Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/B0069018292511F198604A079E833773.roa
File:                     B0069018292511F198604A079E833773.roa (raw, json)
Hash identifier:          rvCiCw6odmw242yWKwXeXkCvn0sxoVd8NeC7DqhgIPo=
Subject key identifier:   8D:96:29:A1:9F:D3:CB:BC:9B:2E:9A:92:41:C0:87:90:3E:AB:30:E3
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1CF7
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/B0069018292511F198604A079E833773.roa
Signing time:             Tue 04 Aug 2026 14:17:23 +0000
ROA not before:           Tue 04 Aug 2026 14:17:23 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     30060
IP address blocks:        2402:79c0:f008::/48 maxlen: 48
                          2402:79c0:f00a::/48 maxlen: 48
                          2402:79c0:f0f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7415 (0x1cf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Aug  4 14:17:23 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a71f473-6997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:40:b9:57:85:c9:1d:ef:80:c9:1c:41:84:
                    01:bb:e3:36:26:0e:0e:42:8b:13:60:c3:28:9b:04:
                    da:71:eb:2c:84:e8:2f:ff:eb:0e:1c:74:bf:b2:84:
                    7b:67:55:ba:6d:15:9d:de:3d:28:15:cc:16:e1:74:
                    9c:0b:f9:15:ef:04:00:e2:ed:c0:de:3d:b9:09:9e:
                    cc:c7:75:03:4c:a4:45:01:d6:d0:7b:81:3c:d8:e6:
                    56:df:6a:71:fb:62:e4:51:55:26:9a:9e:a2:3b:da:
                    20:a3:04:f7:e5:aa:24:67:91:8a:b9:fa:2d:28:96:
                    3c:f7:32:c3:96:a9:d5:b3:2d:b5:d3:30:1a:39:0b:
                    e4:36:53:eb:0a:de:bb:31:72:0a:4d:70:e4:73:8f:
                    2c:46:17:42:82:ca:57:46:03:4d:49:a5:14:98:06:
                    27:5a:9b:a1:06:8d:ae:12:4b:b5:8a:18:bc:c2:31:
                    76:3e:60:17:0d:ef:d9:a4:9f:d5:1c:fe:10:8f:22:
                    79:25:15:ee:c5:77:a3:8e:2c:71:0c:bf:2d:d3:f3:
                    ac:71:79:9b:b5:70:f0:3c:d4:4d:ab:5b:7d:36:12:
                    54:9a:d7:8d:66:f9:8f:ae:98:2c:2d:ec:34:40:5d:
                    4e:20:11:75:5d:8b:61:41:c3:e1:52:ad:68:d4:57:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:96:29:A1:9F:D3:CB:BC:9B:2E:9A:92:41:C0:87:90:3E:AB:30:E3
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/B0069018292511F198604A079E833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:79c0:f008::/48
                  2402:79c0:f00a::/48
                  2402:79c0:f0f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:97:df:df:90:25:1d:81:24:92:7d:f8:bd:f2:e1:fd:72:
         b1:66:12:44:eb:83:ae:b7:b4:d1:ab:1e:9c:ff:d9:ce:09:99:
         d3:39:d6:fd:b3:18:06:f3:9b:c7:d6:0c:76:1e:bc:4e:cd:f4:
         5a:e0:bb:c3:1e:ee:21:42:1d:99:d3:36:8f:a8:d2:59:69:b8:
         60:1d:8a:ef:7f:9e:e3:be:3d:51:15:23:e8:4f:e9:d3:89:78:
         d6:b9:9a:f4:ba:75:c6:22:13:4b:c8:b1:d0:4a:0f:dc:15:f2:
         0d:97:97:bc:cd:4f:1b:52:18:cf:15:33:d1:a2:48:d4:16:94:
         71:31:5e:45:33:8e:54:d2:12:c5:07:93:c4:c3:b0:4d:a2:60:
         2a:a9:08:71:c5:5b:05:82:83:f2:17:16:e3:64:1d:2a:e6:f6:
         fb:2c:ff:26:8c:15:ff:ef:b2:74:4b:9b:cc:ae:8d:22:49:cf:
         bf:48:a6:d9:be:86:9d:95:4d:bf:c8:da:11:40:ef:cf:a7:ea:
         e4:84:57:c4:9b:34:80:ab:11:5d:f3:12:fe:a8:ef:1f:d3:84:
         bb:27:07:9b:d1:4b:69:b5:42:f9:d3:85:5f:cb:93:c1:8e:84:
         80:81:de:1c:28:df:0d:86:44:58:40:e3:fa:85:4e:33:88:68:
         8f:da:99:80
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICHPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw
MDNFNEJCNzUwHhcNMjYwODA0MTQxNzIzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcxZjQ3My02OTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqetAuVeFyR3vgMkcQYQBu+M2Jg4OQosTYMMomwTacesshOgv/+sOHHS/soR7
Z1W6bRWd3j0oFcwW4XScC/kV7wQA4u3A3j25CZ7Mx3UDTKRFAdbQe4E82OZW32px
+2LkUVUmmp6iO9ogowT35aokZ5GKufotKJY89zLDlqnVsy210zAaOQvkNlPrCt67
MXIKTXDkc48sRhdCgspXRgNNSaUUmAYnWpuhBo2uEku1ihi8wjF2PmAXDe/ZpJ/V
HP4QjyJ5JRXuxXejjixxDL8t0/OscXmbtXDwPNRNq1t9NhJUmteNZvmPrpgsLew0
QF1OIBF1XYthQcPhUq1o1FcoiwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFI2WKaGf
08u8my6akkHAh5A+qzDjMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE
NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEFBNzgvNjhEMzM0OTBGRDY0MTFFNkExMDk1NDgzQzRGOUFFMDIvQjAwNjkwMTgy
OTI1MTFGMTk4NjA0QTA3OUU4MzM3NzMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh
BAIAAjAbAwcAJAJ5wPAIAwcAJAJ5wPAKAwcAJAJ5wPD5MA0GCSqGSIb3DQEBCwUA
A4IBAQCKX5ff35AlHYEkkn34vfLh/XKxZhJE64Out7TRqx6c/9nOCZnTOdb9sxgG
85vH1gx2HrxOzfRa4LvDHu4hQh2Z0zaPqNJZabhgHYrvf57jvj1RFSPoT+nTiXjW
uZr0unXGIhNLyLHQSg/cFfINl5e8zU8bUhjPFTPRokjUFpRxMV5FM45U0hLFB5PE
w7BNomAqqQhxxVsFgoPyFxbjZB0q5vb7LP8mjBX/77J0S5vMro0iSc+/SKbZvoad
lU2/yNoRQO/Pp+rkhFfEmzSAqxFd8xL+qO8f04S7Jweb0UtptUL504Vfy5PBjoSA
gd4cKN8NhkRYQOP6hU4ziGiP2pmA
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:42:08 2026 by rpki-client