cd:b6:40:
         a0:8d:92:57:f5:58:3d:9f:57:fa:e6:35:cb:7e:32:a6:02:25:
         3f:72:41:89:0a:de:2b:6c:9f:c2:5e:d9:4e:36:9a:30:4d:58:
         11:1b:3e:f3:60:38:50:44:a2:93:f1:29:7d:af:fe:df:47:57:
         99:96:62:3b:eb:d5:b7:81:7e:d4:70:a8:3b:ae:43:ad:21:69:
         5c:05:48:10:ca:d0:77:14:e9:6c:7b:d2:1d:e0:94:01:61:a7:
         b1:ca:8f:2d:2b:0d:9b:ac:8d:73:ac:1b:36:4a:08:ef:50:58:
         00:47:0a:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:00 2026 by rpki-client