Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/B18B4F928E6911F18BD9FF403C11F970.roa
File:                     B18B4F928E6911F18BD9FF403C11F970.roa (raw, json)
Hash identifier:          UTRa99Fy9FPq7q5R0rWgcHldc6ZYmjVdNqMG3ubrCnw=
Subject key identifier:   2B:53:36:BB:BF:40:87:19:C5:7F:C2:C2:54:EA:2A:3D:8B:49:F0:D2
Certificate issuer:       /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial:       0439
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/B18B4F928E6911F18BD9FF403C11F970.roa
Signing time:             Sun 02 Aug 2026 12:00:03 +0000
ROA not before:           Sun 02 Aug 2026 12:00:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9420
IP address blocks:        2001:df0:a940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
                          rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
        Validity
            Not Before: Aug  2 12:00:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6f3143-31f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:d1:bf:14:3a:af:3d:59:2f:0e:f3:28:45:
                    74:eb:5c:a7:fe:b6:9c:4c:39:c5:d9:b2:ae:c7:fd:
                    ce:96:a4:d4:ff:ef:cf:25:8c:75:33:da:e5:b9:88:
                    7c:4d:6c:ff:73:ba:bd:12:96:35:67:92:ab:b0:16:
                    f0:25:0e:a0:7f:1c:2b:73:1c:81:66:cd:f4:33:a1:
                    a1:c1:32:d6:bd:3c:54:bf:aa:08:04:ec:a8:37:ad:
                    f5:99:ba:2a:c2:cc:29:9f:69:5d:e0:cb:36:b2:41:
                    61:75:d1:cb:77:eb:62:ee:53:14:41:42:27:f7:da:
                    b1:13:49:8b:b5:cd:5f:e1:78:90:b3:00:59:ef:ea:
                    86:b6:f9:bf:b9:82:bb:89:02:a6:a5:27:14:8d:d4:
                    48:72:d0:d3:2f:41:e0:4f:80:10:8e:88:3a:5d:ae:
                    e4:13:56:51:91:6d:52:f8:a8:2e:bf:1d:17:0e:03:
                    aa:9b:92:0b:06:39:40:9d:05:5e:57:8b:6b:cb:ef:
                    b1:7f:d9:c5:12:e2:da:ec:6d:94:21:11:a6:0d:0c:
                    1f:3f:bf:1c:6f:a6:86:97:43:45:4e:cb:c8:48:6f:
                    15:d4:7e:83:35:a6:59:14:9e:2f:a9:33:0a:dd:02:
                    6e:22:71:c4:3f:32:fd:32:a5:40:fe:33:9d:f9:41:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:36:BB:BF:40:87:19:C5:7F:C2:C2:54:EA:2A:3D:8B:49:F0:D2
            X509v3 Authority Key Identifier:
                keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/B18B4F928E6911F18BD9FF403C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:a940::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:c8:0a:f6:2a:56:c2:9e:0e:c2:73:d2:b3:ad:dd:8f:0a:
         e3:47:f0:11:d4:cb:35:fb:ef:df:98:dc:9e:5e:b7:51:cb:68:
         38:19:cd:d7:29:23:2d:89:3e:cd:f0:22:63:a6:7d:ed:ee:c2:
         59:92:ec:b7:9b:76:17:87:ac:96:ed:cd:a6:01:e6:ee:70:e2:
         8b:f1:36:76:1a:8e:c9:7e:b2:29:d1:fb:60:8c:d9:76:e2:03:
         53:ce:96:b0:5b:0c:27:79:f5:85:a1:59:9b:9f:76:2f:e7:0e:
         3d:5b:d4:be:84:37:b7:b0:38:6a:a7:78:1e:af:c3:e3:db:20:
         bd:77:0f:af:2a:7f:b8:d5:af:5d:64:8c:c1:42:27:d4:9b:7d:
         cb:d8:db:36:46:65:b5:5e:4d:7a:70:98:a3:d2:ca:80:2c:71:
         10:5d:74:16:c2:4d:db:0b:71:a3:7e:34:da:fc:32:1d:2a:88:
         66:28:0e:e0:ca:92:cc:40:d9:f3:36:1d:a0:27:c4:7e:bc:b5:
         1c:99:21:10:32:34:47:d1:ae:06:c9:97:e1:48:46:9b:0b:6c:
         56:cd:85:92:02:5c:d6:4a:07:69:b0:13:46:68:c9:40:15:4a:
         1d:f1:55:f0:e6:68:c5:e2:1a:01:c2:3a:b5:2d:38:38:50:53:
         98:77:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:20:18 2026 by rpki-client