Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/E2D6A7984F5F11F190C0BD46C4833773.roa
File:                     E2D6A7984F5F11F190C0BD46C4833773.roa (raw, json)
Hash identifier:          DhEdJPW687P63CLaNT2Mz9aPqiwDP3BG1Z3glFSiYO8=
Subject key identifier:   F7:82:DA:7F:46:17:ED:5C:C2:31:16:D9:E4:78:B8:DD:9D:41:36:E0
Certificate issuer:       /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Certificate serial:       64
Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/E2D6A7984F5F11F190C0BD46C4833773.roa
Signing time:             Thu 14 May 2026 06:41:07 +0000
ROA not before:           Thu 14 May 2026 06:41:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153610
IP address blocks:        2001:df6:7640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
        Validity
            Not Before: May 14 06:41:07 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a056e83-0102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:4d:76:9a:b4:31:a8:a4:c7:f1:52:d8:ba:
                    db:bd:72:8d:b3:9b:f0:7b:eb:85:3c:ab:25:cd:12:
                    51:e2:35:ed:ff:c0:8a:ab:e8:2e:f0:9e:dc:4a:92:
                    a1:d8:95:e5:af:1e:70:f9:3c:1b:af:0d:fc:a8:64:
                    9e:29:9f:37:71:c3:af:90:17:42:32:e1:df:3d:05:
                    d2:c6:98:ce:90:a8:1a:08:c3:7c:19:d2:e9:79:03:
                    5a:5a:67:66:a7:a8:13:0c:7d:ca:e5:a8:33:9c:ea:
                    40:0e:5f:12:48:7d:44:d4:67:cb:8f:72:e3:e3:25:
                    fe:57:eb:2d:93:a8:3a:0d:13:b4:1c:d8:ef:5c:85:
                    37:38:4d:ca:8e:85:71:22:a3:63:67:64:e9:49:19:
                    73:46:f4:e4:fa:3d:ad:ed:07:18:70:04:cb:5d:69:
                    45:ec:d3:fa:5c:36:40:1f:20:5e:c8:8e:58:78:47:
                    07:2d:24:c3:fd:4d:11:df:cf:16:9d:65:3d:08:9d:
                    da:58:8f:1f:22:ca:6c:df:8e:ce:d8:b3:fc:12:47:
                    d6:f1:fd:d5:5c:f5:67:dc:cf:87:b0:71:30:18:15:
                    50:29:86:83:62:87:ba:44:f8:36:3a:43:40:bf:94:
                    32:21:e6:a8:c1:28:00:b9:e9:83:83:b8:0c:1b:27:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:82:DA:7F:46:17:ED:5C:C2:31:16:D9:E4:78:B8:DD:9D:41:36:E0
            X509v3 Authority Key Identifier:
                keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/E2D6A7984F5F11F190C0BD46C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7640::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:02:40:21:6a:b5:44:b7:1b:22:8d:56:15:e5:66:9c:5a:
         bd:88:2b:a7:ce:c7:96:99:3e:21:27:ef:6c:a7:4f:0f:00:97:
         59:59:60:ea:88:6f:6d:cc:da:39:78:1b:28:4b:72:52:a0:16:
         33:1a:7a:5b:1f:bd:4f:cb:68:d4:d7:ce:6c:ab:b8:9a:41:78:
         17:36:b4:db:bd:34:50:a9:41:29:cb:f5:c0:6d:65:34:c1:3d:
         78:5b:35:06:da:08:14:01:1c:27:75:70:0f:b2:aa:9b:1c:3f:
         10:88:0f:06:b0:6f:31:b5:e5:4c:90:59:12:33:59:09:13:af:
         3b:5d:08:31:88:3f:99:82:ee:8c:ef:1b:4a:fd:84:95:3c:4f:
         98:ff:b4:65:04:27:d2:59:95:66:cf:90:44:44:79:9d:fc:e8:
         b8:38:a8:71:a2:f0:29:45:27:0d:98:30:a0:d3:57:9e:d6:01:
         6d:66:e4:72:20:a5:01:19:ef:08:0c:0f:bf:08:af:d4:fc:81:
         6a:ca:36:1c:55:fb:53:12:79:f0:dd:1b:cd:c7:4f:9d:3b:e6:
         7a:d1:10:ce:e1:12:a1:04:e3:97:56:5e:a9:24:87:c3:ad:01:
         e4:36:c6:6c:e5:9e:48:9d:5b:5c:4f:ad:a0:06:3e:5e:61:27:
         d7:6a:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:59:34 2026 by rpki-client