Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B0ED2EA7BF211EF90202B73C4F9AE02.roa
File:                     1B0ED2EA7BF211EF90202B73C4F9AE02.roa (raw, json)
Hash identifier:          P9KXH9YlZ60DJpb3vhPWlPWfwPbhZO6kaxFSLMIEIFM=
Subject key identifier:   EE:45:82:18:3A:B5:84:90:4A:AE:B9:C5:48:50:2E:CE:02:E3:2A:5F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F68B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B0ED2EA7BF211EF90202B73C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:42:50 +0000
ROA not before:           Mon 06 Jul 2026 17:42:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153244
IP address blocks:        2401:c360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63115 (0xf68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:42:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be91a-b112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:a6:7e:6f:3a:15:95:2a:f7:ce:40:a7:f9:
                    62:48:bb:4e:68:da:d0:54:c8:61:8c:8d:82:8d:05:
                    05:6e:17:e7:e8:6b:e7:3b:02:01:4d:79:ff:e3:19:
                    fe:af:6c:86:29:67:8a:60:bf:1d:14:a8:3e:68:5c:
                    c0:26:b4:a1:0a:2f:e0:c8:14:64:bd:b4:f3:60:26:
                    cf:3c:cc:24:bf:c1:f9:70:dc:ca:53:a1:c8:f2:be:
                    64:06:9b:6f:0f:c4:ae:b0:5e:0f:a3:28:b2:08:6c:
                    4a:5a:1f:98:90:ab:a0:07:42:fd:fd:0a:fe:10:1a:
                    6a:2c:66:4a:cd:f2:11:57:b9:a7:a7:d4:75:69:98:
                    29:89:fc:1f:09:b3:71:79:17:0b:02:d1:e0:b9:99:
                    a0:a6:f2:7b:b7:89:89:fd:92:27:87:20:20:6c:b2:
                    cf:cf:da:bd:f0:1c:aa:a1:1b:db:39:c3:82:8d:c4:
                    9f:8e:3b:b2:6f:5e:91:79:46:1f:43:ab:54:17:b8:
                    43:5d:e4:c5:1c:54:a5:b5:42:0a:40:3a:85:ec:76:
                    98:4a:29:dd:98:93:cd:45:8e:19:b7:67:a7:79:30:
                    a0:54:5b:60:f8:e2:60:06:f8:a4:0e:cd:62:d2:09:
                    35:79:c7:cb:20:60:1b:56:53:1c:04:5c:85:94:bb:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:82:18:3A:B5:84:90:4A:AE:B9:C5:48:50:2E:CE:02:E3:2A:5F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1B0ED2EA7BF211EF90202B73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c360::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:a4:8f:6b:1f:e2:d8:41:0b:3d:03:f4:84:b7:41:e0:95:
         61:56:b9:5f:fd:b2:c5:c7:c3:7f:47:08:a2:ad:38:ab:bf:32:
         59:f6:ab:28:46:56:e9:50:fd:cc:d0:0c:ce:b5:db:37:b0:64:
         6a:5a:58:60:07:2a:60:7f:74:50:bb:5d:60:fc:7f:9d:2f:d5:
         e5:5b:69:3b:9b:e2:ff:f7:20:f2:e2:b4:32:55:93:17:81:b6:
         bb:bf:ac:ad:8f:7d:26:25:4e:a2:82:eb:2c:2e:9d:19:ea:d5:
         80:e7:86:2b:79:81:69:a7:1a:77:be:ce:84:36:30:47:0a:32:
         2d:12:47:8a:43:29:f2:a9:90:70:ec:79:7a:6e:7f:ff:72:2a:
         22:58:0f:5d:54:14:85:d9:19:6b:fa:0f:d1:9d:e4:55:2e:25:
         2c:65:12:71:b3:a7:74:d8:35:77:fe:eb:92:b4:15:8c:e2:be:
         13:43:7d:1d:79:1c:94:a2:70:35:eb:c8:47:2c:58:ea:95:c7:
         1f:c1:db:d6:2b:98:ea:23:99:5c:7a:b7:65:b1:09:dd:23:8f:
         38:01:87:30:8c:aa:b7:03:1f:05:bd:e3:83:ff:07:6b:bf:b3:
         c5:ff:34:68:22:61:b3:eb:39:6b:b7:c1:df:f9:79:2e:72:5d:
         08:30:ef:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:56 2026 by rpki-client