Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/6C92164E8E7111F095FEDD1FC4F9AE02.roa
File:                     6C92164E8E7111F095FEDD1FC4F9AE02.roa (raw, json)
Hash identifier:          hEwvb5ytkKxxM9O8jHrWeJCH/b+Oa1+Ladz4E/XqvoQ=
Subject key identifier:   44:4B:50:92:B5:F7:E2:96:50:B8:2D:10:65:52:7E:05:9B:24:F6:3E
Certificate issuer:       /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial:       035C
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/6C92164E8E7111F095FEDD1FC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 01:34:43 +0000
ROA not before:           Tue 03 Mar 2026 01:34:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137409
IP address blocks:        2404:5d80:6800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
                          rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 00:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
        Validity
            Not Before: Mar  3 01:34:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a63ab3-ce27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:cf:1a:b6:86:c2:f9:76:13:95:d9:dd:05:
                    66:7f:2e:a0:03:2d:15:77:2a:8b:75:79:49:b7:84:
                    20:bc:5a:34:b5:5b:a8:1f:1f:49:6e:bf:ad:03:c0:
                    25:21:86:a2:52:69:61:6c:cf:0c:26:ed:b0:3d:25:
                    7d:1c:e8:0e:3c:86:25:61:d7:1f:ae:d9:61:47:3a:
                    c3:4b:fe:bd:15:22:1f:42:86:86:52:21:87:be:5e:
                    41:82:de:3b:93:a4:e0:10:00:6f:c2:b9:64:11:01:
                    be:82:9a:bc:71:b3:73:24:02:11:11:ad:cd:f0:b5:
                    5a:20:38:68:5a:68:19:21:cd:ca:3e:ea:fc:1c:9c:
                    3c:f9:61:be:3c:d6:27:b3:bc:ba:ef:1d:ce:3a:a7:
                    ed:ea:f2:98:21:d2:1c:d9:00:2a:33:b9:2a:38:94:
                    9d:c3:45:ea:10:b7:d4:48:7d:49:ee:66:67:6f:26:
                    8f:f3:a5:4d:94:ff:2c:fa:c2:04:51:3f:16:b8:63:
                    3b:3e:d5:ed:09:4c:d9:24:9e:52:9f:77:4e:96:ef:
                    e2:cc:9d:82:12:41:70:84:82:43:38:52:8b:90:c0:
                    60:fd:60:d3:2e:9f:95:1a:c3:d9:fb:02:68:be:9b:
                    55:ca:9f:53:17:8c:d3:6d:af:be:9b:76:82:5b:89:
                    41:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:50:92:B5:F7:E2:96:50:B8:2D:10:65:52:7E:05:9B:24:F6:3E
            X509v3 Authority Key Identifier:
                keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/6C92164E8E7111F095FEDD1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:5d80:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:09:e7:13:9c:9e:b7:92:bf:75:7f:13:8c:53:7b:15:d7:
         6c:39:47:82:6d:77:04:f4:b3:a9:0d:6f:0d:d7:f6:cb:a1:98:
         2d:eb:7d:d9:7f:09:74:84:02:a7:72:26:09:44:45:e2:75:07:
         55:7e:39:f0:a8:36:21:97:91:c9:3d:70:f3:5c:8e:d7:08:3f:
         b8:a5:30:e4:73:7e:5b:cf:a3:eb:14:8c:ad:79:8b:8c:aa:37:
         8f:d2:22:8c:9f:a3:45:25:fa:68:1d:00:03:77:66:47:81:c5:
         10:c5:23:e4:b6:08:83:6f:8f:c8:ff:29:41:02:3c:0d:d7:e7:
         7a:f9:79:15:db:61:28:82:62:19:b5:5d:a5:4b:cd:10:73:4b:
         1b:a5:f2:de:04:1c:27:20:ae:8a:a4:ac:87:b3:7f:8b:71:07:
         fa:5c:52:b2:1d:b2:19:b8:61:62:38:07:d1:48:fb:85:6b:fc:
         b4:51:48:c8:d2:2c:c9:1d:c9:ef:2c:24:4f:f8:a1:f3:e5:2d:
         3d:be:cc:30:44:93:db:e7:a4:b5:9e:32:3e:eb:57:c1:f2:90:
         ce:36:a9:10:39:98:0c:17:40:e5:6f:39:59:83:fa:bf:48:77:
         4d:67:c2:d5:bc:50:a2:4b:17:0b:ad:1e:fd:6b:4c:aa:54:a5:
         3e:45:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:55:39 2026 by rpki-client