Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/A6E025D4CEB111EDAE111B61C4F9AE02.roa
File:                     A6E025D4CEB111EDAE111B61C4F9AE02.roa (raw, json)
Hash identifier:          H62V7SkEUjfULsyQShG7dI+473Zoo/mZ45UEwwtyh80=
Subject key identifier:   FB:B4:7A:33:6F:F9:DB:5F:C7:96:D3:ED:78:9B:74:49:93:59:AC:B7
Certificate issuer:       /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial:       025B
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/A6E025D4CEB111EDAE111B61C4F9AE02.roa
Signing time:             Fri 29 May 2026 02:32:42 +0000
ROA not before:           Fri 29 May 2026 02:32:42 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        2404:bf40:8001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
                          rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
        Validity
            Not Before: May 29 02:32:42 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18faca-a059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:f6:11:28:bf:34:79:2d:fa:14:ea:dc:73:
                    56:19:b9:c4:94:a3:1b:49:44:cb:24:36:1e:49:b9:
                    37:9b:b0:29:3b:6f:71:1b:26:c2:5c:a2:88:d9:c4:
                    65:47:2b:98:9b:2a:ab:6b:4e:fa:dd:3f:01:07:b6:
                    32:a3:a6:4e:8d:14:b0:83:74:a7:75:a3:20:34:70:
                    55:ca:da:5b:df:92:2c:9e:86:43:97:14:e0:07:13:
                    12:de:43:f1:1b:45:19:27:39:8a:db:9d:8c:da:4e:
                    14:ad:89:b8:78:74:9d:0b:2d:6a:24:40:d4:67:fa:
                    a3:7f:f4:28:b9:43:a8:bc:0f:43:94:e8:f6:8a:5b:
                    c2:97:44:80:f3:41:e7:e4:5b:8b:c5:65:e9:94:45:
                    3f:24:69:aa:f1:ec:1d:d6:ed:1d:ce:85:76:41:5e:
                    96:ad:97:0a:0b:54:e5:43:64:28:49:9d:e1:99:e7:
                    0f:b6:67:d6:fc:e2:81:f6:b8:02:4d:74:d6:d4:d6:
                    d0:04:c0:2b:11:55:14:08:60:e2:a4:a0:b7:50:40:
                    75:81:26:87:7e:80:1b:c5:98:65:e9:34:bc:0a:96:
                    50:b7:2f:79:e0:7c:09:ca:03:da:e5:cd:da:5d:fb:
                    ee:f8:6e:2b:81:cb:22:dc:89:8c:d4:bf:d1:f8:d7:
                    9f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:7A:33:6F:F9:DB:5F:C7:96:D3:ED:78:9B:74:49:93:59:AC:B7
            X509v3 Authority Key Identifier:
                keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/A6E025D4CEB111EDAE111B61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bf40:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:71:b2:ca:5b:e4:dc:71:f7:19:39:5d:07:ac:f8:a0:b1:
         48:36:f5:1e:75:ef:74:05:80:ec:20:63:3a:6e:f3:82:41:25:
         3e:73:a9:b2:f3:da:e2:9b:f0:f7:4c:f6:28:d2:73:29:0a:65:
         e0:a2:07:0d:f4:e0:ee:be:75:31:51:d4:55:24:7f:6e:25:b3:
         50:7e:da:b9:b6:67:ce:4d:e2:5b:f5:30:91:3c:51:2e:9f:2a:
         cd:e5:c8:d7:1a:3e:9e:7c:dc:01:30:1e:21:c2:a1:55:87:ae:
         88:13:2e:7d:6f:a5:db:87:6a:98:d3:cc:76:3b:2f:c8:d1:dd:
         5a:d9:30:14:40:26:7f:ee:64:ec:dc:10:d6:77:fb:c0:b2:04:
         e2:3b:2b:29:15:34:40:03:5a:93:57:84:76:10:da:94:c6:89:
         5e:66:db:2f:57:9e:aa:6e:76:3c:a4:3d:03:71:ce:4d:5b:41:
         61:0f:10:5f:e6:8f:ce:bf:13:a4:9f:38:14:51:90:7b:e4:b1:
         9f:95:68:d5:bf:2b:64:93:90:bf:2f:ce:d1:fe:62:94:bc:e2:
         3a:35:14:98:07:58:a3:dd:33:e5:c6:c7:9c:0e:e1:3b:71:8e:
         c4:22:67:be:84:8d:0e:87:d6:95:4d:d2:b2:78:82:c3:40:71:
         13:c1:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:28 2026 by rpki-client