Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/010C3F02D1D411F084EFC676C4F9AE02.roa
File:                     010C3F02D1D411F084EFC676C4F9AE02.roa (raw, json)
Hash identifier:          CgesI2jeIF/MR3jaSBT5Nk52iXa8G5nwXK9D6qfAF9Y=
Subject key identifier:   EA:EB:2C:F4:F4:74:4C:63:AF:C8:8A:2A:D4:16:43:1F:52:4E:F3:43
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/010C3F02D1D411F084EFC676C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:45 +0000
ROA not before:           Sun 31 May 2026 17:47:45 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154403
IP address blocks:        2001:df6:65c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60132 (0xeae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:45 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7441-ba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bd:46:87:35:82:f8:4e:aa:1b:9e:81:83:d5:
                    b2:aa:26:17:50:6b:a6:9f:e3:99:86:ad:3d:10:60:
                    a5:e6:b2:bc:80:ec:34:1b:ca:c1:aa:e1:82:47:38:
                    b6:53:7d:36:23:94:81:f3:f6:59:20:a3:3a:21:3d:
                    84:79:fa:ed:c7:e9:18:a4:ea:bd:85:bb:ea:79:ea:
                    df:63:da:ed:4d:e4:ea:ac:79:c5:1a:c4:50:05:ca:
                    b0:a3:29:ef:0c:f4:4f:75:25:41:6f:7b:a3:06:7c:
                    ef:0f:50:94:11:a0:16:aa:f6:af:cb:54:51:3f:3d:
                    41:64:e0:43:e6:a0:47:56:a6:c3:59:7a:ef:2c:c4:
                    9a:c2:3b:c8:96:9d:0c:12:52:82:55:46:f2:ed:59:
                    74:a6:6d:7c:f1:e0:10:88:eb:69:58:b5:be:5d:8d:
                    80:e3:b3:54:2b:a0:11:95:63:4e:bf:51:79:f0:65:
                    92:c4:6e:b6:4d:6c:a3:28:55:9c:da:67:2c:80:b4:
                    11:f9:d3:e3:35:67:8f:4b:ec:08:70:05:19:84:ee:
                    30:08:39:c3:9b:01:f2:13:cc:91:ba:f3:2d:06:7e:
                    c1:ad:1b:6b:bd:96:03:11:da:f4:21:89:65:21:31:
                    75:8f:2b:e9:9c:f6:1c:19:5a:b7:1b:d5:bf:16:9f:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:2C:F4:F4:74:4C:63:AF:C8:8A:2A:D4:16:43:1F:52:4E:F3:43
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/010C3F02D1D411F084EFC676C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:65c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:df:83:1d:28:00:1e:94:62:ab:16:c6:46:15:88:81:bf:
         db:e8:f0:87:23:c8:3c:c9:b2:cd:a5:29:9a:3b:4a:07:a9:0c:
         d4:50:a5:19:e1:ca:8d:dd:7b:91:cc:6a:a9:41:5b:35:4c:f4:
         f6:68:f5:83:23:7b:3e:a4:06:44:60:16:76:6b:44:f3:1d:3b:
         24:61:7d:21:7c:d6:e9:db:b9:f8:7e:f7:29:d1:e1:b5:56:30:
         81:27:a8:0a:b2:25:6c:f0:de:9a:ef:dd:12:eb:cc:0a:22:bd:
         3f:80:21:a2:25:29:12:ad:af:67:4e:80:9f:40:61:41:99:86:
         87:18:a8:47:ea:b6:cf:c8:24:92:37:d4:35:3e:6d:91:64:7d:
         c3:52:dc:4f:b0:8f:87:09:51:57:ef:bb:e8:d6:ae:15:4b:81:
         6a:29:15:c0:6f:84:3e:0b:4a:e3:51:63:d3:fa:59:b6:e9:a7:
         b3:7b:c7:95:66:98:5b:55:79:0a:d6:09:b1:41:bd:51:4b:28:
         d6:bc:a3:55:75:ef:c9:91:a6:76:4a:f4:51:f0:0b:ce:5d:5c:
         dc:72:46:d7:24:64:1d:fa:41:a1:d3:c1:4b:d8:f6:72:6e:38:
         45:39:95:5d:f6:2f:a0:d2:6b:87:3d:58:22:ea:4c:bd:37:3c:
         04:a8:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:25 2026 by rpki-client