Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11F7D17C24F111F0964C5246C4F9AE02.roa
File:                     11F7D17C24F111F0964C5246C4F9AE02.roa (raw, json)
Hash identifier:          gp21qvV5LcTzueeKHQO9bYKfvzBXtDIZ6RbOG5IYjIc=
Subject key identifier:   30:2C:FA:A7:4B:41:80:37:D0:2E:5B:85:EE:D4:2E:F2:DC:A6:7D:FA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E792
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11F7D17C24F111F0964C5246C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:19:58 +0000
ROA not before:           Sun 31 May 2026 17:19:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142446
IP address blocks:        2001:df6:e280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59282 (0xe792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:19:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6dbe-0b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:41:50:35:49:60:68:a9:85:3d:59:3f:a3:
                    9d:11:38:a4:70:3a:b6:a2:ca:29:0a:07:4f:12:ac:
                    ff:72:a2:dc:8a:70:6e:99:56:34:ad:90:32:69:d0:
                    89:f4:cd:aa:98:88:4c:78:22:5d:a7:eb:3d:1b:94:
                    e6:b7:a3:4b:49:ba:fe:b3:7b:6b:13:5f:4f:0f:96:
                    bc:5d:6a:3a:13:a2:4e:39:5c:a1:3d:af:71:49:ce:
                    bc:24:c7:c9:5f:a1:ab:f2:27:15:de:fa:98:c7:4a:
                    db:5a:99:77:3d:7e:aa:7a:df:8e:7e:c5:83:4d:f8:
                    01:31:4e:ed:82:65:6e:76:49:2c:16:02:0b:89:77:
                    17:b2:2a:13:a0:e7:9c:71:bd:25:96:1b:1c:a1:fe:
                    db:23:03:f4:67:ad:f1:62:65:29:6f:05:c0:ac:07:
                    dd:cc:1c:98:4b:07:f7:9c:86:8a:44:17:5e:35:c6:
                    f4:70:31:ac:9c:49:49:02:bd:e4:86:e7:12:f2:79:
                    39:bd:95:51:91:af:62:6f:f1:2d:da:51:bd:69:e3:
                    c6:38:0b:55:5f:43:1c:42:c5:e5:57:6f:e0:cc:de:
                    53:9c:e4:a1:00:66:05:0e:15:0d:3d:28:3b:39:2e:
                    e6:12:21:db:d0:e9:88:75:a6:ad:b9:c2:04:35:59:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:FA:A7:4B:41:80:37:D0:2E:5B:85:EE:D4:2E:F2:DC:A6:7D:FA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11F7D17C24F111F0964C5246C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:e280::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:39:08:ca:83:69:eb:35:92:52:42:80:ff:b7:c8:27:d9:62:
         39:80:50:44:85:7b:3b:64:55:b6:16:06:f8:04:38:09:24:48:
         04:64:06:b1:1d:e6:c0:df:e8:88:96:43:af:a6:d5:9d:0b:6c:
         79:b4:aa:9c:8a:59:c5:3e:b5:ec:d1:c5:fa:5d:9e:e5:b4:0b:
         e3:95:86:c9:3c:7a:4d:83:0e:83:a5:b3:cc:09:28:61:99:f6:
         b3:89:00:4c:21:2e:3c:27:a7:df:57:39:3f:3f:96:f3:7a:ef:
         c4:cb:98:05:58:66:54:56:ce:1f:2f:3e:2d:f1:91:91:a8:11:
         6f:0c:9d:12:3d:c4:02:99:90:cd:99:10:63:64:d6:a2:9f:2a:
         64:8f:bc:f9:ab:d3:6c:c9:1c:1b:bb:6f:7d:ad:31:67:5c:9e:
         93:69:6b:bb:47:34:16:26:a2:0b:58:8a:7e:d5:fe:49:9b:ce:
         be:08:32:d4:ab:a2:ae:d0:a3:38:f2:eb:fa:5b:99:4d:12:de:
         ff:fd:e7:f5:77:97:15:8a:c3:5b:2a:d9:06:a8:f2:42:80:07:
         a5:a8:02:0c:c0:aa:1e:a1:55:6c:5c:8a:00:4d:52:12:57:0c:
         87:dc:a6:94:cb:7e:b7:0c:90:fc:83:5b:6b:3a:c2:ad:54:f3:
         bb:ef:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:25 2026 by rpki-client