Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa
File:                     12615B88BDE011EAAEA46554C4F9AE02.roa (raw, json)
Hash identifier:          kuwsPBShaFjwbgh7r75KVr1bI0qH3vfZNfTNGOlkx7Q=
Subject key identifier:   55:1B:92:32:E7:7A:01:49:6A:B4:3A:98:C0:96:89:74:FE:D3:6B:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E606
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:06:56 +0000
ROA not before:           Sun 31 May 2026 17:06:56 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138770
IP address blocks:        2001:df1:9980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58886 (0xe606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:06:56 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6ab0-4a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:89:13:56:e9:04:a2:be:11:d8:cd:5e:d0:
                    fb:01:1a:97:91:20:50:6e:83:26:67:b7:67:a0:87:
                    ef:d3:8f:c9:ee:77:fc:8e:15:cb:ad:64:28:57:3c:
                    d3:83:b4:78:ec:56:1c:49:38:59:6c:ff:54:3a:98:
                    8b:bb:26:cc:93:ce:22:84:20:10:bb:5a:01:e4:c6:
                    96:38:97:10:42:3c:f6:4a:b9:ff:a0:41:fd:9f:60:
                    ee:42:3b:7d:d9:f9:e2:db:18:09:81:39:25:30:13:
                    e6:6e:5b:e7:34:9c:38:a9:4f:bb:65:b1:17:1d:64:
                    d8:8f:f1:aa:f8:e0:13:5d:b4:5f:2f:aa:5e:d1:00:
                    43:ad:d2:fc:c4:fb:e1:12:b9:47:3b:dd:10:74:27:
                    1b:2e:0f:00:0e:49:5f:90:bc:a4:f5:fc:59:ca:e1:
                    ae:40:d4:6e:6b:6e:07:2e:9c:57:e3:54:21:51:cb:
                    76:2b:ce:6d:33:18:45:50:bb:07:a2:f5:d8:cf:e6:
                    9e:ab:cf:84:61:78:92:ad:b8:05:41:d3:de:4c:36:
                    0b:fe:cd:c2:79:82:3f:7f:06:32:08:52:5c:c3:f7:
                    ea:ec:3d:e3:e0:a0:3c:0e:90:e5:69:74:a5:d5:a1:
                    31:db:92:05:fb:94:f0:ad:7a:a8:db:d6:64:84:06:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1B:92:32:E7:7A:01:49:6A:B4:3A:98:C0:96:89:74:FE:D3:6B:ED
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:ab:82:cf:18:3b:58:b9:a5:5d:d4:dd:ca:6c:38:c0:eb:
         a7:e4:33:06:89:68:4b:ca:64:11:84:cc:03:29:29:05:00:c6:
         9c:31:ee:d9:71:d8:98:38:f1:7f:af:5a:20:c6:77:7c:af:fd:
         e4:93:ba:2e:d5:d6:4f:af:c6:82:b1:84:79:40:a2:c5:02:07:
         c8:bc:c9:7e:c6:fd:22:70:22:3c:07:2d:56:25:cd:10:24:62:
         b0:b8:f5:ed:9f:38:eb:fc:88:f7:ae:54:fd:96:7e:d7:d6:5b:
         85:a3:ce:a9:25:fa:ca:80:9f:50:fd:7a:61:92:0a:8b:34:c5:
         1c:fc:15:ee:9e:6c:24:db:ef:f4:60:46:d7:13:4c:b4:19:dc:
         25:d5:00:79:e5:f6:96:3e:eb:9f:cf:59:3f:fb:2f:a6:3c:8c:
         bf:7b:2e:42:81:46:bb:37:e2:17:91:a9:28:94:18:f7:61:5e:
         7f:55:f3:54:5e:ab:f8:e8:b6:bd:b1:98:ba:55:24:59:44:4b:
         21:88:03:e5:6b:0e:81:13:54:c4:6b:b5:7c:fd:dc:91:8c:b7:
         a9:df:66:bf:dc:40:71:fb:10:17:52:48:62:3a:26:54:bc:16:
         c7:dd:c1:16:5a:42:ae:f4:40:9c:9b:8a:81:28:e7:3d:53:8d:
         78:f4:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:14 2026 by rpki-client