Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27A30AF0031C11F1A326A1BF1A3D8C67.roa
File:                     27A30AF0031C11F1A326A1BF1A3D8C67.roa (raw, json)
Hash identifier:          I29/WZ22tWwKEW2riO6mLIiMIVBaedyCytYrRcqLuKo=
Subject key identifier:   00:71:B4:98:F1:9F:93:73:BC:FA:70:46:8C:29:6B:3A:F9:60:EF:6F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27A30AF0031C11F1A326A1BF1A3D8C67.roa
Signing time:             Mon 06 Jul 2026 17:18:28 +0000
ROA not before:           Mon 06 Jul 2026 17:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142213
IP address blocks:        2001:df6:9640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62376 (0xf3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be364-0f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:3c:05:aa:d1:4c:ff:c8:fd:aa:b7:e1:0b:
                    e8:ca:95:28:2f:0e:2b:49:05:28:0e:d3:fb:7c:20:
                    12:99:2e:bf:f8:5a:b7:e2:de:43:2f:fc:d3:db:ab:
                    0d:10:ee:a6:ae:b6:bd:c2:21:7b:50:74:da:8b:6c:
                    a1:73:5b:f5:bf:19:0f:6d:17:02:76:7c:20:86:e0:
                    af:cd:be:3a:c4:aa:c9:8b:d4:39:e2:0d:6b:c4:5a:
                    cf:f4:67:ab:de:c7:62:2a:7e:5e:cd:a3:37:99:ca:
                    e4:d3:04:23:04:7a:c9:63:7a:ef:34:0a:d3:bc:e2:
                    74:53:40:1f:1a:73:63:87:da:56:1c:a4:92:f2:2d:
                    2b:3b:04:ac:32:a1:be:2b:45:e6:db:b7:7c:83:02:
                    24:52:3e:b8:f4:3d:84:0b:57:43:6e:29:eb:67:18:
                    f6:ad:99:63:0b:89:5b:8b:52:9d:c6:64:12:c7:25:
                    0e:77:41:42:83:3e:95:89:d7:f5:02:b5:5d:04:0a:
                    51:3e:b0:d4:e8:91:86:01:82:f6:78:d5:39:50:5f:
                    fe:cd:3c:6e:4a:ca:6c:18:e4:75:39:30:79:1e:7a:
                    1a:c7:73:9f:44:c8:4b:66:9c:3e:19:91:aa:ea:a1:
                    7e:90:38:ff:cc:88:e5:06:4d:aa:67:02:68:cc:3a:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:71:B4:98:F1:9F:93:73:BC:FA:70:46:8C:29:6B:3A:F9:60:EF:6F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27A30AF0031C11F1A326A1BF1A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:9640::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:42:8e:b4:8d:e7:e7:8c:76:38:e8:7e:5c:4c:d9:9c:35:
         45:58:16:33:43:04:19:b9:14:b7:ac:51:f3:b5:33:fa:a1:53:
         00:ec:64:72:88:81:bc:c0:81:52:63:42:51:39:35:23:ac:03:
         ab:a5:df:c5:0d:3f:9d:1a:fd:76:82:3c:e1:7b:eb:32:97:78:
         5a:c7:72:04:f6:b6:a7:c1:23:5d:e4:e4:0b:f8:4c:da:44:86:
         74:4e:ba:49:ea:5c:8a:fe:74:b8:b3:2f:ea:eb:7d:16:50:e8:
         e4:7a:ef:c1:58:0c:84:26:3b:06:8a:a5:e8:04:24:57:c6:41:
         30:83:9c:6d:cc:bd:e0:ef:18:91:f8:ad:d8:71:46:99:03:7f:
         18:89:cd:bd:35:1b:0b:58:33:1f:88:70:ca:52:4a:cc:6b:59:
         e0:f2:7e:c6:48:32:dc:52:3c:e3:4c:5c:99:58:57:ed:6c:e9:
         4a:64:34:6e:cb:7a:55:9a:ec:e3:14:94:8b:69:1b:dc:b0:5f:
         ca:9d:53:d2:b6:85:cd:73:10:ca:c9:c2:19:78:91:82:c5:ee:
         0d:bd:19:17:a6:2d:16:2f:aa:eb:f5:71:04:f5:39:0f:52:b7:
         56:4d:a9:e7:ca:ea:d2:30:e2:5c:19:98:01:8b:cd:25:15:41:
         5f:01:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:33 2026 by rpki-client