Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30BD6568A1FA11F19BE72A774111F970.roa
File:                     30BD6568A1FA11F19BE72A774111F970.roa (raw, json)
Hash identifier:          xO3HDDKL/qvHphnyCFMqa84nmQJB8xnR0H0sIXaGsZE=
Subject key identifier:   63:F7:86:1A:50:ED:48:FA:FE:CA:78:02:77:F8:AC:DD:AB:DA:B8:E7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FB2C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30BD6568A1FA11F19BE72A774111F970.roa
Signing time:             Thu 27 Aug 2026 09:32:16 +0000
ROA not before:           Thu 27 Aug 2026 09:32:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152154
IP address blocks:        2402:4f60::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64300 (0xfb2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 27 09:32:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a900420-b0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:64:93:bc:56:26:32:01:0c:db:31:9e:23:
                    91:08:ab:d5:a3:27:ac:49:34:95:aa:be:87:ab:0f:
                    72:e2:68:fb:8d:b7:cb:2b:fa:0c:22:ed:5b:a0:c2:
                    a0:68:24:53:27:6f:82:42:82:5b:56:4c:93:5d:42:
                    94:17:e9:06:9f:83:94:e3:38:6b:60:9c:7e:47:ae:
                    9f:b0:64:4f:b6:76:e1:fc:5d:88:5d:b4:09:28:b1:
                    cc:c4:95:b9:99:31:ef:cc:fc:36:b7:0b:ad:07:cc:
                    08:18:04:37:39:85:f8:fd:a5:0f:3f:e9:ed:97:ed:
                    14:dc:f9:7c:02:40:df:f3:64:f1:89:fe:7e:ff:a9:
                    34:c5:8e:af:7d:14:06:d4:5e:aa:14:0e:14:11:72:
                    66:99:2c:ec:e9:5f:97:83:62:e1:b4:7e:d1:2e:77:
                    fe:49:4d:c7:f1:5a:c2:92:9c:3a:aa:c2:3d:99:29:
                    4b:f2:49:a5:85:4a:ef:19:1c:47:25:16:1e:b3:9a:
                    38:06:d4:ce:9d:13:b3:32:9a:6d:a7:d9:c5:7e:24:
                    3a:70:85:8e:a8:ca:70:98:d1:16:b6:5f:f2:d8:81:
                    c8:07:cc:11:4b:fe:f1:bc:54:b8:b1:0a:df:fb:41:
                    48:5b:82:94:1a:f7:b7:6c:02:57:ab:d0:9a:b9:ce:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:86:1A:50:ED:48:FA:FE:CA:78:02:77:F8:AC:DD:AB:DA:B8:E7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30BD6568A1FA11F19BE72A774111F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:e1:ce:ad:a5:cd:3d:36:cb:f8:3f:97:00:d0:57:d3:87:
         f6:ed:e3:db:15:03:cb:f4:0b:58:2e:1b:a3:fd:bd:f3:39:17:
         fe:a1:25:39:67:43:73:40:ab:85:0b:fa:df:8f:b4:12:94:1f:
         30:bb:fe:5d:b7:23:ae:56:89:61:1a:96:6f:f5:30:fb:9e:98:
         8f:cf:fd:1a:5c:d5:0d:f2:f2:a5:d6:3a:05:2a:4f:da:e2:d6:
         ca:55:53:19:c4:77:8b:38:8b:51:b7:4a:5e:4d:20:4e:ab:92:
         4c:15:35:ff:de:0c:b6:e8:52:ba:31:6e:db:49:5c:c9:e5:08:
         e5:a7:80:15:8b:e0:da:e9:18:d6:61:88:b3:7e:f0:d7:1d:25:
         ad:58:52:89:e8:63:f0:e3:ad:60:63:68:d7:d8:e8:ad:c3:a9:
         b7:79:56:dc:87:1f:17:df:34:87:44:af:fb:1f:e9:ff:bc:fe:
         c0:7c:40:da:f2:ea:71:1b:fc:15:40:2b:cf:b0:6c:3d:4f:8d:
         31:dc:55:11:4f:f2:eb:01:ef:81:d9:92:ed:56:b0:de:0f:0d:
         84:75:37:db:fe:36:a6:09:62:e9:02:85:ee:49:0a:1a:f0:ab:
         10:2a:36:47:43:83:01:30:3d:39:bc:77:74:a7:cb:c0:a6:2d:
         cb:96:28:0e
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIDAPssMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDgyNzA5MzIxNloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE5MDA0MjAtYjBhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhfZJO8ViYyAQzbMZ4jkQir1aMnrEk0laq+h6sPcuJo+423yyv6DCLtW6DC
oGgkUydvgkKCW1ZMk11ClBfpBp+DlOM4a2Ccfkeun7BkT7Z24fxdiF20CSixzMSV
uZkx78z8NrcLrQfMCBgENzmF+P2lDz/p7ZftFNz5fAJA3/Nk8Yn+fv+pNMWOr30U
BtReqhQOFBFyZpks7Olfl4Ni4bR+0S53/klNx/FawpKcOqrCPZkpS/JJpYVK7xkc
RyUWHrOaOAbUzp0TszKabafZxX4kOnCFjqjKcJjRFrZf8tiByAfMEUv+8bxUuLEK
3/tBSFuClBr3t2wCV6vQmrnOFN0CAwEAAaOCAmEwggJdMB0GA1UdDgQWBBRj94Ya
UO1I+v7KeAJ3+Kzdq9q45zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMwQkQ2NTY4
QTFGQTExRjE5QkU3MkE3NzQxMTFGOTcwLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQCT2AwDQYJKoZIhvcNAQELBQADggEBAFf14c6tpc09Nsv4P5cA
0FfTh/bt49sVA8v0C1guG6P9vfM5F/6hJTlnQ3NAq4UL+t+PtBKUHzC7/l23I65W
iWEalm/1MPuemI/P/Rpc1Q3y8qXWOgUqT9ri1spVUxnEd4s4i1G3Sl5NIE6rkkwV
Nf/eDLboUroxbttJXMnlCOWngBWL4NrpGNZhiLN+8NcdJa1YUonoY/DjrWBjaNfY
6K3Dqbd5VtyHHxffNIdEr/sf6f+8/sB8QNry6nEb/BVAK8+wbD1PjTHcVRFP8usB
74HZku1WsN4PDYR1N9v+NqYJYukChe5JChrwqxAqNkdDgwEwPTm8d3Sny8CmLcuW
KA4=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:38 2026 by rpki-client