Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa
File:                     0B71F7E6B5EE11EABBA2E915C4F9AE02.roa (raw, json)
Hash identifier:          yMKtklzpZRWFqe8M0piOTN1r78CKHbk4mdqZGVV7kpk=
Subject key identifier:   BD:1A:54:4C:2B:EA:7F:A2:41:1B:08:72:BD:C3:70:DF:90:BF:89:22
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E1D9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:32:21 +0000
ROA not before:           Sun 31 May 2026 16:32:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132524
IP address blocks:        2406:f00:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57817 (0xe1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:32:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6294-d292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:e7:53:df:3d:20:d6:0e:45:7f:58:55:70:
                    63:b8:1a:c7:54:06:fc:c1:f5:f5:0c:d3:c0:c0:1f:
                    a0:c6:a0:fd:d3:d5:28:dc:eb:2b:19:7a:b4:98:95:
                    08:f3:b3:cf:dc:28:a7:76:7f:da:60:3d:67:4a:d6:
                    b1:7e:d5:a7:d0:1a:41:c4:9f:dc:a4:72:37:8f:bc:
                    1b:01:8f:f8:d5:13:b8:8e:3e:f9:5e:af:0e:87:ff:
                    ea:56:5d:1e:2b:38:6c:3e:9b:11:97:60:d9:2c:1c:
                    8b:f4:28:30:9e:77:28:b9:4b:b8:42:60:e1:2e:b9:
                    93:a2:5e:80:9e:88:6f:68:1e:86:8e:56:a2:3d:9d:
                    86:79:bc:51:b6:d5:e5:45:33:80:28:42:c6:c9:d2:
                    68:de:a9:92:d7:c8:5d:4f:f8:37:e9:2f:ba:71:f1:
                    33:4f:4c:5e:78:ca:66:3d:8b:99:c6:ea:0a:39:57:
                    95:7f:20:87:bd:ad:a6:b2:fa:62:82:93:7c:60:e1:
                    1a:48:6d:30:c8:a8:c0:e3:cb:bb:8c:a6:2e:0f:e5:
                    33:c6:7a:40:c5:2e:89:15:68:8e:82:36:7d:20:5c:
                    16:81:a4:a2:9a:5d:31:8f:65:c5:72:04:c2:31:59:
                    1f:6a:21:a9:6c:a6:b5:78:e2:57:71:07:a7:be:1b:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1A:54:4C:2B:EA:7F:A2:41:1B:08:72:BD:C3:70:DF:90:BF:89:22
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f00:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:3b:3e:87:f7:5d:64:b5:bc:fe:19:0f:84:93:4a:77:e3:6f:
         a6:b6:43:c8:05:f1:21:e4:4c:1f:85:1c:d3:a1:05:f4:32:f7:
         b6:a6:e8:92:b3:04:70:c3:b0:a6:59:f8:3a:b5:ef:f9:6f:15:
         89:ab:50:4d:c6:a5:75:0c:43:a4:06:53:dc:76:8b:07:5e:ee:
         11:27:28:d7:50:18:1c:ab:0d:e0:5d:cb:85:42:33:40:79:7c:
         d2:38:ed:e8:8f:41:9c:50:1a:99:30:04:e7:b3:85:58:20:1d:
         f4:4f:33:b2:a7:d9:c4:d9:0a:0b:57:84:12:22:ba:41:cb:a1:
         96:ca:b1:f0:90:0c:f6:76:73:c9:a6:db:03:27:e6:72:3e:80:
         64:4a:89:2b:7a:9c:98:a3:66:93:8e:ef:ff:75:12:57:d1:a7:
         fa:1b:0d:4f:c3:b8:4a:ed:b2:3c:ce:9a:c7:08:3b:6e:9a:dc:
         12:5b:7b:b6:5b:f0:dd:9b:15:d7:b6:6c:ef:1d:40:df:ee:fe:
         00:88:ac:4a:92:99:78:14:64:3b:68:09:42:3b:03:d9:eb:0c:
         fc:14:ed:ee:2e:87:11:de:ba:b8:2f:8a:ae:c2:6c:6b:f4:b7:
         bd:61:74:a3:d2:64:60:92:28:87:1f:d0:9f:19:88:88:14:47:
         a6:58:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:36 2026 by rpki-client