Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CF876F84A5311EF979C0731C4F9AE02.roa
File:                     2CF876F84A5311EF979C0731C4F9AE02.roa (raw, json)
Hash identifier:          WspdBCtn0P+yVVW5lkkXj0swwLXPl2PihqjnBrzFcR0=
Subject key identifier:   9C:03:8D:76:FB:B1:5F:3B:DE:C3:A9:E9:00:0B:5C:1F:6A:8C:54:27
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F7A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CF876F84A5311EF979C0731C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:52:34 +0000
ROA not before:           Mon 06 Jul 2026 17:52:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58758
IP address blocks:        2406:f00:2::/48 maxlen: 48
                          2406:f00:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63400 (0xf7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:52:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4beb62-bb12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:a3:df:8a:60:9c:be:8d:18:6c:52:f5:5d:
                    9d:0f:64:e0:e2:cf:58:9e:e1:97:f0:b3:7a:9f:1e:
                    08:7d:f6:62:23:00:e8:dc:84:b2:e2:62:a2:2c:6d:
                    4b:a5:11:a5:8a:1d:6e:50:0c:82:5c:27:57:78:e4:
                    71:3d:7b:a8:13:52:a2:76:e8:45:bc:f4:a2:03:11:
                    bb:65:d4:0a:ac:6d:a5:2d:86:24:e6:be:9c:bf:ba:
                    b5:79:ac:5f:39:fc:02:91:e9:68:ed:a9:99:d8:ac:
                    f9:3d:7f:18:a2:cc:78:a8:85:71:9d:d7:94:09:1e:
                    ec:68:5e:a3:2d:50:8b:68:25:21:62:6c:5b:9f:02:
                    80:8f:ee:f3:9e:48:f0:c4:33:10:62:65:be:1a:03:
                    fe:5a:a1:4c:2f:6f:76:35:93:3e:2c:7e:27:6d:20:
                    2f:dd:9d:87:bd:3f:17:41:c2:df:48:3a:21:cd:94:
                    fb:c6:01:fe:27:cb:9f:ac:c0:18:5b:b3:9a:e0:2f:
                    5b:05:e8:72:17:81:ce:50:a4:24:65:ba:8e:1c:ff:
                    4a:b1:83:6e:ae:37:52:4e:13:44:79:be:3b:65:c5:
                    18:22:f9:0a:be:f6:c3:2c:52:86:b8:42:17:01:c4:
                    18:0a:dc:1f:f1:b5:76:65:32:01:3b:ed:91:97:3a:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:8D:76:FB:B1:5F:3B:DE:C3:A9:E9:00:0B:5C:1F:6A:8C:54:27
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2CF876F84A5311EF979C0731C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f00:2::/48
                  2406:f00:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:be:28:66:1d:56:dc:ea:de:b4:77:f8:80:88:a9:a7:50:
         a2:06:42:c4:aa:5f:fd:60:43:55:89:25:ea:9e:27:59:4e:67:
         6c:20:48:02:95:76:84:1d:53:ed:ef:ce:96:36:b7:96:c3:92:
         50:94:9f:71:c5:dd:9c:c7:84:84:24:74:40:2e:84:f3:8a:8f:
         e0:47:6b:8f:42:71:33:74:74:9e:30:dc:90:fb:b9:c9:af:2f:
         57:34:be:0a:b3:c3:64:46:12:1b:c7:ba:c2:27:59:1b:54:2c:
         0e:db:1b:cb:1d:80:9a:0c:b6:a6:d9:a1:9b:03:cf:4e:1c:54:
         35:4a:73:9e:3f:d9:04:c0:86:a0:36:09:18:5a:98:3d:8b:f9:
         f8:52:6b:5e:9e:de:d5:f6:7d:ae:29:7a:04:2a:1e:95:4d:e4:
         db:b1:0f:be:d1:40:3c:9b:00:c9:06:1f:2c:63:85:d1:25:ed:
         13:95:80:72:ef:c6:21:b0:12:aa:ee:7e:8b:08:9a:06:da:b7:
         ff:df:fd:b6:3e:b8:6c:5a:8e:26:db:bb:45:05:7b:bd:f9:a6:
         35:07:c8:31:1d:16:01:ad:37:f0:8e:13:e3:97:ee:28:99:15:
         37:87:7c:17:76:be:b1:2b:1e:17:27:3f:dd:c1:f2:84:86:22:
         82:f5:b4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:45 2026 by rpki-client