Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A6F940403711EBB87CD90DC4F9AE02.roa
File:                     06A6F940403711EBB87CD90DC4F9AE02.roa (raw, json)
Hash identifier:          tuzhRvQ7QpfQXKNFAKAdlNAZUUaKO9xV8VMkaQshaAQ=
Subject key identifier:   04:17:F2:6F:43:73:AD:73:D8:45:33:BF:05:D3:7D:09:4A:8F:02:A3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F0CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A6F940403711EBB87CD90DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:54:03 +0000
ROA not before:           Mon 06 Jul 2026 16:54:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136375
IP address blocks:        2001:df2:9280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61643 (0xf0cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:54:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bddab-ce32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:47:06:90:ee:d1:bb:ce:83:00:77:b9:59:
                    51:19:53:49:7a:6d:e3:c8:44:63:dd:f5:c0:fd:5b:
                    28:0a:a8:2a:ba:39:80:ba:66:13:72:c1:99:46:23:
                    4e:0f:6d:0c:5b:88:24:cb:af:be:c5:e5:e6:25:83:
                    7b:a3:3c:38:f5:ea:49:47:2e:3b:0f:d9:f3:94:d5:
                    ce:b5:92:21:46:f4:aa:1e:86:d6:e0:2a:1b:12:09:
                    76:dc:d5:30:dd:82:1d:53:69:f5:a3:0b:3b:2b:51:
                    c3:af:56:ff:10:27:b6:a0:61:d9:0c:fe:85:bd:9b:
                    6a:53:30:f9:c4:5a:37:36:41:21:14:fc:0b:19:0f:
                    9c:54:3f:33:4d:47:92:84:d2:07:4f:ae:19:3d:a2:
                    b4:3c:6f:24:3c:26:a4:61:02:91:f2:89:9b:8f:4c:
                    96:aa:a0:ae:25:63:da:a3:cb:be:cc:d3:68:ac:a0:
                    25:19:e4:e6:b4:96:f3:45:e9:fb:99:27:f6:e7:bb:
                    24:dc:31:21:d7:97:0e:e4:cd:44:3c:fe:7d:33:14:
                    4b:2e:46:99:83:74:4e:22:62:14:0d:b6:e0:7b:d8:
                    6a:7e:0d:8b:a5:2b:0f:f8:49:87:9c:6e:f1:a4:fd:
                    99:92:54:04:e0:36:e1:1e:df:fe:d1:65:c8:6a:5e:
                    a7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:17:F2:6F:43:73:AD:73:D8:45:33:BF:05:D3:7D:09:4A:8F:02:A3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A6F940403711EBB87CD90DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:9280::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:58:2d:fa:49:26:e4:8b:4e:d7:db:92:aa:11:01:cc:e3:00:
         93:66:a7:13:e8:57:76:17:89:19:22:18:f3:dc:fc:ef:b2:a6:
         1a:8f:e6:9f:0f:b1:13:78:fd:f9:ef:b2:1e:c9:32:4d:02:95:
         22:f4:b9:84:4f:0c:0b:87:1b:b6:2b:99:34:be:a7:d2:4b:e0:
         95:f3:94:d8:c6:72:26:b8:ce:4a:c0:81:8e:b4:e7:17:2d:f4:
         76:ac:3d:32:db:d9:4f:ad:10:63:8f:bb:1a:bf:ea:16:e6:e7:
         b7:0a:1f:c6:df:fe:57:0a:93:80:f9:d1:33:c8:4a:5d:3c:35:
         fe:46:ff:14:cc:b8:e6:f9:83:52:0f:17:84:6a:86:cf:34:a4:
         17:3d:59:58:f6:fe:78:11:ee:8b:ef:d2:cd:e8:3b:c6:00:25:
         35:46:8a:5b:2d:29:fa:7c:5a:3d:64:de:51:99:ad:b9:99:3f:
         26:cf:e6:6e:14:c1:74:f1:92:e6:74:94:d2:f6:ea:f7:cf:14:
         fc:ed:dc:36:26:29:44:03:68:d8:53:18:9d:f0:ab:30:b9:58:
         e3:53:bd:b4:8f:34:15:4b:52:c5:b9:9a:c5:dc:e1:af:de:28:
         b4:11:c2:41:12:d1:2a:cf:ef:c2:0b:1d:79:43:bc:f7:a2:34:
         84:51:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:02 2026 by rpki-client