Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6318EE6A194711F193E941873C3D8C67.roa
File:                     6318EE6A194711F193E941873C3D8C67.roa (raw, json)
Hash identifier:          PRZUDRs/MzrgRRpDt3cUNdwUtV0YnP0Yc80Rieef+EU=
Subject key identifier:   41:9F:F8:B0:EC:EC:62:68:C1:9E:F1:26:41:23:2B:D0:17:6D:C8:20
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       041A
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6318EE6A194711F193E941873C3D8C67.roa
Signing time:             Wed 05 Aug 2026 01:49:31 +0000
ROA not before:           Wed 05 Aug 2026 01:49:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     208171
IP address blocks:        2001:df0:d840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 00:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Aug  5 01:49:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7296ab-dd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:97:03:50:73:af:37:ef:77:49:ad:e8:27:
                    14:e3:42:0d:16:f1:e4:0e:c3:22:eb:9d:ab:8d:12:
                    6c:e9:f0:95:5c:85:78:68:9e:6b:c9:96:ad:0a:26:
                    6d:02:71:bd:9e:35:38:af:b9:8e:b1:c4:2d:eb:fa:
                    c0:a0:23:94:d7:86:16:a2:d5:c7:b8:fd:b4:f3:7b:
                    03:e3:02:15:f2:f5:92:60:ff:f0:5d:d6:a9:47:28:
                    7e:fc:26:52:79:74:53:5d:21:00:04:8d:d9:ce:92:
                    e5:3f:e7:69:a6:4b:ad:74:6c:df:0c:0e:44:60:3e:
                    f3:1c:c9:48:f5:39:d0:0c:0c:ea:b6:2b:63:e7:58:
                    0c:76:a2:b1:af:8b:90:23:4a:9a:ac:89:65:78:38:
                    ce:7f:9e:c5:d3:b6:29:7f:1a:1f:c8:58:4f:3d:fb:
                    02:d4:44:5f:a0:71:24:61:7c:6d:78:1f:ad:60:6b:
                    df:83:fe:1a:16:aa:57:0b:f2:19:8c:68:c9:91:0d:
                    02:91:be:03:b1:b9:0d:56:4a:8d:d5:30:90:82:dc:
                    3e:19:49:72:fb:76:e0:66:05:58:a1:47:9d:5e:c7:
                    2c:2a:c8:82:a7:9e:b6:a4:69:97:2b:72:36:8f:bb:
                    56:1b:46:25:4c:17:5d:a4:e0:ec:85:4e:ee:26:b4:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9F:F8:B0:EC:EC:62:68:C1:9E:F1:26:41:23:2B:D0:17:6D:C8:20
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6318EE6A194711F193E941873C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:d840::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:ad:1e:7a:67:e2:26:c8:11:3f:1d:e3:78:ce:aa:98:24:
         92:00:4c:6a:dd:7d:ba:10:d8:87:35:6e:b2:7e:af:0f:dd:8d:
         4d:24:4d:ba:cc:46:16:19:57:8c:78:44:13:71:fd:50:a3:04:
         79:9e:36:25:a3:9b:0f:7e:51:11:c3:aa:3b:58:b2:69:94:4f:
         05:12:29:45:2a:3a:a2:0d:4b:cc:bf:99:20:1a:d7:a5:55:1a:
         84:62:8d:c3:cb:e3:50:1a:af:e7:16:00:60:64:28:cd:28:cf:
         ab:20:76:0f:53:a8:01:fe:5f:76:0f:f6:ae:26:7d:d3:3b:b3:
         1a:8b:49:8f:73:32:d9:14:62:67:b8:8b:67:c6:1e:da:99:f1:
         2a:ee:74:0d:e6:f2:30:26:23:e6:05:92:3c:21:24:13:d7:05:
         80:b8:1f:a7:4f:fc:87:59:f3:96:73:1b:59:0b:ab:8e:a0:4d:
         11:d3:cd:0e:a1:4b:7f:45:9e:91:34:c5:3a:0e:ef:7c:96:d2:
         a3:a4:3b:4c:c9:91:97:5a:ca:c0:a4:2d:91:8a:35:14:91:5a:
         86:30:32:43:65:9c:c3:dd:9b:dd:11:e1:a2:09:d6:9c:ab:ac:
         c0:95:41:55:94:8d:fb:23:3d:1c:f8:ba:d4:a2:34:30:b2:0f:
         5d:2a:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:08:10 2026 by rpki-client